c12s-kubespray/roles/kubernetes/node/tasks/main.yml

---
- set_fact:
    standalone_kubelet: >-
      {%- if inventory_hostname in groups['kube-master'] and inventory_hostname not in groups['kube-node'] -%}true{%- else -%}false{%- endif -%}
  tags: facts

- include: install.yml
  tags: kubelet

- include: nginx-proxy.yml
  when: is_kube_master == false and loadbalancer_apiserver_localhost|default(false)
  tags: nginx

- name: Write kubelet config file
  template:
    src: kubelet.j2
    dest: "{{ kube_config_dir }}/kubelet.env"
    backup: yes
  notify: restart kubelet
  tags: kubelet

- name: write the kubecfg (auth) file for kubelet
  template:
    src: node-kubeconfig.yaml.j2
    dest: "{{ kube_config_dir }}/node-kubeconfig.yaml"
    backup: yes
  notify: restart kubelet
  tags: kubelet

- name: Ensure nodePort range is reserved
  sysctl:
    name: net.ipv4.ip_local_reserved_ports
    value: "{{ kube_apiserver_node_port_range }}"
    sysctl_set: yes
    state: present
    reload: yes
  when: kube_apiserver_node_port_range is defined
  tags: kube-proxy

- name: Write proxy manifest
  template:
    src: manifests/kube-proxy.manifest.j2
    dest: "{{ kube_manifest_dir }}/kube-proxy.manifest"
  tags: kube-proxy

# reload-systemd
- meta: flush_handlers

- name: Enable kubelet
  service:
    name: kubelet
    enabled: yes
    state: started
  tags: kubelet
Initial commit 2015-10-03 20:19:50 +00:00			`---`
Address standalone kubelet config case Also place in global vars and do not repeat the kube_*_config_dir and kube_namespace vars for better code maintainability and UX. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-13 10:43:06 +00:00			`- set_fact:`
			`standalone_kubelet: >-`
			`{%- if inventory_hostname in groups['kube-master'] and inventory_hostname not in groups['kube-node'] -%}true{%- else -%}false{%- endif -%}`
			`tags: facts`

generate secrets on deployment machine test travis with sudo=true instead of required 2016-02-11 22:08:16 +00:00			`- include: install.yml`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`tags: kubelet`
generate secrets on deployment machine test travis with sudo=true instead of required 2016-02-11 22:08:16 +00:00
use nginx proxy on non-master nodes to proxy apiserver traffic Also adds all masters by hostname and localhost/127.0.0.1 to apiserver SSL certificate. Includes documentation update on how localhost loadbalancer works. 2016-09-28 11:05:08 +00:00			`- include: nginx-proxy.yml`
			`when: is_kube_master == false and loadbalancer_apiserver_localhost\|default(false)`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`tags: nginx`
use nginx proxy on non-master nodes to proxy apiserver traffic Also adds all masters by hostname and localhost/127.0.0.1 to apiserver SSL certificate. Includes documentation update on how localhost loadbalancer works. 2016-09-28 11:05:08 +00:00
Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs 2015-12-11 10:32:13 +00:00			`- name: Write kubelet config file`
Cleanup legacy syntax, spacing, files all to yml Migrate older inline= syntax to pure yml syntax for module args as to be consistant with most of the rest of the tasks Cleanup some spacing in various files Rename some files named yaml to yml for consistancy 2017-02-17 21:22:34 +00:00			`template:`
			`src: kubelet.j2`
			`dest: "{{ kube_config_dir }}/kubelet.env"`
			`backup: yes`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`notify: restart kubelet`
			`tags: kubelet`
Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs 2015-12-11 10:32:13 +00:00
			`- name: write the kubecfg (auth) file for kubelet`
Cleanup legacy syntax, spacing, files all to yml Migrate older inline= syntax to pure yml syntax for module args as to be consistant with most of the rest of the tasks Cleanup some spacing in various files Rename some files named yaml to yml for consistancy 2017-02-17 21:22:34 +00:00			`template:`
			`src: node-kubeconfig.yaml.j2`
			`dest: "{{ kube_config_dir }}/node-kubeconfig.yaml"`
			`backup: yes`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`notify: restart kubelet`
			`tags: kubelet`
Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs 2015-12-11 10:32:13 +00:00
Prevent dynamic port allocation in nodePort range kube_apiserver_node_port_range should be accessible only to kube-proxy and not be taken by a dynamic port allocation. Potentially temporary if https://github.com/kubernetes/kubernetes/issues/40920 gets fixed. 2017-02-03 15:26:30 +00:00			`- name: Ensure nodePort range is reserved`
			`sysctl:`
			`name: net.ipv4.ip_local_reserved_ports`
			`value: "{{ kube_apiserver_node_port_range }}"`
			`sysctl_set: yes`
			`state: present`
			`reload: yes`
			`when: kube_apiserver_node_port_range is defined`
			`tags: kube-proxy`

Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs 2015-12-11 10:32:13 +00:00			`- name: Write proxy manifest`
Fix systemd reload and calico unit 2016-01-25 01:01:25 +00:00			`template:`
Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs 2015-12-11 10:32:13 +00:00			`src: manifests/kube-proxy.manifest.j2`
			`dest: "{{ kube_manifest_dir }}/kube-proxy.manifest"`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`tags: kube-proxy`
Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs 2015-12-11 10:32:13 +00:00
Fix systemd reload and calico unit 2016-01-25 01:01:25 +00:00			`# reload-systemd`
			`- meta: flush_handlers`

Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs 2015-12-11 10:32:13 +00:00			`- name: Enable kubelet`
			`service:`
			`name: kubelet`
			`enabled: yes`
			`state: started`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`tags: kubelet`