c12s-kubespray/roles/kubernetes/master/tasks/main.yml

---
- import_tasks: pre-upgrade.yml
  tags:
    - k8s-pre-upgrade

# upstream bug: https://github.com/kubernetes/kubeadm/issues/441
- name: Disable kube_basic_auth until kubeadm/441 is fixed
  set_fact:
    kube_basic_auth: false
  when: kubeadm_enabled|bool|default(false)

- import_tasks: users-file.yml
  when: kube_basic_auth|default(true)

- import_tasks: encrypt-at-rest.yml
  when: kube_encrypt_secret_data

- name: Compare host kubectl with hyperkube container
  command: "{{ docker_bin_dir }}/docker run --rm -v {{ bin_dir }}:/systembindir {{ hyperkube_image_repo }}:{{ hyperkube_image_tag }} /usr/bin/cmp /hyperkube /systembindir/kubectl"
  register: kubectl_task_compare_result
  until: kubectl_task_compare_result.rc in [0,1,2]
  retries: 4
  delay: "{{ retry_stagger | random + 3 }}"
  changed_when: false
  failed_when: "kubectl_task_compare_result.rc not in [0,1,2]"
  tags:
    - hyperkube
    - kubectl
    - upgrade

- name: Copy kubectl from hyperkube container
  command: "{{ docker_bin_dir }}/docker run --rm -v {{ bin_dir }}:/systembindir {{ hyperkube_image_repo }}:{{ hyperkube_image_tag }} /bin/cp -f /hyperkube /systembindir/kubectl"
  when: kubectl_task_compare_result.rc != 0
  register: kubectl_task_result
  until: kubectl_task_result.rc == 0
  retries: 4
  delay: "{{ retry_stagger | random + 3 }}"
  changed_when: false
  tags:
    - hyperkube
    - kubectl
    - upgrade

- name: Install kubectl bash completion
  shell: "{{ bin_dir }}/kubectl completion bash >/etc/bash_completion.d/kubectl.sh"
  when: kubectl_task_compare_result.rc != 0 and ansible_os_family in ["Debian","RedHat"]
  tags:
    - kubectl

- name: Set kubectl bash completion file
  file:
    path: /etc/bash_completion.d/kubectl.sh
    owner: root
    group: root
    mode: 0755
  when: ansible_os_family in ["Debian","RedHat"]
  tags:
    - kubectl
    - upgrade

- name: Include kubeadm setup if enabled
  import_tasks: kubeadm-setup.yml
  when: kubeadm_enabled|bool|default(false)

- name: Include static pod setup if not using kubeadm
  import_tasks: static-pod-setup.yml
  when: not kubeadm_enabled|bool|default(false)
Initial commit 2015-10-03 20:19:50 +00:00			`---`
Use include/import tasks (#2192) import_tasks will consume far less memory, so it should be used whenever it is compatible. 2018-01-29 11:37:48 +00:00			`- import_tasks: pre-upgrade.yml`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 07:43:04 +00:00			`tags:`
			`- k8s-pre-upgrade`
Review role order, use master ip even when fqdn are used in the inventory 2015-12-16 22:49:01 +00:00
Enable HA deploy of kubeadm (#1658) * Enable HA deploy of kubeadm * raise delay to 60s for starting gce hosts 2017-09-15 21:28:15 +00:00			`# upstream bug: https://github.com/kubernetes/kubeadm/issues/441`
			`- name: Disable kube_basic_auth until kubeadm/441 is fixed`
			`set_fact:`
			`kube_basic_auth: false`
			`when: kubeadm_enabled\|bool\|default(false)`

Use include/import tasks (#2192) import_tasks will consume far less memory, so it should be used whenever it is compatible. 2018-01-29 11:37:48 +00:00			`- import_tasks: users-file.yml`
kubeadm support (#1631) * kubeadm support * move k8s master to a subtask * disable k8s secrets when using kubeadm * fix etcd cert serial var * move simple auth users to master role * make a kubeadm-specific env file for kubelet * add non-ha CI job * change ci boolean vars to json format * fixup * Update create-gce.yml * Update create-gce.yml * Update create-gce.yml 2017-09-13 18:00:51 +00:00			`when: kube_basic_auth\|default(true)`

Added option for encrypting secrets to etcd v.2 (#2428) * Added option for encrypting secrets to etcd * Fix keylength to 32 * Forgot the default * Rename secrets.yaml to secrets_encryption.yaml * Fix static path for secrets file to use ansible variable * Rename secrets.yaml.j2 to secrets_encryption.yaml.j2 * Base64 encode the token * Fixed merge error * Changed path to credentials dir * Update path to secrets file which is now readable inside the apiserver container. Set better file permissions * Add encryption option to k8s-cluster.yml 2018-03-15 19:20:05 +00:00			`- import_tasks: encrypt-at-rest.yml`
			`when: kube_encrypt_secret_data`

