C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
c12s-kubespray/roles/kubernetes/master/tasks/main.yml

94 lines
2.9 KiB
YAML
Raw Normal View History

Initial commit
2015-10-03 20:19:50 +00:00
---
Deploy kubelet and kube-apiserver as containers kubelet via docker kube-apiserver as a static pod Fixed etcd service start to be more tolerant of slow start. Workaround for kube_version to stay in download role, but not download an files by creating a new "nothing" download entry.
2016-07-08 09:59:21 +00:00
- include: pre-upgrade.yml
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: k8s-pre-upgrade
Review role order, use master ip even when fqdn are used in the inventory
2015-12-16 22:49:01 +00:00
Copy kubectl from docker container Nearly the last stage of source all components to containers. Kubectl will be called from hyperkube image. Remaining tasks: * Move kube_version variable to kubernetes/preinstall * Drop placeholder download.nothing requirement
2016-07-25 10:56:58 +00:00
- name: Copy kubectl from hyperkube container
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-23 14:44:44 +00:00
command: "{{ docker_bin_dir }}/docker run --rm -v {{ bin_dir }}:/systembindir {{ hyperkube_image_repo }}:{{ hyperkube_image_tag }} /bin/cp /hyperkube /systembindir/kubectl"
Add retries for copying binaries from containers Closes issue: https://github.com/kubespray/kargo/issues/479 Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-13 12:36:01 +00:00
register: kube_task_result
until: kube_task_result.rc == 0
retries: 4
Add retry_stagger var for failed download/pushes. * Add the retry_stagger var to tweak push and retry time strategies. * Add large deployments related docs. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-15 09:23:27 +00:00
delay: "{{ retry_stagger | random + 3 }}"
use command instead of synchronize
2016-01-22 15:37:07 +00:00
changed_when: false
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: [hyperkube, kubectl, upgrade]
running kubernetes master processes as pods
2015-12-11 10:52:20 +00:00
Fix bash completion installation
2017-01-17 17:36:58 +00:00
- name: Install kubectl bash completion
shell: "{{ bin_dir }}/kubectl completion bash >/etc/bash_completion.d/kubectl.sh"
Generate kubectl bash completion from kubectl instead of file
2016-11-14 08:22:46 +00:00
when: ansible_os_family in ["Debian","RedHat"]
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: kubectl
Generate kubectl bash completion from kubectl instead of file
2016-11-14 08:22:46 +00:00
Fix bash completion installation
2017-01-17 17:36:58 +00:00
- name: Set kubectl bash completion file
file:
path: /etc/bash_completion.d/kubectl.sh
Generate kubectl bash completion from kubectl instead of file
2016-11-14 08:22:46 +00:00
owner: root
group: root
mode: 0755
Fix bash completion installation
2017-01-17 17:36:58 +00:00
when: ansible_os_family in ["Debian","RedHat"]
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: [kubectl, upgrade]
Generate kubectl bash completion from kubectl instead of file
2016-11-14 08:22:46 +00:00
Deploy kubelet and kube-apiserver as containers kubelet via docker kube-apiserver as a static pod Fixed etcd service start to be more tolerant of slow start. Workaround for kube_version to stay in download role, but not download an files by creating a new "nothing" download entry.
2016-07-08 09:59:21 +00:00
- name: Write kube-apiserver manifest
run apiserver as a service reorder master handlers typo for sysvinit
2016-01-22 13:25:33 +00:00
template:
Deploy kubelet and kube-apiserver as containers kubelet via docker kube-apiserver as a static pod Fixed etcd service start to be more tolerant of slow start. Workaround for kube_version to stay in download role, but not download an files by creating a new "nothing" download entry.
