c12s-kubespray/roles/kubernetes/master/tasks/main.yml

95 lines
2.8 KiB
YAML
Raw Normal View History

2015-10-03 20:19:50 +00:00
---
- name: Copy kubectl bash completion
copy:
src: kubectl_bash_completion.sh
dest: /etc/bash_completion.d/kubectl.sh
when: ansible_os_family in ["Debian","RedHat"]
2016-01-23 17:26:07 +00:00
- name: Copy kube-apiserver binary
command: rsync -piu "{{ local_release_dir }}/kubernetes/bin/kube-apiserver" "{{ bin_dir }}/kube-apiserver"
register: kube_apiserver_copy
changed_when: false
- name: Copy kubectl binary
command: rsync -piu "{{ local_release_dir }}/kubernetes/bin/kubectl" "{{ bin_dir }}/kubectl"
2016-01-22 15:37:07 +00:00
changed_when: false
- name: install | Write kube-apiserver systemd init file
template:
src: "kube-apiserver.service.j2"
dest: "/etc/systemd/system/kube-apiserver.service"
backup: yes
when: ansible_service_mgr == "systemd"
2016-01-25 01:01:25 +00:00
notify: restart kube-apiserver
- name: install | Write kube-apiserver initd script
template:
src: "deb-kube-apiserver.initd.j2"
dest: "/etc/init.d/kube-apiserver"
owner: root
2016-01-25 16:34:51 +00:00
mode: 0755
backup: yes
when: ansible_service_mgr in ["sysvinit","upstart"] and ansible_os_family == "Debian"
2016-01-23 17:26:07 +00:00
- name: Write kube-apiserver config file
template:
src: "kube-apiserver.j2"
dest: "{{ kube_config_dir }}/kube-apiserver.env"
backup: yes
notify: restart kube-apiserver
2016-01-24 21:27:55 +00:00
- name: Allow apiserver to bind on both secure and insecure ports
shell: setcap cap_net_bind_service+ep {{ bin_dir }}/kube-apiserver
changed_when: false
2016-01-25 01:01:25 +00:00
- meta: flush_handlers
2016-01-26 10:58:14 +00:00
- include: start.yml
with_items: groups['kube-master']
when: "{{ hostvars[item].inventory_hostname == inventory_hostname }}"
# Create kube-system namespace
2016-01-14 14:19:45 +00:00
- name: copy 'kube-system' namespace manifest
copy: src=namespace.yml dest=/etc/kubernetes/kube-system-ns.yml
run_once: yes
when: inventory_hostname == groups['kube-master'][0]
2016-01-14 14:19:45 +00:00
- name: Check if kube-system exists
2016-02-03 20:26:49 +00:00
command: "{{ bin_dir }}/kubectl get ns kube-system"
2016-01-14 14:19:45 +00:00
register: 'kubesystem'
changed_when: False
ignore_errors: yes
run_once: yes
- name: wait for the apiserver to be running
wait_for:
port: "{{kube_apiserver_insecure_port}}"
timeout: 60
2016-01-14 14:19:45 +00:00
- name: Create 'kube-system' namespace
2016-02-03 20:26:49 +00:00
command: "{{ bin_dir }}/kubectl create -f /etc/kubernetes/kube-system-ns.yml"
2016-01-14 14:19:45 +00:00
changed_when: False
when: kubesystem|failed and inventory_hostname == groups['kube-master'][0]
2016-01-14 14:19:45 +00:00
# Write manifests
- name: Write kube-controller-manager manifest
template:
src: manifests/kube-controller-manager.manifest.j2
dest: "{{ kube_config_dir }}/kube-controller-manager.manifest"
- name: Write kube-scheduler manifest
template:
src: manifests/kube-scheduler.manifest.j2
dest: "{{ kube_config_dir }}/kube-scheduler.manifest"
- name: Write podmaster manifest
template:
src: manifests/kube-podmaster.manifest.j2
dest: "{{ kube_manifest_dir }}/kube-podmaster.manifest"
2016-01-24 21:27:55 +00:00
- name: restart kubelet
service:
name: kubelet
state: restarted
changed_when: false