c12s-kubespray/roles/kubernetes/preinstall/tasks/main.yml

---
# Disable swap
- import_tasks: 0010-swapoff.yml
  when:
    - not dns_late
    - disable_swap

- import_tasks: 0020-verify-settings.yml
  when:
    - not dns_late
  tags:
    - asserts

- import_tasks: 0040-set_facts.yml
  tags:
    - resolvconf
    - facts

- import_tasks: 0050-create_directories.yml
  when:
    - not dns_late

- import_tasks: 0060-resolvconf.yml
  when:
    - dns_mode != 'none'
    - resolvconf_mode == 'host_resolvconf'
    - systemd_resolved_enabled.rc != 0
    - not is_fedora_coreos
  tags:
    - bootstrap-os
    - resolvconf

- import_tasks: 0061-systemd-resolved.yml
  when:
    - dns_mode != 'none'
    - resolvconf_mode == 'host_resolvconf'
    - systemd_resolved_enabled.rc == 0
  tags:
    - bootstrap-os
    - resolvconf

- import_tasks: 0062-networkmanager-unmanaged-devices.yml
  tags:
    - bootstrap-os

- import_tasks: 0063-networkmanager-dns.yml
  when:
    - dns_mode != 'none'
    - resolvconf_mode == 'host_resolvconf'
    - is_fedora_coreos
  tags:
    - bootstrap-os
    - resolvconf

- import_tasks: 0070-system-packages.yml
  when:
    - not dns_late
  tags:
    - bootstrap-os

- import_tasks: 0080-system-configurations.yml
  when:
    - not dns_late
  tags:
    - bootstrap-os

- import_tasks: 0090-etchosts.yml
  when:
    - not dns_late
  tags:
    - bootstrap-os
    - etchosts

- import_tasks: 0100-dhclient-hooks.yml
  when:
    - dns_mode != 'none'
    - resolvconf_mode == 'host_resolvconf'
    - not ansible_os_family in ["Flatcar Container Linux by Kinvolk"]
  tags:
    - bootstrap-os
    - resolvconf

- import_tasks: 0110-dhclient-hooks-undo.yml
  when:
    - dns_mode != 'none'
    - resolvconf_mode != 'host_resolvconf'
    - not ansible_os_family in ["Flatcar Container Linux by Kinvolk"]
  tags:
    - bootstrap-os
    - resolvconf

# We need to make sure the network is restarted early enough so that docker can later pick up the correct system
# nameservers and search domains
- meta: flush_handlers

- name: Check if we are running inside a Azure VM
  stat:
    path: /var/lib/waagent/
    get_attributes: no
    get_checksum: no
    get_mime: no
  register: azure_check
  when:
    - not dns_late
  tags:
    - bootstrap-os