Idempotency fixes (#1838) 2017-10-25 20:19:40 +00:00			`- name: Compare host kubectl with hyperkube container`
			`command: "{{ docker_bin_dir }}/docker run --rm -v {{ bin_dir }}:/systembindir {{ hyperkube_image_repo }}:{{ hyperkube_image_tag }} /usr/bin/cmp /hyperkube /systembindir/kubectl"`
			`register: kubectl_task_compare_result`
			`until: kubectl_task_compare_result.rc in [0,1,2]`
			`retries: 4`
			`delay: "{{ retry_stagger \| random + 3 }}"`
			`changed_when: false`
			`failed_when: "kubectl_task_compare_result.rc not in [0,1,2]"`
			`tags:`
			`- hyperkube`
			`- kubectl`
			`- upgrade`

Copy kubectl from docker container Nearly the last stage of source all components to containers. Kubectl will be called from hyperkube image. Remaining tasks: * Move kube_version variable to kubernetes/preinstall * Drop placeholder download.nothing requirement 2016-07-25 10:56:58 +00:00			`- name: Copy kubectl from hyperkube container`
Force copy cni files 2018-07-06 13:39:42 +00:00			`command: "{{ docker_bin_dir }}/docker run --rm -v {{ bin_dir }}:/systembindir {{ hyperkube_image_repo }}:{{ hyperkube_image_tag }} /bin/cp -f /hyperkube /systembindir/kubectl"`
Idempotency fixes (#1838) 2017-10-25 20:19:40 +00:00			`when: kubectl_task_compare_result.rc != 0`
			`register: kubectl_task_result`
			`until: kubectl_task_result.rc == 0`
Add retries for copying binaries from containers Closes issue: https://github.com/kubespray/kargo/issues/479 Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-09-13 12:36:01 +00:00			`retries: 4`
Add retry_stagger var for failed download/pushes. * Add the retry_stagger var to tweak push and retry time strategies. * Add large deployments related docs. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-09-15 09:23:27 +00:00			`delay: "{{ retry_stagger \| random + 3 }}"`
use command instead of synchronize 2016-01-22 15:37:07 +00:00			`changed_when: false`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 07:43:04 +00:00			`tags:`
			`- hyperkube`
			`- kubectl`
			`- upgrade`
running kubernetes master processes as pods 2015-12-11 10:52:20 +00:00
Fix bash completion installation 2017-01-17 17:36:58 +00:00			`- name: Install kubectl bash completion`
			`shell: "{{ bin_dir }}/kubectl completion bash >/etc/bash_completion.d/kubectl.sh"`
Idempotency fixes (#1838) 2017-10-25 20:19:40 +00:00			`when: kubectl_task_compare_result.rc != 0 and ansible_os_family in ["Debian","RedHat"]`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 07:43:04 +00:00			`tags:`
			`- kubectl`
Generate kubectl bash completion from kubectl instead of file 2016-11-14 08:22:46 +00:00
Fix bash completion installation 2017-01-17 17:36:58 +00:00			`- name: Set kubectl bash completion file`
			`file:`
			`path: /etc/bash_completion.d/kubectl.sh`
Generate kubectl bash completion from kubectl instead of file 2016-11-14 08:22:46 +00:00			`owner: root`
			`group: root`
			`mode: 0755`
Fix bash completion installation 2017-01-17 17:36:58 +00:00			`when: ansible_os_family in ["Debian","RedHat"]`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 07:43:04 +00:00			`tags:`
			`- kubectl`
			`- upgrade`
Generate kubectl bash completion from kubectl instead of file 2016-11-14 08:22:46 +00:00
Fix up warnings and deprecations (#1848) 2017-10-20 07:25:57 +00:00			`- name: Include kubeadm setup if enabled`
Use include/import tasks (#2192) import_tasks will consume far less memory, so it should be used whenever it is compatible. 2018-01-29 11:37:48 +00:00			`import_tasks: kubeadm-setup.yml`
kubeadm support (#1631) * kubeadm support * move k8s master to a subtask * disable k8s secrets when using kubeadm * fix etcd cert serial var * move simple auth users to master role * make a kubeadm-specific env file for kubelet * add non-ha CI job * change ci boolean vars to json format * fixup * Update create-gce.yml * Update create-gce.yml * Update create-gce.yml 2017-09-13 18:00:51 +00:00			`when: kubeadm_enabled\|bool\|default(false)`
basic rbac support 2017-06-27 04:27:25 +00:00
Fix up warnings and deprecations (#1848) 2017-10-20 07:25:57 +00:00			`- name: Include static pod setup if not using kubeadm`
Use include/import tasks (#2192) import_tasks will consume far less memory, so it should be used whenever it is compatible. 2018-01-29 11:37:48 +00:00			`import_tasks: static-pod-setup.yml`
kubeadm support (#1631) * kubeadm support * move k8s master to a subtask * disable k8s secrets when using kubeadm * fix etcd cert serial var * move simple auth users to master role * make a kubeadm-specific env file for kubelet * add non-ha CI job * change ci boolean vars to json format * fixup * Update create-gce.yml * Update create-gce.yml * Update create-gce.yml 2017-09-13 18:00:51 +00:00			`when: not kubeadm_enabled\|bool\|default(false)`