---
- name: Ensure OS packages are up-to-date
  apt:
    upgrade: dist
    update_cache: yes

- name: Disable swap
  sysctl:
    name: vm.swappiness
    value: 0
    state: present
    reload: yes

- name: Enable kernel modules required by Kubernetes
  modprobe:
    name: "{{ item }}"
    state: present
  loop:
    - overlay
    - br_netfilter

- name: Load iptables rules permanently
  lineinfile:
    path: /etc/modules-load.d/kubernetes.conf
    create: yes
    regexp: '^{{ item }}$'
    line: '{{ item }}'
  loop:
    - overlay
    - br_netfilter

- name: Set SELinux in permissive mode
  selinux:
    state: permissive