C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
c12s-kubespray/upgrade-cluster.yml

123 lines
4.4 KiB
YAML
Raw Normal View History

first cut of an upgrade process
2016-12-09 18:44:52 +00:00
---
Assert if ansible 2.7 is used (#3589)
2018-10-26 07:29:21 +00:00
- hosts: localhost
Disable gather facts when checking ansible version (#3615)
2018-10-31 10:19:17 +00:00
gather_facts: false
Disable become for localhost (#4287)
2019-02-26 03:36:44 +00:00
become: no
Assert if ansible 2.7 is used (#3589)
2018-10-26 07:29:21 +00:00
tasks:
ansible: Upgrade to 2.7.1 (#3618) Only exclude buggy Ansible v2.7.0 (https://github.com/ansible/ansible/issues/46600#issuecomment-433863628) Fixup #3589
2018-10-31 10:01:19 +00:00
- name: "Check ansible version !=2.7.0"
Assert if ansible 2.7 is used (#3589)
2018-10-26 07:29:21 +00:00
assert:
msg: "Ansible V2.7.0 can't be used until: https://github.com/ansible/ansible/issues/46600 is fixed"
that:
ansible: Upgrade to 2.7.1 (#3618) Only exclude buggy Ansible v2.7.0 (https://github.com/ansible/ansible/issues/46600#issuecomment-433863628) Fixup #3589
2018-10-31 10:01:19 +00:00
- ansible_version.string is version("2.7.0", "!=")
Fix kube-proxy configuration for kubeadm (#3958) - Creates and defaults an ansible variable for every configuration option in the `kubeproxy.config.k8s.io/v1alpha1` type spec - Fixes vars that were orphaned by removing non-kubeadm - Fixes previously harcoded kubeadm values - Introduces a `main` directory for role default files per component (requires ansible 2.6.0+) - Split out just `kube-proxy.yml` in this first effort - Removes the kube-proxy server field patch task We should continue to pull out other components from `main.yml` into their own defaults files as I did here for `defaults/main/kube-proxy.yml`. I hope for and will need others to join me in this refactoring across the project until each component config template has a matching role defaults file, with shared defaults in `kubespray-defaults` or `downloads`
2019-01-03 08:04:26 +00:00
- ansible_version.string is version("2.6.0", ">=")
Assert if ansible 2.7 is used (#3589)
2018-10-26 07:29:21 +00:00
tags:
- check
vars:
ansible_connection: local
Split deploy steps in separate playbooks: part1 (#3451) * Fix bootstrap_os/ubuntu idempotency * Update bastion role * move container_engine in sub-roles * requires ansible 2.5 * ubuntu18 as first CI job
2018-10-10 02:14:33 +00:00
- hosts: bastion[0]
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-14 16:08:44 +00:00
gather_facts: False
roles:
rename kargo mentions in top-level yml files
2017-06-16 16:18:35 +00:00
- { role: kubespray-defaults}
Add default var role
2017-02-23 11:07:17 +00:00
- { role: bastion-ssh-config, tags: ["localhost", "bastion"]}
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-14 16:08:44 +00:00
- hosts: k8s-cluster:etcd:calico-rr
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 09:52:39 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-14 16:08:44 +00:00
gather_facts: false
vars:
# Need to disable pipelining for bootstrap-os as some systems have requiretty in sudoers set, which makes pipelining
# fail. bootstrap-os fixes this on these systems, so in later plays it can be enabled.
ansible_ssh_pipelining: false
roles:
rename kargo mentions in top-level yml files
2017-06-16 16:18:35 +00:00
- { role: kubespray-defaults}
Add default var role
2017-02-23 11:07:17 +00:00
- { role: bootstrap-os, tags: bootstrap-os}
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-14 16:08:44 +00:00
- hosts: k8s-cluster:etcd:calico-rr
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 09:52:39 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-14 16:08:44 +00:00
vars:
ansible_ssh_pipelining: true
first cut of an upgrade process
2016-12-09 18:44:52 +00:00
gather_facts: true
gather facts for all nodes, even if running for single one (--limit)
2018-02-14 15:43:41 +00:00
pre_tasks:
- name: gather facts from all instances
setup:
delegate_to: "{{item}}"
delegate_facts: True
Mark "calico-rr" as optional in fact gathering
2018-03-16 20:33:29 +00:00
with_items: "{{ groups['k8s-cluster'] + groups['etcd'] + groups['calico-rr']|default([]) }}"
first cut of an upgrade process
2016-12-09 18:44:52 +00:00
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-14 16:08:44 +00:00
- hosts: k8s-cluster:etcd:calico-rr
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 09:52:39 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Use batch mode for graceful docker/rkt upgrade (#1815)
2017-10-17 13:12:11 +00:00
serial: "{{ serial | default('20%') }}"
first cut of an upgrade process
2016-12-09 18:44:52 +00:00
roles:
rename kargo mentions in top-level yml files
2017-06-16 16:18:35 +00:00
- { role: kubespray-defaults}
first cut of an upgrade process
2016-12-09 18:44:52 +00:00
- { role: kubernetes/preinstall, tags: preinstall }
Add flag to deploy container engine manually. (#3753) This feature was removed by PR#3061. But change flag manage_docker to deploy_container_engine.
