C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
c12s-kubespray/roles/kubernetes/preinstall/tasks/main.yml

135 lines
2.8 KiB
YAML
Raw Normal View History

install docker on a largest number of linux distribution (based on https://github.com/marklee77/ansible-role-docker)
2015-12-30 16:11:33 +00:00
---
Add manage swap on the worker node
2018-06-21 06:17:03 +00:00
# Disable swap
Update dir list
2018-08-23 14:51:52 +00:00
- import_tasks: 0010-swapoff.yml
Skip most of kubernetes/preinstall role during late DNS config (#3627) When using resolvconf_mode host_resolvconf, there is an early DNS config stage where Kubernetes cluster DNS is not injected for host DNS intially. Later, the cluster DNS is enabled, but we do not need to run every task from the kubernetes/preinstall role.
2018-11-01 15:08:50 +00:00
when:
- not dns_late
- disable_swap
Add manage swap on the worker node
2018-06-21 06:17:03 +00:00
Update dir list
2018-08-23 14:51:52 +00:00
- import_tasks: 0020-verify-settings.yml
Skip most of kubernetes/preinstall role during late DNS config (#3627) When using resolvconf_mode host_resolvconf, there is an early DNS config stage where Kubernetes cluster DNS is not injected for host DNS intially. Later, the cluster DNS is enabled, but we do not need to run every task from the kubernetes/preinstall role.
2018-11-01 15:08:50 +00:00
when:
- not dns_late
Normalize tags in all places to prepare for tag fixing in future (#1739)
2017-10-05 07:43:04 +00:00
tags:
- asserts
Drop non systemd OS types support Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-02 11:14:03 +00:00
Update dir list
2018-08-23 14:51:52 +00:00
- import_tasks: 0040-set_facts.yml
Normalize tags in all places to prepare for tag fixing in future (#1739)
2017-10-05 07:43:04 +00:00
tags:
Update dir list
2018-08-23 14:51:52 +00:00
- resolvconf
Normalize tags in all places to prepare for tag fixing in future (#1739)
2017-10-05 07:43:04 +00:00
- facts
ensure bin dir for coreos before anything else
2016-08-26 17:24:47 +00:00
Update dir list
2018-08-23 14:51:52 +00:00
- import_tasks: 0050-create_directories.yml
Skip most of kubernetes/preinstall role during late DNS config (#3627) When using resolvconf_mode host_resolvconf, there is an early DNS config stage where Kubernetes cluster DNS is not injected for host DNS intially. Later, the cluster DNS is enabled, but we do not need to run every task from the kubernetes/preinstall role.
2018-11-01 15:08:50 +00:00
when:
- not dns_late
Mount local volume provisioner dirs for containerized kubelet (#2648)
2018-04-12 19:55:13 +00:00
Update dir list
2018-08-23 14:51:52 +00:00
- import_tasks: 0060-resolvconf.yml
Update main.yml (#1822) * Update main.yml Needs to set up resolv.conf before updating Yum cache otherwise no name resolution available (resolv.conf empty). * Update main.yml Removing trailing spaces
2017-10-18 10:42:00 +00:00
when:
- dns_mode != 'none'
- resolvconf_mode == 'host_resolvconf'
Enable systemd-resolved DNS resolution mode (#5318) Change-Id: If3e253a40782e03cde7fc4a91493517ae31fda17
2019-11-06 11:33:52 +00:00
- systemd_resolved_enabled.rc != 0
Fix host DNS config 1) being edited too soon and 2) not working with NM (#8575) Signed-off-by: Mac Chaffee <me@macchaffee.com>
2022-02-26 18:29:23 +00:00
- networkmanager_enabled.rc != 0
Enable systemd-resolved DNS resolution mode (#5318) Change-Id: If3e253a40782e03cde7fc4a91493517ae31fda17
2019-11-06 11:33:52 +00:00
tags:
- bootstrap-os
- resolvconf
- import_tasks: 0061-systemd-resolved.yml
when:
- dns_mode != 'none'