2016-07-08 09:59:21 +00:00
src: manifests/kube-apiserver.manifest.j2
dest: "{{ kube_manifest_dir }}/kube-apiserver.manifest"
Allow subdomains of dns_domain and fix kubelet restarts * Add a var for ndots (default 5) and put it hosts' /etc/resolv.conf. * Poke kube dns container image to v1.7 * In order to apply changes to kubelet, notify it to be restarted on changes made to /etc/resolv.conf. Ignore errors as the kubelet may yet to be present up to the moment of the notification being processed. * Remove unnecessary kubelet restart for master role as the node role ensures it is up and running. Notify master static pods waiters for apiserver, scheduler, controller-manager instead. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-27 09:54:12 +00:00
notify: Master | wait for the apiserver to be running
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: kube-apiserver
run apiserver as a service reorder master handlers typo for sysvinit
2016-01-22 13:25:33 +00:00
Allow subdomains of dns_domain and fix kubelet restarts * Add a var for ndots (default 5) and put it hosts' /etc/resolv.conf. * Poke kube dns container image to v1.7 * In order to apply changes to kubelet, notify it to be restarted on changes made to /etc/resolv.conf. Ignore errors as the kubelet may yet to be present up to the moment of the notification being processed. * Remove unnecessary kubelet restart for master role as the node role ensures it is up and running. Notify master static pods waiters for apiserver, scheduler, controller-manager instead. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-27 09:54:12 +00:00
- meta: flush_handlers
Address standalone kubelet config case Also place in global vars and do not repeat the kube_*_config_dir and kube_namespace vars for better code maintainability and UX. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-13 10:43:06 +00:00
Move namespace file to template directory
2017-04-18 12:59:14 +00:00
- name: Write kube system namespace manifest
template:
src: namespace.j2
Cleanup legacy syntax, spacing, files all to yml Migrate older inline= syntax to pure yml syntax for module args as to be consistant with most of the rest of the tasks Cleanup some spacing in various files Rename some files named yaml to yml for consistancy
2017-02-17 21:22:34 +00:00
dest: "{{kube_config_dir}}/{{system_namespace}}-ns.yml"
running kubernetes master processes as pods
2015-12-11 10:52:20 +00:00
run_once: yes
when: inventory_hostname == groups['kube-master'][0]
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: apps
running kubernetes master processes as pods
2015-12-11 10:52:20 +00:00
Address standalone kubelet config case Also place in global vars and do not repeat the kube_*_config_dir and kube_namespace vars for better code maintainability and UX. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-13 10:43:06 +00:00
- name: Check if kube system namespace exists
command: "{{ bin_dir }}/kubectl get ns {{system_namespace}}"
Fix namespace
2016-01-14 14:19:45 +00:00
register: 'kubesystem'
changed_when: False
Add native Vagrant support This allows you to simply run `vagrant up` to get a 3 node HA cluster. * Creates a dynamic inventory and uses the inventory/group_vars/all.yml * commented lines in inventory.example so that ansible doesn't try to use it. * added requirements.txt to give easy way to install ansible/ipaddr * added gitignore files to stop attempts to save unwated files * changed `Check if kube-system exists` to `failed_when: false` instead of `ignore_errors`
2016-05-08 15:11:09 +00:00
failed_when: False
Fix namespace
2016-01-14 14:19:45 +00:00
run_once: yes
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: apps
Fix namespace
2016-01-14 14:19:45 +00:00
Address standalone kubelet config case Also place in global vars and do not repeat the kube_*_config_dir and kube_namespace vars for better code maintainability and UX. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-13 10:43:06 +00:00
- name: Create kube system namespace
command: "{{ bin_dir }}/kubectl create -f {{kube_config_dir}}/{{system_namespace}}-ns.yml"
switch debian8-canal-ha to ubuntu
2017-03-23 15:55:37 +00:00
retries: 4
delay: "{{ retry_stagger | random + 3 }}"
restart scheduler and controller-manager too
2017-03-24 15:29:28 +00:00
register: create_system_ns
until: create_system_ns.rc == 0
Fix namespace
2016-01-14 14:19:45 +00:00
changed_when: False
run apiserver as a service reorder master handlers typo for sysvinit
2016-01-22 13:25:33 +00:00
when: kubesystem|failed and inventory_hostname == groups['kube-master'][0]
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: apps
Fix namespace
2016-01-14 14:19:45 +00:00
kube-master: Use TLS for scheduler and controllers communications This commit aims to enable the scheduler and controller-manager to access the proper {{ kube_api_endpoint }}, instead of the unauthenticated localhost port. Two aditionnal certs are generated on master nodes, and kubeconfig files are added for both pods.
