C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
c12s-kubespray/roles/kubernetes/master/tasks/main.yml

74 lines
2.3 KiB
YAML
Raw Normal View History

Initial commit
2015-10-03 20:19:50 +00:00
---
Deploy kubelet and kube-apiserver as containers kubelet via docker kube-apiserver as a static pod Fixed etcd service start to be more tolerant of slow start. Workaround for kube_version to stay in download role, but not download an files by creating a new "nothing" download entry.
2016-07-08 09:59:21 +00:00
- include: pre-upgrade.yml
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: k8s-pre-upgrade
Review role order, use master ip even when fqdn are used in the inventory
2015-12-16 22:49:01 +00:00
Drop linux capabilities and rework users/groups * Drop linux capabilities for unprivileged containerized worlkoads Kargo configures for deployments. * Configure required securityContext/user/group/groups for kube components' static manifests, etcd, calico-rr and k8s apps, like dnsmasq daemonset. * Rework cloud-init (etcd) users creation for CoreOS. * Fix nologin paths, adjust defaults for addusers role and ensure supplementary groups membership added for users. * Add netplug user for network plugins (yet unused by privileged networking containers though). * Grant the kube and netplug users read access for etcd certs via the etcd certs group. * Grant group read access to kube certs via the kube cert group. * Remove priveleged mode for calico-rr and run it under its uid/gid and supplementary etcd_cert group. * Adjust docs. * Align cpu/memory limits and dropped caps with added rkt support for control plane. Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2016-12-28 13:58:37 +00:00
- include: set_facts.yml
tags: facts
Copy kubectl from docker container Nearly the last stage of source all components to containers. Kubectl will be called from hyperkube image. Remaining tasks: * Move kube_version variable to kubernetes/preinstall * Drop placeholder download.nothing requirement
2016-07-25 10:56:58 +00:00
- name: Copy kubectl from hyperkube container
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-23 14:44:44 +00:00
command: "{{ docker_bin_dir }}/docker run --rm -v {{ bin_dir }}:/systembindir {{ hyperkube_image_repo }}:{{ hyperkube_image_tag }} /bin/cp /hyperkube /systembindir/kubectl"
Add retries for copying binaries from containers Closes issue: https://github.com/kubespray/kargo/issues/479 Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-13 12:36:01 +00:00
register: kube_task_result
until: kube_task_result.rc == 0
retries: 4
Add retry_stagger var for failed download/pushes. * Add the retry_stagger var to tweak push and retry time strategies. * Add large deployments related docs. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-15 09:23:27 +00:00
delay: "{{ retry_stagger | random + 3 }}"
use command instead of synchronize
2016-01-22 15:37:07 +00:00
changed_when: false
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: [hyperkube, kubectl, upgrade]
running kubernetes master processes as pods
2015-12-11 10:52:20 +00:00
Fix bash completion installation
2017-01-17 17:36:58 +00:00
- name: Install kubectl bash completion
shell: "{{ bin_dir }}/kubectl completion bash >/etc/bash_completion.d/kubectl.sh"
#no_log: true
Generate kubectl bash completion from kubectl instead of file
2016-11-14 08:22:46 +00:00
when: ansible_os_family in ["Debian","RedHat"]
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: kubectl
Generate kubectl bash completion from kubectl instead of file
2016-11-14 08:22:46 +00:00
Fix bash completion installation
2017-01-17 17:36:58 +00:00
- name: Set kubectl bash completion file
file:
path: /etc/bash_completion.d/kubectl.sh
Generate kubectl bash completion from kubectl instead of file
2016-11-14 08:22:46 +00:00
owner: root
group: root
mode: 0755
Fix bash completion installation
2017-01-17 17:36:58 +00:00
when: ansible_os_family in ["Debian","RedHat"]
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: [kubectl, upgrade]
Generate kubectl bash completion from kubectl instead of file
2016-11-14 08:22:46 +00:00
Deploy kubelet and kube-apiserver as containers kubelet via docker kube-apiserver as a static pod Fixed etcd service start to be more tolerant of slow start. Workaround for kube_version to stay in download role, but not download an files by creating a new "nothing" download entry.
2016-07-08 09:59:21 +00:00
- name: Write kube-apiserver manifest
run apiserver as a service reorder master handlers typo for sysvinit
2016-01-22 13:25:33 +00:00
template:
Deploy kubelet and kube-apiserver as containers kubelet via docker kube-apiserver as a static pod Fixed etcd service start to be more tolerant of slow start. Workaround for kube_version to stay in download role, but not download an files by creating a new "nothing" download entry.