- resolvconf_mode == 'host_resolvconf'
- systemd_resolved_enabled.rc == 0
Update main.yml (#1822) * Update main.yml Needs to set up resolv.conf before updating Yum cache otherwise no name resolution available (resolv.conf empty). * Update main.yml Removing trailing spaces
2017-10-18 10:42:00 +00:00
tags:
- bootstrap-os
- resolvconf
Add kube-ipvs0/nodelocaldns to NetworkManager unmanaged-devices (#7315) On CentOS 8 they seem to be ignored by default, but better be extra safe This also make it easy to exclude other network plugin interfaces Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-03-03 15:27:20 +00:00
- import_tasks: 0062-networkmanager-unmanaged-devices.yml
Fix host DNS config 1) being edited too soon and 2) not working with NM (#8575) Signed-off-by: Mac Chaffee <me@macchaffee.com>
2022-02-26 18:29:23 +00:00
when:
- networkmanager_enabled.rc == 0
Add kube-ipvs0/nodelocaldns to NetworkManager unmanaged-devices (#7315) On CentOS 8 they seem to be ignored by default, but better be extra safe This also make it easy to exclude other network plugin interfaces Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-03-03 15:27:20 +00:00
tags:
- bootstrap-os
- import_tasks: 0063-networkmanager-dns.yml
Use NetworkManager to manage resolv.conf in FedoraCoreOS (#6291)
2020-06-29 07:26:17 +00:00
when:
- dns_mode != 'none'
- resolvconf_mode == 'host_resolvconf'
Fix host DNS config 1) being edited too soon and 2) not working with NM (#8575) Signed-off-by: Mac Chaffee <me@macchaffee.com>
2022-02-26 18:29:23 +00:00
- networkmanager_enabled.rc == 0
Use NetworkManager to manage resolv.conf in FedoraCoreOS (#6291)
2020-06-29 07:26:17 +00:00
tags:
- bootstrap-os
- resolvconf
Update dir list
2018-08-23 14:51:52 +00:00
- import_tasks: 0070-system-packages.yml
Skip most of kubernetes/preinstall role during late DNS config (#3627) When using resolvconf_mode host_resolvconf, there is an early DNS config stage where Kubernetes cluster DNS is not injected for host DNS intially. Later, the cluster DNS is enabled, but we do not need to run every task from the kubernetes/preinstall role.
2018-11-01 15:08:50 +00:00
when:
- not dns_late
Normalize tags in all places to prepare for tag fixing in future (#1739)
2017-10-05 07:43:04 +00:00
tags:
- bootstrap-os
follow sysctl.conf file symlink if linked
2017-02-09 09:16:52 +00:00
Update dir list
2018-08-23 14:51:52 +00:00
- import_tasks: 0080-system-configurations.yml
Skip most of kubernetes/preinstall role during late DNS config (#3627) When using resolvconf_mode host_resolvconf, there is an early DNS config stage where Kubernetes cluster DNS is not injected for host DNS intially. Later, the cluster DNS is enabled, but we do not need to run every task from the kubernetes/preinstall role.
2018-11-01 15:08:50 +00:00
when:
- not dns_late
Normalize tags in all places to prepare for tag fixing in future (#1739)
2017-10-05 07:43:04 +00:00
tags:
- bootstrap-os
common role in order to support other linux distribs
2015-12-30 21:15:18 +00:00
add-managed-ntp-support (#9027)
2022-06-28 20:15:34 +00:00
- import_tasks: 0081-ntp-configurations.yml
when:
- not dns_late
- ntp_enabled
tags:
- bootstrap-os
Update dir list
2018-08-23 14:51:52 +00:00
- import_tasks: 0090-etchosts.yml
Skip most of kubernetes/preinstall role during late DNS config (#3627) When using resolvconf_mode host_resolvconf, there is an early DNS config stage where Kubernetes cluster DNS is not injected for host DNS intially. Later, the cluster DNS is enabled, but we do not need to run every task from the kubernetes/preinstall role.
