fluent-bit: Do not apply to K8s nodes

We'll manage Fluent-Bit on Kubernetes nodes as a DaemonSet.  This will
be necessary in order to grant it access to the Kubernetes API so it can
augment log records with Kubernetes metadata (labels, pod name, etc.).

fluent-bit.yml

@@ -1,4 +1,4 @@
-- hosts: all
+- hosts: '!kubelet'
   roles:
   - role: fluent-bit
     tags: fluent-bit

group_vars/k8s-controller.yml

@@ -1,5 +1,4 @@
 collectd_processes: '{{ collectd_processes_kubelet + collectd_processes_controller}}'
-dnf_automatic_reboot: never
 
 keepalived_global_defs: |-
   max_auto_priority 79

group_vars/kubelet.yml

@@ -1,3 +1,5 @@
+dnf_automatic_reboot_command: touch /run/reboot-needed
+
 samba_interfaces:
 - '{{ ansible_default_ipv4.interface }}'
 host_uses_firewalld: false

roles/dnf-automatic/defaults/main.yml

@@ -1,4 +1,6 @@
 dnf_automatic_reboot: when-needed
+dnf_automatic_reboot_command: >-
+  shutdown -r +5 'Rebooting after applying package updates'
 dnf_automatic_email_from: root@example.com
 dnf_automatic_email_to: root
 dnf_automatic_email_host: localhost

roles/dnf-automatic/files/pre-reboot.sh

@@ -0,0 +1,7 @@
+#!/bin/sh
+
+find /etc/dnf/automatic/pre-reboot.d \
+	-type f \
+	-perm -u+x \
+	-exec {} \;
+shutdown -r +5 'Rebooting after applying package updates'

roles/dnf-automatic/templates/dnf-automatic.conf.j2

@@ -28,7 +28,7 @@ apply_updates = yes
 reboot = {{ dnf_automatic_reboot }}
 
 # The command that is run to trigger a system reboot.
-reboot_command = "shutdown -r +5 'Rebooting after applying package updates'"
+reboot_command = "{{ dnf_automatic_reboot_command }}"
 
 
 [emitters]