2017-06-23 15:26:22 +00:00
- name: Write kube-controller-manager kubeconfig
template:
src: controller-manager-kubeconfig.yaml.j2
dest: "{{ kube_config_dir}}/controller-manager-kubeconfig.yaml"
notify: Master | wait for kube-controller-manager
tags: kube-controller-manager
running kubernetes master processes as pods
2015-12-11 10:52:20 +00:00
- name: Write kube-controller-manager manifest
template:
src: manifests/kube-controller-manager.manifest.j2
use master election option instead of podmaster
2016-03-21 21:25:09 +00:00
dest: "{{ kube_manifest_dir }}/kube-controller-manager.manifest"
Allow subdomains of dns_domain and fix kubelet restarts * Add a var for ndots (default 5) and put it hosts' /etc/resolv.conf. * Poke kube dns container image to v1.7 * In order to apply changes to kubelet, notify it to be restarted on changes made to /etc/resolv.conf. Ignore errors as the kubelet may yet to be present up to the moment of the notification being processed. * Remove unnecessary kubelet restart for master role as the node role ensures it is up and running. Notify master static pods waiters for apiserver, scheduler, controller-manager instead. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-27 09:54:12 +00:00
notify: Master | wait for kube-controller-manager
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: kube-controller-manager
running kubernetes master processes as pods
2015-12-11 10:52:20 +00:00
kube-master: Use TLS for scheduler and controllers communications This commit aims to enable the scheduler and controller-manager to access the proper {{ kube_api_endpoint }}, instead of the unauthenticated localhost port. Two aditionnal certs are generated on master nodes, and kubeconfig files are added for both pods.
2017-06-23 15:26:22 +00:00
- name: Write kube-scheduler kubeconfig
template:
src: scheduler-kubeconfig.yaml.j2
dest: "{{ kube_config_dir}}/scheduler-kubeconfig.yaml"
notify: Master | wait for kube-controller-manager
tags: kube-scheduler
running kubernetes master processes as pods
2015-12-11 10:52:20 +00:00
- name: Write kube-scheduler manifest
template:
src: manifests/kube-scheduler.manifest.j2
use master election option instead of podmaster
2016-03-21 21:25:09 +00:00
dest: "{{ kube_manifest_dir }}/kube-scheduler.manifest"
Allow subdomains of dns_domain and fix kubelet restarts * Add a var for ndots (default 5) and put it hosts' /etc/resolv.conf. * Poke kube dns container image to v1.7 * In order to apply changes to kubelet, notify it to be restarted on changes made to /etc/resolv.conf. Ignore errors as the kubelet may yet to be present up to the moment of the notification being processed. * Remove unnecessary kubelet restart for master role as the node role ensures it is up and running. Notify master static pods waiters for apiserver, scheduler, controller-manager instead. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-27 09:54:12 +00:00
notify: Master | wait for kube-scheduler
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 13:36:00 +00:00
tags: kube-scheduler
Migrate k8s data to etcd3 api store Default backend is now etcd3 (was etcd2). The migration process consists of the following steps: * check if migration is necessary * stop etcd on first etcd server * run migration script * start etcd on first etcd server * stop kube-apiserver until configuration is updated * update kube-apiserver * purge old etcdv2 data
2017-03-06 10:22:13 +00:00
- include: post-upgrade.yml
tags: k8s-post-upgrade
Reference in a new issue Copy permalink