c12s-kubespray/roles/etcd/tasks/main.yml

---
- include: pre_upgrade.yml
  tags: etcd-pre-upgrade

- include: check_certs.yml
  when: cert_management == "script"
  tags: [etcd-secrets, facts]
- include: gen_certs_script.yml
  when: cert_management == "script"
  tags: etcd-secrets

- include: sync_etcd_master_certs.yml
  when: cert_management == "vault" and inventory_hostname in groups.etcd
  tags: etcd-secrets
- include: sync_etcd_node_certs.yml
  when: cert_management == "vault" and inventory_hostname in etcd_node_cert_hosts 
  tags: etcd-secrets
- include: gen_certs_vault.yml
  when: cert_management == "vault" and (etcd_master_certs_needed|d() or etcd_node_certs_needed|d())
  tags: etcd-secrets

- include: "install_{{ etcd_deployment_type }}.yml"
  when: is_etcd_master
  tags: upgrade
- include: set_cluster_health.yml
  when: is_etcd_master
- include: configure.yml
  when: is_etcd_master
- include: refresh_config.yml
  when: is_etcd_master

- name: Restart etcd if binary or certs changed
  command: /bin/true
  notify: restart etcd
  when: etcd_deployment_type == "host" and etcd_copy.stdout_lines and is_etcd_master
    or etcd_secret_changed|default(false)

# reload-systemd
- meta: flush_handlers

- name: Ensure etcd is running
  service:
    name: etcd
    state: started
    enabled: yes
  when: is_etcd_master

# After etcd cluster is assembled, make sure that
# initial state of the cluster is in `existing`
# state insted of `new`.
- include: set_cluster_health.yml
  when: is_etcd_master
- include: refresh_config.yml
  when: is_etcd_master
Initial commit 2015-10-03 20:19:50 +00:00			`---`
Remove etcd-proxy from all nodes and use etcd multiaccess 2016-11-09 10:31:12 +00:00			`- include: pre_upgrade.yml`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`tags: etcd-pre-upgrade`
Vault security hardening and role isolation 2017-02-08 21:41:36 +00:00
Add etcd TLS support 2016-11-09 10:44:41 +00:00			`- include: check_certs.yml`
Vault security hardening and role isolation 2017-02-08 21:41:36 +00:00			`when: cert_management == "script"`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`tags: [etcd-secrets, facts]`
Vault security hardening and role isolation 2017-02-08 21:41:36 +00:00			`- include: gen_certs_script.yml`
			`when: cert_management == "script"`
			`tags: etcd-secrets`

			`- include: sync_etcd_master_certs.yml`
			`when: cert_management == "vault" and inventory_hostname in groups.etcd`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`tags: etcd-secrets`
Vault security hardening and role isolation 2017-02-08 21:41:36 +00:00			`- include: sync_etcd_node_certs.yml`
			`when: cert_management == "vault" and inventory_hostname in etcd_node_cert_hosts`
			`tags: etcd-secrets`
			`- include: gen_certs_vault.yml`
			`when: cert_management == "vault" and (etcd_master_certs_needed\|d() or etcd_node_certs_needed\|d())`
			`tags: etcd-secrets`