- import_tasks: 0120-growpart-azure-centos-7.yml
  when:
    - not dns_late
    - azure_check.stat.exists
    - ansible_distribution in ["CentOS","RedHat","OracleLinux"]
  tags:
    - bootstrap-os
install docker on a largest number of linux distribution (based on https://github.com/marklee77/ansible-role-docker) 2015-12-30 16:11:33 +00:00			`---`
Add manage swap on the worker node 2018-06-21 06:17:03 +00:00			`# Disable swap`
Update dir list 2018-08-23 14:51:52 +00:00			`- import_tasks: 0010-swapoff.yml`
Skip most of kubernetes/preinstall role during late DNS config (#3627) When using resolvconf_mode host_resolvconf, there is an early DNS config stage where Kubernetes cluster DNS is not injected for host DNS intially. Later, the cluster DNS is enabled, but we do not need to run every task from the kubernetes/preinstall role. 2018-11-01 15:08:50 +00:00			`when:`
			`- not dns_late`
			`- disable_swap`
Add manage swap on the worker node 2018-06-21 06:17:03 +00:00
Update dir list 2018-08-23 14:51:52 +00:00			`- import_tasks: 0020-verify-settings.yml`
Skip most of kubernetes/preinstall role during late DNS config (#3627) When using resolvconf_mode host_resolvconf, there is an early DNS config stage where Kubernetes cluster DNS is not injected for host DNS intially. Later, the cluster DNS is enabled, but we do not need to run every task from the kubernetes/preinstall role. 2018-11-01 15:08:50 +00:00			`when:`
			`- not dns_late`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 07:43:04 +00:00			`tags:`
			`- asserts`
Drop non systemd OS types support Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru> 2017-01-02 11:14:03 +00:00
Update dir list 2018-08-23 14:51:52 +00:00			`- import_tasks: 0040-set_facts.yml`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 07:43:04 +00:00			`tags:`
Update dir list 2018-08-23 14:51:52 +00:00			`- resolvconf`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 07:43:04 +00:00			`- facts`
ensure bin dir for coreos before anything else 2016-08-26 17:24:47 +00:00
Update dir list 2018-08-23 14:51:52 +00:00			`- import_tasks: 0050-create_directories.yml`
Skip most of kubernetes/preinstall role during late DNS config (#3627) When using resolvconf_mode host_resolvconf, there is an early DNS config stage where Kubernetes cluster DNS is not injected for host DNS intially. Later, the cluster DNS is enabled, but we do not need to run every task from the kubernetes/preinstall role. 2018-11-01 15:08:50 +00:00			`when:`
			`- not dns_late`
Mount local volume provisioner dirs for containerized kubelet (#2648) 2018-04-12 19:55:13 +00:00
Update dir list 2018-08-23 14:51:52 +00:00			`- import_tasks: 0060-resolvconf.yml`
Update main.yml (#1822) * Update main.yml Needs to set up resolv.conf before updating Yum cache otherwise no name resolution available (resolv.conf empty). * Update main.yml Removing trailing spaces 2017-10-18 10:42:00 +00:00			`when:`
			`- dns_mode != 'none'`
			`- resolvconf_mode == 'host_resolvconf'`
Enable systemd-resolved DNS resolution mode (#5318) Change-Id: If3e253a40782e03cde7fc4a91493517ae31fda17 2019-11-06 11:33:52 +00:00			`- systemd_resolved_enabled.rc != 0`
Use NetworkManager to manage resolv.conf in FedoraCoreOS (#6291) 2020-06-29 07:26:17 +00:00			`- not is_fedora_coreos`
Enable systemd-resolved DNS resolution mode (#5318) Change-Id: If3e253a40782e03cde7fc4a91493517ae31fda17 2019-11-06 11:33:52 +00:00			`tags:`
			`- bootstrap-os`
			`- resolvconf`

			`- import_tasks: 0061-systemd-resolved.yml`
			`when:`
			`- dns_mode != 'none'`
			`- resolvconf_mode == 'host_resolvconf'`
			`- systemd_resolved_enabled.rc == 0`
Update main.yml (#1822) * Update main.yml Needs to set up resolv.conf before updating Yum cache otherwise no name resolution available (resolv.conf empty). * Update main.yml Removing trailing spaces 2017-10-18 10:42:00 +00:00			`tags:`
			`- bootstrap-os`
			`- resolvconf`

Add kube-ipvs0/nodelocaldns to NetworkManager unmanaged-devices (#7315) On CentOS 8 they seem to be ignored by default, but better be extra safe This also make it easy to exclude other network plugin interfaces Signed-off-by: Etienne Champetier <e.champetier@ateme.com> (cherry picked from commit e442b1d2b9ce7734093a724c3d35462f1b3cbcb8) 2021-03-03 15:27:20 +00:00			`- import_tasks: 0062-networkmanager-unmanaged-devices.yml`
			`tags:`
			`- bootstrap-os`

			`- import_tasks: 0063-networkmanager-dns.yml`
Use NetworkManager to manage resolv.conf in FedoraCoreOS (#6291) 2020-06-29 07:26:17 +00:00			`when:`
			`- dns_mode != 'none'`
			`- resolvconf_mode == 'host_resolvconf'`
			`- is_fedora_coreos`
			`tags:`
			`- bootstrap-os`
			`- resolvconf`