2018-11-01 15:08:50 +00:00
when:
- not dns_late
Normalize tags in all places to prepare for tag fixing in future (#1739)
2017-10-05 07:43:04 +00:00
tags:
- bootstrap-os
- etchosts
Preconfigure DNS stack and docker early In order to enable offline/intranet installation cases: * Move DNS/resolvconf configuration to preinstall role. Remove skip_dnsmasq_k8s var as not needed anymore. * Preconfigure DNS stack early, which may be the case when downloading artifacts from intranet repositories. Do not configure K8s DNS resolvers for hosts /etc/resolv.conf yet early (as they may be not existing). * Reconfigure K8s DNS resolvers for hosts only after kubedns/dnsmasq was set up and before K8s apps to be created. * Move docker install task to early stage as well and unbind it from the etcd role's specific install path. Fix external flannel dependency on docker role handlers. Also fix the docker restart handlers' steps ordering to match the expected sequence (the socket then the service). * Add default resolver fact, which is the cloud provider specific and remove hardcoded GCE resolver. * Reduce default ndots for hosts /etc/resolv.conf to 2. Multiple search domains combined with high ndots values lead to poor performance of DNS stack and make ansible workers to fail very often with the "Timeout (12s) waiting for privilege escalation prompt:" error. * Update docs. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-07 15:57:05 +00:00
Update dir list
2018-08-23 14:51:52 +00:00
- import_tasks: 0100-dhclient-hooks.yml
Ansible 2.3 support - Fix when clauses in various places - Update requirements.txt - Fix README.md Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-04-26 12:11:13 +00:00
when:
- dns_mode != 'none'
- resolvconf_mode == 'host_resolvconf'
Run 0100-dhclient-hooks if dhcpclient is enabled (#8658) If running Kubespray on static IP environments, a task was failed like: TASK [kubernetes/preinstall : Configure dhclient hooks for resolv.conf (RH-only)] fatal: [ak8s2]: FAILED! => { "changed": false, "checksum": "..", "msg": "Destination directory /etc/dhcp/dhclient.d does not exist"} This adds a check for dhclientconffile for running 0100-dhclient-hooks to run the task only if dhcpclient is enabled.
2022-03-29 07:11:11 +00:00
- dhclientconffile is defined
Fix kubespray flatcar ansible_os_family and ansible_distribution (#8029) Closes https://github.com/kubernetes-sigs/kubespray/issues/8028 Signed-off-by: Iago Santos <iago.santos.pardo@adfinis.com>
2021-10-01 16:11:23 +00:00
- not ansible_os_family in ["Flatcar", "Flatcar Container Linux by Kinvolk"]
Normalize tags in all places to prepare for tag fixing in future (#1739)
2017-10-05 07:43:04 +00:00
tags:
- bootstrap-os
- resolvconf
Add tasks to undo changes to hosts /etc/resolv.conf and dhclient configs
2017-01-11 14:08:24 +00:00
Update dir list
2018-08-23 14:51:52 +00:00
- import_tasks: 0110-dhclient-hooks-undo.yml
Ansible 2.3 support - Fix when clauses in various places - Update requirements.txt - Fix README.md Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-04-26 12:11:13 +00:00
when:
- dns_mode != 'none'
- resolvconf_mode != 'host_resolvconf'
Run 0100-dhclient-hooks if dhcpclient is enabled (#8658) If running Kubespray on static IP environments, a task was failed like: TASK [kubernetes/preinstall : Configure dhclient hooks for resolv.conf (RH-only)] fatal: [ak8s2]: FAILED! => { "changed": false, "checksum": "..", "msg": "Destination directory /etc/dhcp/dhclient.d does not exist"} This adds a check for dhclientconffile for running 0100-dhclient-hooks to run the task only if dhcpclient is enabled.
