c12s-kubespray/roles/kubernetes/master/tasks/pre-upgrade.yml

---
- name: "Pre-upgrade | check for kube-apiserver unit file"
  stat:
    path: /etc/systemd/system/kube-apiserver.service
  register: kube_apiserver_service_file
  tags: [facts, kube-apiserver]

- name: "Pre-upgrade | check for kube-apiserver init script"
  stat:
    path: /etc/init.d/kube-apiserver
  register: kube_apiserver_init_script
  tags: [facts, kube-apiserver]

- name: "Pre-upgrade | stop kube-apiserver if service defined"
  service:
    name: kube-apiserver
    state: stopped
  when: (kube_apiserver_service_file.stat.exists|default(False) or kube_apiserver_init_script.stat.exists|default(False))
  tags: kube-apiserver

- name: "Pre-upgrade | remove kube-apiserver service definition"
  file:
    path: "{{ item }}"
    state: absent
  when: (kube_apiserver_service_file.stat.exists|default(False) or kube_apiserver_init_script.stat.exists|default(False))
  with_items:
    - /etc/systemd/system/kube-apiserver.service
    - /etc/init.d/kube-apiserver
  tags: kube-apiserver

- name: "Pre-upgrade | See if kube-apiserver manifest exists"
  stat:
    path: /etc/kubernetes/manifests/kube-apiserver.manifest
  register: kube_apiserver_manifest
  when: secret_changed|default(false) or etcd_secret_changed|default(false)

- name: "Pre-upgrade | Write invalid image to kube-apiserver manifest if secrets were changed"
  replace:
    dest: /etc/kubernetes/manifests/kube-apiserver.manifest
    regexp: '(\s+)image:\s+.*?$'
    replace: '\1image: kill.apiserver.using.fake.image.in:manifest'
  register: kube_apiserver_manifest_replaced
  when: secret_changed|default(false) or etcd_secret_changed|default(false) and kube_apiserver_manifest.stat.exists

- name: "Pre-upgrade | Pause while waiting for kubelet to delete kube-apiserver pod"
  pause: seconds=20
  when: secret_changed|default(false) or etcd_secret_changed|default(false) and kube_apiserver_manifest.stat.exists
  tags: kube-apiserver
Deploy kubelet and kube-apiserver as containers kubelet via docker kube-apiserver as a static pod Fixed etcd service start to be more tolerant of slow start. Workaround for kube_version to stay in download role, but not download an files by creating a new "nothing" download entry. 2016-07-08 09:59:21 +00:00			`---`
			`- name: "Pre-upgrade \| check for kube-apiserver unit file"`
			`stat:`
			`path: /etc/systemd/system/kube-apiserver.service`
			`register: kube_apiserver_service_file`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`tags: [facts, kube-apiserver]`
Deploy kubelet and kube-apiserver as containers kubelet via docker kube-apiserver as a static pod Fixed etcd service start to be more tolerant of slow start. Workaround for kube_version to stay in download role, but not download an files by creating a new "nothing" download entry. 2016-07-08 09:59:21 +00:00
			`- name: "Pre-upgrade \| check for kube-apiserver init script"`
			`stat:`
			`path: /etc/init.d/kube-apiserver`
			`register: kube_apiserver_init_script`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`tags: [facts, kube-apiserver]`
Deploy kubelet and kube-apiserver as containers kubelet via docker kube-apiserver as a static pod Fixed etcd service start to be more tolerant of slow start. Workaround for kube_version to stay in download role, but not download an files by creating a new "nothing" download entry. 2016-07-08 09:59:21 +00:00
			`- name: "Pre-upgrade \| stop kube-apiserver if service defined"`
			`service:`
			`name: kube-apiserver`
			`state: stopped`
			`when: (kube_apiserver_service_file.stat.exists\|default(False) or kube_apiserver_init_script.stat.exists\|default(False))`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`tags: kube-apiserver`
Fix canal's calico networking config for ETCD TLS Also fixes kube-apiserver upgrade that was erroneously deleted in a previous commit. 2016-11-10 09:49:47 +00:00
			`- name: "Pre-upgrade \| remove kube-apiserver service definition"`
			`file:`
			`path: "{{ item }}"`
			`state: absent`
			`when: (kube_apiserver_service_file.stat.exists\|default(False) or kube_apiserver_init_script.stat.exists\|default(False))`
			`with_items:`
			`- /etc/systemd/system/kube-apiserver.service`
			`- /etc/init.d/kube-apiserver`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`tags: kube-apiserver`
Individual etcd ssl certs Includes hooks for triggering calico, kubelet, and kube-apiserver restarts if etcd certs changed. 2016-12-13 09:03:35 +00:00
			`- name: "Pre-upgrade \| See if kube-apiserver manifest exists"`
			`stat:`
			`path: /etc/kubernetes/manifests/kube-apiserver.manifest`
			`register: kube_apiserver_manifest`
			`when: secret_changed\|default(false) or etcd_secret_changed\|default(false)`

			`- name: "Pre-upgrade \| Write invalid image to kube-apiserver manifest if secrets were changed"`
			`replace:`
			`dest: /etc/kubernetes/manifests/kube-apiserver.manifest`
			`regexp: '(\s+)image:\s+.*?$'`
			`replace: '\1image: kill.apiserver.using.fake.image.in:manifest'`
			`register: kube_apiserver_manifest_replaced`
			`when: secret_changed\|default(false) or etcd_secret_changed\|default(false) and kube_apiserver_manifest.stat.exists`

			`- name: "Pre-upgrade \| Pause while waiting for kubelet to delete kube-apiserver pod"`
			`pause: seconds=20`
			`when: secret_changed\|default(false) or etcd_secret_changed\|default(false) and kube_apiserver_manifest.stat.exists`
			`tags: kube-apiserver`