2018-11-26 15:26:40 +00:00
- { role: container-engine, tags: "container-engine", when: deploy_container_engine|default(true) }
Fix skip_downloads condition.
2018-08-08 10:49:49 +00:00
- { role: download, tags: download, when: "not skip_downloads" }
Added proxy_env to scale and upgrade playbooks
2017-12-06 15:06:34 +00:00
environment: "{{proxy_env}}"
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-14 16:08:44 +00:00
Remove standalone etcd specific play, cleanup host mode Now etcd role can optionally disable etcd cluster setup for faster deployment when it is combined with etcd role.
2017-03-03 20:30:37 +00:00
- hosts: etcd
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 09:52:39 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
first cut of an upgrade process
2016-12-09 18:44:52 +00:00
roles:
rename kargo mentions in top-level yml files
2017-06-16 16:18:35 +00:00
- { role: kubespray-defaults}
Remove standalone etcd specific play, cleanup host mode Now etcd role can optionally disable etcd cluster setup for faster deployment when it is combined with etcd role.
2017-03-03 20:30:37 +00:00
- { role: etcd, tags: etcd, etcd_cluster_setup: true }
first cut of an upgrade process
2016-12-09 18:44:52 +00:00
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-14 16:08:44 +00:00
- hosts: k8s-cluster
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 09:52:39 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
first cut of an upgrade process
2016-12-09 18:44:52 +00:00
roles:
rename kargo mentions in top-level yml files
2017-06-16 16:18:35 +00:00
- { role: kubespray-defaults}
Remove standalone etcd specific play, cleanup host mode Now etcd role can optionally disable etcd cluster setup for faster deployment when it is combined with etcd role.
2017-03-03 20:30:37 +00:00
- { role: etcd, tags: etcd, etcd_cluster_setup: false }
first cut of an upgrade process
2016-12-09 18:44:52 +00:00
Yamllint fixes (#4410) * Lint everything in the repository with yamllint * yamllint fixes: syntax fixes only * yamllint fixes: move comments to play names * yamllint fixes: indent comments in .gitlab-ci.yml file
2019-04-01 09:38:33 +00:00
- name: Handle upgrades to master components first to maintain backwards compat.
hosts: kube-master
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 09:52:39 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
first cut of an upgrade process
2016-12-09 18:44:52 +00:00
serial: 1
roles:
rename kargo mentions in top-level yml files
2017-06-16 16:18:35 +00:00
- { role: kubespray-defaults}
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-14 16:08:44 +00:00
- { role: upgrade/pre-upgrade, tags: pre-upgrade }
first cut of an upgrade process
2016-12-09 18:44:52 +00:00
- { role: kubernetes/node, tags: node }
Fix reconfigure and upgrade cluster (#3938)
2018-12-25 07:06:27 +00:00
- { role: kubernetes/master, tags: master, upgrade_cluster_setup: true }
Move cluster roles and system namespace to new role This should be done after kubeconfig is set for admin and before network plugins are up.