2022-03-29 07:11:11 +00:00
- dhclientconffile is defined
Fix kubespray flatcar ansible_os_family and ansible_distribution (#8029) Closes https://github.com/kubernetes-sigs/kubespray/issues/8028 Signed-off-by: Iago Santos <iago.santos.pardo@adfinis.com>
2021-10-01 16:11:23 +00:00
- not ansible_os_family in ["Flatcar", "Flatcar Container Linux by Kinvolk"]
Normalize tags in all places to prepare for tag fixing in future (#1739)
2017-10-05 07:43:04 +00:00
tags:
- bootstrap-os
- resolvconf
Add tasks to undo changes to hosts /etc/resolv.conf and dhclient configs
2017-01-11 14:08:24 +00:00
Fix ansible syntax to avoid ansible warnings (one more) (#3536) * warning on meta flush_handlers * avoid rm * avoid "Module remote_tmp /root/.ansible/tmp did not exist and was created with a mode of 0700, this may cause issues when running as another user. To avoid this, create the remote_tmp dir with the correct permissions manually" warning on subsequent tasks using blockinfile * is match
2018-10-17 19:27:11 +00:00
# We need to make sure the network is restarted early enough so that docker can later pick up the correct system
# nameservers and search domains
Move to Ansible 3.4.0 (#7672) * Ansible: move to Ansible 3.4.0 which uses ansible-base 2.10.10 * Docs: add a note about ansible upgrade post 2.9.x * CI: ensure ansible is removed before ansible 3.x is installed to avoid pip failures * Ansible: use newer ansible-lint * Fix ansible-lint 5.0.11 found issues * syntax issues * risky-file-permissions * var-naming * role-name * molecule tests * Mitogen: use 0.3.0rc1 which adds support for ansible 2.10+ * Pin ansible-base to 2.10.11 to get package fix on RHEL8
2021-07-12 07:00:47 +00:00
- name: Flush handlers
meta: flush_handlers
Fix ansible syntax to avoid ansible warnings (one more) (#3536) * warning on meta flush_handlers * avoid rm * avoid "Module remote_tmp /root/.ansible/tmp did not exist and was created with a mode of 0700, this may cause issues when running as another user. To avoid this, create the remote_tmp dir with the correct permissions manually" warning on subsequent tasks using blockinfile * is match
2018-10-17 19:27:11 +00:00
Make growpart only run on Azure
2016-12-12 13:14:22 +00:00
- name: Check if we are running inside a Azure VM
Cleanup legacy syntax, spacing, files all to yml Migrate older inline= syntax to pure yml syntax for module args as to be consistant with most of the rest of the tasks Cleanup some spacing in various files Rename some files named yaml to yml for consistancy
2017-02-17 21:22:34 +00:00
stat:
path: /var/lib/waagent/
Only use stat get_checksum: yes when needed (#7270) By default Ansible stat module compute checksum, list extended attributes and find mime type To find all stat invocations that really use one of those: git grep -F stat. | grep -vE 'stat.(islnk|exists|lnk_source|writeable)' Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-10 13:36:59 +00:00
get_attributes: no
get_checksum: no
get_mime: no
Make growpart only run on Azure
2016-12-12 13:14:22 +00:00
register: azure_check
Skip most of kubernetes/preinstall role during late DNS config (#3627) When using resolvconf_mode host_resolvconf, there is an early DNS config stage where Kubernetes cluster DNS is not injected for host DNS intially. Later, the cluster DNS is enabled, but we do not need to run every task from the kubernetes/preinstall role.
2018-11-01 15:08:50 +00:00
when:
- not dns_late
Normalize tags in all places to prepare for tag fixing in future (#1739)
2017-10-05 07:43:04 +00:00
tags:
- bootstrap-os
Make growpart only run on Azure
2016-12-12 13:14:22 +00:00
Update dir list
2018-08-23 14:51:52 +00:00
- import_tasks: 0120-growpart-azure-centos-7.yml
Ansible 2.3 support - Fix when clauses in various places - Update requirements.txt - Fix README.md Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-04-26 12:11:13 +00:00
when:
Skip most of kubernetes/preinstall role during late DNS config (#3627) When using resolvconf_mode host_resolvconf, there is an early DNS config stage where Kubernetes cluster DNS is not injected for host DNS intially. Later, the cluster DNS is enabled, but we do not need to run every task from the kubernetes/preinstall role.
2018-11-01 15:08:50 +00:00
- not dns_late
Ansible 2.3 support - Fix when clauses in various places - Update requirements.txt - Fix README.md Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-04-26 12:11:13 +00:00
- azure_check.stat.exists
Initial AlmaLinux support (#7538) * AlmaLinux: ansible>2.9.19 is needed to know about AlmaLinux * AlmaLinux: identify as a centos derrivative * AlmaLinux: add AlmaLinux to checks for CentOS * Use ansible_os_family to compare family and not distribution
2021-04-23 06:50:03 +00:00
- ansible_os_family == "RedHat"
Normalize tags in all places to prepare for tag fixing in future (#1739)
2017-10-05 07:43:04 +00:00
tags:
- bootstrap-os
[calico] call calico checks early on to prevent altering the cluster with bad configuration (#8707)
2022-04-14 08:08:46 +00:00
- name: Run calico checks
include_role:
name: network_plugin/calico
tasks_from: check
when:
- kube_network_plugin == 'calico'
- not ignore_assert_errors
Reference in a new issue Copy permalink