2016-07-08 09:59:21 +00:00
src: manifests/kube-apiserver.manifest.j2
dest: "{{ kube_manifest_dir }}/kube-apiserver.manifest"
Allow subdomains of dns_domain and fix kubelet restarts * Add a var for ndots (default 5) and put it hosts' /etc/resolv.conf. * Poke kube dns container image to v1.7 * In order to apply changes to kubelet, notify it to be restarted on changes made to /etc/resolv.conf. Ignore errors as the kubelet may yet to be present up to the moment of the notification being processed. * Remove unnecessary kubelet restart for master role as the node role ensures it is up and running. Notify master static pods waiters for apiserver, scheduler, controller-manager instead. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-27 09:54:12 +00:00
notify: Master | wait for the apiserver to be running
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: kube-apiserver
run apiserver as a service reorder master handlers typo for sysvinit
2016-01-22 13:25:33 +00:00
Allow subdomains of dns_domain and fix kubelet restarts * Add a var for ndots (default 5) and put it hosts' /etc/resolv.conf. * Poke kube dns container image to v1.7 * In order to apply changes to kubelet, notify it to be restarted on changes made to /etc/resolv.conf. Ignore errors as the kubelet may yet to be present up to the moment of the notification being processed. * Remove unnecessary kubelet restart for master role as the node role ensures it is up and running. Notify master static pods waiters for apiserver, scheduler, controller-manager instead. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-27 09:54:12 +00:00
- meta: flush_handlers
Address standalone kubelet config case Also place in global vars and do not repeat the kube_*_config_dir and kube_namespace vars for better code maintainability and UX. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-13 10:43:06 +00:00
- name: copy kube system namespace manifest
copy: src=namespace.yml dest={{kube_config_dir}}/{{system_namespace}}-ns.yml
running kubernetes master processes as pods
2015-12-11 10:52:20 +00:00
run_once: yes
when: inventory_hostname == groups['kube-master'][0]
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: apps
running kubernetes master processes as pods
2015-12-11 10:52:20 +00:00
Address standalone kubelet config case Also place in global vars and do not repeat the kube_*_config_dir and kube_namespace vars for better code maintainability and UX. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-13 10:43:06 +00:00
- name: Check if kube system namespace exists
command: "{{ bin_dir }}/kubectl get ns {{system_namespace}}"
Fix namespace
2016-01-14 14:19:45 +00:00
register: 'kubesystem'
changed_when: False
Add native Vagrant support This allows you to simply run `vagrant up` to get a 3 node HA cluster. * Creates a dynamic inventory and uses the inventory/group_vars/all.yml * commented lines in inventory.example so that ansible doesn't try to use it. * added requirements.txt to give easy way to install ansible/ipaddr * added gitignore files to stop attempts to save unwated files * changed `Check if kube-system exists` to `failed_when: false` instead of `ignore_errors`
2016-05-08 15:11:09 +00:00
failed_when: False
Fix namespace
2016-01-14 14:19:45 +00:00
run_once: yes
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: apps
Fix namespace
2016-01-14 14:19:45 +00:00
Address standalone kubelet config case Also place in global vars and do not repeat the kube_*_config_dir and kube_namespace vars for better code maintainability and UX. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-13 10:43:06 +00:00
- name: Create kube system namespace
command: "{{ bin_dir }}/kubectl create -f {{kube_config_dir}}/{{system_namespace}}-ns.yml"
Fix namespace
2016-01-14 14:19:45 +00:00
changed_when: False
run apiserver as a service reorder master handlers typo for sysvinit
2016-01-22 13:25:33 +00:00
when: kubesystem|failed and inventory_hostname == groups['kube-master'][0]
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: apps
Fix namespace
2016-01-14 14:19:45 +00:00
running kubernetes master processes as pods
2015-12-11 10:52:20 +00:00
- name: Write kube-controller-manager manifest
template:
src: manifests/kube-controller-manager.manifest.j2
use master election option instead of podmaster
2016-03-21 21:25:09 +00:00
dest: "{{ kube_manifest_dir }}/kube-controller-manager.manifest"
Allow subdomains of dns_domain and fix kubelet restarts * Add a var for ndots (default 5) and put it hosts' /etc/resolv.conf. * Poke kube dns container image to v1.7 * In order to apply changes to kubelet, notify it to be restarted on changes made to /etc/resolv.conf. Ignore errors as the kubelet may yet to be present up to the moment of the notification being processed. * Remove unnecessary kubelet restart for master role as the node role ensures it is up and running. Notify master static pods waiters for apiserver, scheduler, controller-manager instead. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-27 09:54:12 +00:00
notify: Master | wait for kube-controller-manager
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: kube-controller-manager
running kubernetes master processes as pods
2015-12-11 10:52:20 +00:00
- name: Write kube-scheduler manifest
template:
src: manifests/kube-scheduler.manifest.j2
use master election option instead of podmaster
2016-03-21 21:25:09 +00:00
dest: "{{ kube_manifest_dir }}/kube-scheduler.manifest"
Allow subdomains of dns_domain and fix kubelet restarts * Add a var for ndots (default 5) and put it hosts' /etc/resolv.conf. * Poke kube dns container image to v1.7 * In order to apply changes to kubelet, notify it to be restarted on changes made to /etc/resolv.conf. Ignore errors as the kubelet may yet to be present up to the moment of the notification being processed. * Remove unnecessary kubelet restart for master role as the node role ensures it is up and running. Notify master static pods waiters for apiserver, scheduler, controller-manager instead. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-27 09:54:12 +00:00
notify: Master | wait for kube-scheduler
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: kube-scheduler
Reference in a new issue Copy permalink