2017-10-26 08:10:33 +00:00
- { role: kubernetes/client, tags: client }
- { role: kubernetes-apps/cluster_roles, tags: cluster-roles }
Uncodron Masters which have scheduling Enabled
2017-06-27 20:11:44 +00:00
- { role: upgrade/post-upgrade, tags: post-upgrade }
Added proxy_env to scale and upgrade playbooks
2017-12-06 15:06:34 +00:00
environment: "{{proxy_env}}"
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-14 16:08:44 +00:00
Yamllint fixes (#4410) * Lint everything in the repository with yamllint * yamllint fixes: syntax fixes only * yamllint fixes: move comments to play names * yamllint fixes: indent comments in .gitlab-ci.yml file
2019-04-01 09:38:33 +00:00
- name: Upgrade calico on all masters and nodes
hosts: kube-master:kube-node
calico upgrade to v3 (#3086) * calico upgrade to v3 * update calico_rr version * add missing file * change contents of main.yml as it was left old version * enable network policy by default * remove unneeded task * Fix kubelet calico settings * fix when statement * switch back to node-kubeconfig.yaml
2018-08-23 14:17:18 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
serial: "{{ serial | default('20%') }}"
roles:
- { role: kubespray-defaults}
- { role: network_plugin, tags: network }
- { role: kubernetes-apps/network_plugin, tags: network }
- { role: kubernetes-apps/policy_controller, tags: policy-controller }
Yamllint fixes (#4410) * Lint everything in the repository with yamllint * yamllint fixes: syntax fixes only * yamllint fixes: move comments to play names * yamllint fixes: indent comments in .gitlab-ci.yml file
2019-04-01 09:38:33 +00:00
- name: Finally handle worker upgrades, based on given batch size
hosts: kube-node:!kube-master
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 09:52:39 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-14 16:08:44 +00:00
serial: "{{ serial | default('20%') }}"
roles:
rename kargo mentions in top-level yml files
2017-06-16 16:18:35 +00:00
- { role: kubespray-defaults}
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-14 16:08:44 +00:00
- { role: upgrade/pre-upgrade, tags: pre-upgrade }
- { role: kubernetes/node, tags: node }
Remove non-kubeadm deployment (#3811) * Remove non-kubeadm deployment * More cleanup * More cleanup * More cleanup * More cleanup * Fix gitlab * Try stop gce first before absent to make the delete process work * More cleanup * Fix bug with checking if kubeadm has already run * Fix bug with checking if kubeadm has already run * More fixes * Fix test * fix * Fix gitlab checkout untill kubespray 2.8 is on quay * Fixed * Add upgrade path from non-kubeadm to kubeadm. Revert ssl path * Readd secret checking * Do gitlab checks from v2.7.0 test upgrade path to 2.8.0 * fix typo * Fix CI jobs to kubeadm again. Fix broken hyperkube path * Fix gitlab * Fix rotate tokens * More fixes * More fixes * Fix tokens
2018-12-06 10:33:38 +00:00
- { role: kubernetes/kubeadm, tags: kubeadm }
Fix upgrade k8s
2018-09-12 05:24:31 +00:00
- { role: upgrade/post-upgrade, tags: post-upgrade }
Added proxy_env to scale and upgrade playbooks
2017-12-06 15:06:34 +00:00
environment: "{{proxy_env}}"
move network plugins out of grouped upgrades
2017-03-23 14:18:51 +00:00
Run rotate_tokens role only once (#1970)
2017-11-15 18:50:23 +00:00
- hosts: kube-master[0]
move network plugins out of grouped upgrades
2017-03-23 14:18:51 +00:00
any_errors_fatal: true
roles:
rename kargo mentions in top-level yml files
2017-06-16 16:18:35 +00:00
- { role: kubespray-defaults}
Upgrade to kubeadm (#1667) * Enable upgrade to kubeadm * fix kubedns upgrade * try upgrade route * use init/upgrade strategy for kubeadm and ignore kubedns svc * Use bin_dir for kubeadm * delete more secrets * fix waiting for terminating pods * Manually enforce kube-proxy for kubeadm deploy * remove proxy. update to kubeadm 1.8.0rc1
2017-09-26 09:38:58 +00:00
- { role: kubernetes-apps/rotate_tokens, tags: rotate_tokens, when: "secret_changed|default(false)" }
Reapply win_node patches (#3868)
2018-12-13 14:17:46 +00:00
- { role: win_nodes/kubernetes_patch, tags: ["master", "win_nodes"]}
Run rotate_tokens role only once (#1970)
2017-11-15 18:50:23 +00:00
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-14 16:08:44 +00:00
- hosts: calico-rr
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 09:52:39 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-14 16:08:44 +00:00
roles:
rename kargo mentions in top-level yml files
2017-06-16 16:18:35 +00:00
- { role: kubespray-defaults}
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-14 16:08:44 +00:00
- { role: network_plugin/calico/rr, tags: network }
Install Helm on all masters
2018-09-10 09:39:26 +00:00
- hosts: kube-master
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 09:52:39 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-14 16:08:44 +00:00
roles:
rename kargo mentions in top-level yml files
2017-06-16 16:18:35 +00:00
- { role: kubespray-defaults}
Install Helm on all masters
2018-09-10 09:39:26 +00:00
- { role: kubernetes-apps, tags: apps }
Remove kubedns and dnsmasq. Move dns_late phase after apps (#4406) Both kubedns and dnsmasq modes are long not maintained. We should run dns_late steps at the end because sshd makes DNS lookups during Ansible run and has 2s timeouts for each failed lookup trying to connect to coredns before it is ready.
2019-04-01 19:32:34 +00:00
- { role: kubernetes/preinstall, when: "dns_mode != 'none' and resolvconf_mode == 'host_resolvconf'", tags: resolvconf }
Reference in a new issue Copy permalink