Update dir list 2018-08-23 14:51:52 +00:00			`- import_tasks: 0070-system-packages.yml`
Skip most of kubernetes/preinstall role during late DNS config (#3627) When using resolvconf_mode host_resolvconf, there is an early DNS config stage where Kubernetes cluster DNS is not injected for host DNS intially. Later, the cluster DNS is enabled, but we do not need to run every task from the kubernetes/preinstall role. 2018-11-01 15:08:50 +00:00			`when:`
			`- not dns_late`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 07:43:04 +00:00			`tags:`
			`- bootstrap-os`
follow sysctl.conf file symlink if linked 2017-02-09 09:16:52 +00:00
Update dir list 2018-08-23 14:51:52 +00:00			`- import_tasks: 0080-system-configurations.yml`
Skip most of kubernetes/preinstall role during late DNS config (#3627) When using resolvconf_mode host_resolvconf, there is an early DNS config stage where Kubernetes cluster DNS is not injected for host DNS intially. Later, the cluster DNS is enabled, but we do not need to run every task from the kubernetes/preinstall role. 2018-11-01 15:08:50 +00:00			`when:`
			`- not dns_late`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 07:43:04 +00:00			`tags:`
			`- bootstrap-os`
common role in order to support other linux distribs 2015-12-30 21:15:18 +00:00
Update dir list 2018-08-23 14:51:52 +00:00			`- import_tasks: 0090-etchosts.yml`
Skip most of kubernetes/preinstall role during late DNS config (#3627) When using resolvconf_mode host_resolvconf, there is an early DNS config stage where Kubernetes cluster DNS is not injected for host DNS intially. Later, the cluster DNS is enabled, but we do not need to run every task from the kubernetes/preinstall role. 2018-11-01 15:08:50 +00:00			`when:`
			`- not dns_late`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 07:43:04 +00:00			`tags:`
			`- bootstrap-os`
			`- etchosts`
Preconfigure DNS stack and docker early In order to enable offline/intranet installation cases: * Move DNS/resolvconf configuration to preinstall role. Remove skip_dnsmasq_k8s var as not needed anymore. * Preconfigure DNS stack early, which may be the case when downloading artifacts from intranet repositories. Do not configure K8s DNS resolvers for hosts /etc/resolv.conf yet early (as they may be not existing). * Reconfigure K8s DNS resolvers for hosts only after kubedns/dnsmasq was set up and before K8s apps to be created. * Move docker install task to early stage as well and unbind it from the etcd role's specific install path. Fix external flannel dependency on docker role handlers. Also fix the docker restart handlers' steps ordering to match the expected sequence (the socket then the service). * Add default resolver fact, which is the cloud provider specific and remove hardcoded GCE resolver. * Reduce default ndots for hosts /etc/resolv.conf to 2. Multiple search domains combined with high ndots values lead to poor performance of DNS stack and make ansible workers to fail very often with the "Timeout (12s) waiting for privilege escalation prompt:" error. * Update docs. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-07 15:57:05 +00:00
Update dir list 2018-08-23 14:51:52 +00:00			`- import_tasks: 0100-dhclient-hooks.yml`
Ansible 2.3 support - Fix when clauses in various places - Update requirements.txt - Fix README.md Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com> 2017-04-26 12:11:13 +00:00			`when:`
			`- dns_mode != 'none'`
			`- resolvconf_mode == 'host_resolvconf'`
Remove support for CoreOS Container Linux (#6576) 2020-08-28 09:28:53 +00:00			`- not ansible_os_family in ["Flatcar Container Linux by Kinvolk"]`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 07:43:04 +00:00			`tags:`
			`- bootstrap-os`
			`- resolvconf`
Add tasks to undo changes to hosts /etc/resolv.conf and dhclient configs 2017-01-11 14:08:24 +00:00
Update dir list 2018-08-23 14:51:52 +00:00			`- import_tasks: 0110-dhclient-hooks-undo.yml`
Ansible 2.3 support - Fix when clauses in various places - Update requirements.txt - Fix README.md Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com> 2017-04-26 12:11:13 +00:00			`when:`
			`- dns_mode != 'none'`
			`- resolvconf_mode != 'host_resolvconf'`
Remove support for CoreOS Container Linux (#6576) 2020-08-28 09:28:53 +00:00			`- not ansible_os_family in ["Flatcar Container Linux by Kinvolk"]`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 07:43:04 +00:00			`tags:`
			`- bootstrap-os`
			`- resolvconf`
Add tasks to undo changes to hosts /etc/resolv.conf and dhclient configs 2017-01-11 14:08:24 +00:00
Fix ansible syntax to avoid ansible warnings (one more) (#3536) * warning on meta flush_handlers * avoid rm * avoid "Module remote_tmp /root/.ansible/tmp did not exist and was created with a mode of 0700, this may cause issues when running as another user. To avoid this, create the remote_tmp dir with the correct permissions manually" warning on subsequent tasks using blockinfile * is match 2018-10-17 19:27:11 +00:00			`# We need to make sure the network is restarted early enough so that docker can later pick up the correct system`
			`# nameservers and search domains`
			`- meta: flush_handlers`