Allowing etcd to run via rkt 2016-12-13 17:20:22 +00:00			`- include: "install_{{ etcd_deployment_type }}.yml"`
Remove etcd-proxy from all nodes and use etcd multiaccess 2016-11-09 10:31:12 +00:00			`when: is_etcd_master`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`tags: upgrade`
Scale-up functionality for etcd cluster * Set ETCD_INITIAL_CLUSTER_STATE from `new` to `existing`, because parameter `new` makes sense only on cluster assembly stage. * If cluster exists and current node is not a part of the cluster, add it with command `etcdctl add member name url`. Closes kubespray/kargo/#270 2016-05-27 09:55:52 +00:00			`- include: set_cluster_health.yml`
Remove etcd-proxy from all nodes and use etcd multiaccess 2016-11-09 10:31:12 +00:00			`when: is_etcd_master`
etcd directly in host fix etcd configuration for nodes fix wrong calico checksums using a var name etcd_bin_dir fix etcd handlers for sysvinit using a var name etcd_bin_dir sysvinit script review etcd configuration 2016-01-19 14:23:19 +00:00			`- include: configure.yml`
Remove etcd-proxy from all nodes and use etcd multiaccess 2016-11-09 10:31:12 +00:00			`when: is_etcd_master`
Scale-up functionality for etcd cluster * Set ETCD_INITIAL_CLUSTER_STATE from `new` to `existing`, because parameter `new` makes sense only on cluster assembly stage. * If cluster exists and current node is not a part of the cluster, add it with command `etcdctl add member name url`. Closes kubespray/kargo/#270 2016-05-27 09:55:52 +00:00			`- include: refresh_config.yml`
Remove etcd-proxy from all nodes and use etcd multiaccess 2016-11-09 10:31:12 +00:00			`when: is_etcd_master`
use rsync instead of command 2016-01-23 17:26:07 +00:00
Individual etcd ssl certs Includes hooks for triggering calico, kubelet, and kube-apiserver restarts if etcd certs changed. 2016-12-13 09:03:35 +00:00			`- name: Restart etcd if binary or certs changed`
Set default etcd deployment to docker Improved docker reload command to wait for etcd to be up before proceeding. Switched reload to run restart because it can't reload if it is not guaranteed to be in running state. 2016-07-19 13:45:37 +00:00			`command: /bin/true`
			`notify: restart etcd`
			`when: etcd_deployment_type == "host" and etcd_copy.stdout_lines and is_etcd_master`
Individual etcd ssl certs Includes hooks for triggering calico, kubelet, and kube-apiserver restarts if etcd certs changed. 2016-12-13 09:03:35 +00:00			`or etcd_secret_changed\|default(false)`
Set default etcd deployment to docker Improved docker reload command to wait for etcd to be up before proceeding. Switched reload to run restart because it can't reload if it is not guaranteed to be in running state. 2016-07-19 13:45:37 +00:00
Flush handlers before etcd restart systemctl daemon-reload should be run before when task modifies/creates union for etcd. Otherwise etcd won't be able to start Closes #892 Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com> 2017-01-13 11:43:43 +00:00			`# reload-systemd`
Set default etcd deployment to docker Improved docker reload command to wait for etcd to be up before proceeding. Switched reload to run restart because it can't reload if it is not guaranteed to be in running state. 2016-07-19 13:45:37 +00:00			`- meta: flush_handlers`

Flush handlers before etcd restart systemctl daemon-reload should be run before when task modifies/creates union for etcd. Otherwise etcd won't be able to start Closes #892 Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com> 2017-01-13 11:43:43 +00:00			`- name: Ensure etcd is running`
			`service:`
			`name: etcd`
			`state: started`
			`enabled: yes`
			`when: is_etcd_master`

Scale-up functionality for etcd cluster * Set ETCD_INITIAL_CLUSTER_STATE from `new` to `existing`, because parameter `new` makes sense only on cluster assembly stage. * If cluster exists and current node is not a part of the cluster, add it with command `etcdctl add member name url`. Closes kubespray/kargo/#270 2016-05-27 09:55:52 +00:00			`# After etcd cluster is assembled, make sure that`
			# initial state of the cluster is in `existing`
			# state insted of `new`.
			`- include: set_cluster_health.yml`
Remove etcd-proxy from all nodes and use etcd multiaccess 2016-11-09 10:31:12 +00:00			`when: is_etcd_master`
Scale-up functionality for etcd cluster * Set ETCD_INITIAL_CLUSTER_STATE from `new` to `existing`, because parameter `new` makes sense only on cluster assembly stage. * If cluster exists and current node is not a part of the cluster, add it with command `etcdctl add member name url`. Closes kubespray/kargo/#270 2016-05-27 09:55:52 +00:00			`- include: refresh_config.yml`
Remove etcd-proxy from all nodes and use etcd multiaccess 2016-11-09 10:31:12 +00:00			`when: is_etcd_master`