Make growpart only run on Azure 2016-12-12 13:14:22 +00:00			`- name: Check if we are running inside a Azure VM`
Cleanup legacy syntax, spacing, files all to yml Migrate older inline= syntax to pure yml syntax for module args as to be consistant with most of the rest of the tasks Cleanup some spacing in various files Rename some files named yaml to yml for consistancy 2017-02-17 21:22:34 +00:00			`stat:`
			`path: /var/lib/waagent/`
Only use stat get_checksum: yes when needed (#7270) By default Ansible stat module compute checksum, list extended attributes and find mime type To find all stat invocations that really use one of those: git grep -F stat. \| grep -vE 'stat.(islnk\|exists\|lnk_source\|writeable)' Signed-off-by: Etienne Champetier <e.champetier@ateme.com> (cherry picked from commit de1d9df7875d1f451fb7974840ddc0a645551b6e) Conflicts: roles/etcd/tasks/check_certs.yml 2021-02-10 13:36:59 +00:00			`get_attributes: no`
			`get_checksum: no`
			`get_mime: no`
Make growpart only run on Azure 2016-12-12 13:14:22 +00:00			`register: azure_check`
Skip most of kubernetes/preinstall role during late DNS config (#3627) When using resolvconf_mode host_resolvconf, there is an early DNS config stage where Kubernetes cluster DNS is not injected for host DNS intially. Later, the cluster DNS is enabled, but we do not need to run every task from the kubernetes/preinstall role. 2018-11-01 15:08:50 +00:00			`when:`
			`- not dns_late`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 07:43:04 +00:00			`tags:`
			`- bootstrap-os`
Make growpart only run on Azure 2016-12-12 13:14:22 +00:00
Update dir list 2018-08-23 14:51:52 +00:00			`- import_tasks: 0120-growpart-azure-centos-7.yml`
Ansible 2.3 support - Fix when clauses in various places - Update requirements.txt - Fix README.md Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com> 2017-04-26 12:11:13 +00:00			`when:`
Skip most of kubernetes/preinstall role during late DNS config (#3627) When using resolvconf_mode host_resolvconf, there is an early DNS config stage where Kubernetes cluster DNS is not injected for host DNS intially. Later, the cluster DNS is enabled, but we do not need to run every task from the kubernetes/preinstall role. 2018-11-01 15:08:50 +00:00			`- not dns_late`
Ansible 2.3 support - Fix when clauses in various places - Update requirements.txt - Fix README.md Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com> 2017-04-26 12:11:13 +00:00			`- azure_check.stat.exists`
Support for Oracle Linux (#3655) Fixed Issue #1032 test case for OEL7 AIL with kubeadm Add packet CI stuff for oracle 7 2019-07-12 06:17:06 +00:00			`- ansible_distribution in ["CentOS","RedHat","OracleLinux"]`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 07:43:04 +00:00			`tags:`
			`- bootstrap-os`