c12s-kubespray/roles/kubernetes/node/tasks/main.yml

---
- set_fact:
    standalone_kubelet: >-
      {%- if inventory_hostname in groups['kube-master'] and inventory_hostname not in groups['kube-node'] -%}true{%- else -%}false{%- endif -%}
  tags: facts

- include: install.yml
  tags: kubelet

- include: nginx-proxy.yml
  when: is_kube_master == false and loadbalancer_apiserver_localhost|default(false)
  tags: nginx

- name: Write kubelet config file
  template: src=kubelet.j2 dest={{ kube_config_dir }}/kubelet.env backup=yes
  notify: restart kubelet
  tags: kubelet

- name: write the kubecfg (auth) file for kubelet
  template: src=node-kubeconfig.yaml.j2 dest={{ kube_config_dir }}/node-kubeconfig.yaml backup=yes
  notify: restart kubelet
  tags: kubelet

- name: Ensure nodePort range is reserved
  sysctl:
    name: net.ipv4.ip_local_reserved_ports
    value: "{{ kube_apiserver_node_port_range }}"
    sysctl_set: yes
    state: present
    reload: yes
  when: kube_apiserver_node_port_range is defined
  tags: kube-proxy

- name: Write proxy manifest
  template:
    src: manifests/kube-proxy.manifest.j2
    dest: "{{ kube_manifest_dir }}/kube-proxy.manifest"
  tags: kube-proxy

# reload-systemd
- meta: flush_handlers

- name: Enable kubelet
  service:
    name: kubelet
    enabled: yes
    state: started
  tags: kubelet
Initial commit 2015-10-03 20:19:50 +00:00			`---`
Address standalone kubelet config case Also place in global vars and do not repeat the kube_*_config_dir and kube_namespace vars for better code maintainability and UX. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-13 10:43:06 +00:00			`- set_fact:`
			`standalone_kubelet: >-`
			`{%- if inventory_hostname in groups['kube-master'] and inventory_hostname not in groups['kube-node'] -%}true{%- else -%}false{%- endif -%}`
			`tags: facts`

generate secrets on deployment machine test travis with sudo=true instead of required 2016-02-11 22:08:16 +00:00			`- include: install.yml`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`tags: kubelet`
generate secrets on deployment machine test travis with sudo=true instead of required 2016-02-11 22:08:16 +00:00
use nginx proxy on non-master nodes to proxy apiserver traffic Also adds all masters by hostname and localhost/127.0.0.1 to apiserver SSL certificate. Includes documentation update on how localhost loadbalancer works. 2016-09-28 11:05:08 +00:00			`- include: nginx-proxy.yml`
			`when: is_kube_master == false and loadbalancer_apiserver_localhost\|default(false)`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`tags: nginx`
use nginx proxy on non-master nodes to proxy apiserver traffic Also adds all masters by hostname and localhost/127.0.0.1 to apiserver SSL certificate. Includes documentation update on how localhost loadbalancer works. 2016-09-28 11:05:08 +00:00
Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs 2015-12-11 10:32:13 +00:00			`- name: Write kubelet config file`
run apiserver as a service reorder master handlers typo for sysvinit 2016-01-22 13:25:33 +00:00			`template: src=kubelet.j2 dest={{ kube_config_dir }}/kubelet.env backup=yes`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`notify: restart kubelet`
			`tags: kubelet`
Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs 2015-12-11 10:32:13 +00:00
			`- name: write the kubecfg (auth) file for kubelet`
			`template: src=node-kubeconfig.yaml.j2 dest={{ kube_config_dir }}/node-kubeconfig.yaml backup=yes`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`notify: restart kubelet`
			`tags: kubelet`
Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs 2015-12-11 10:32:13 +00:00
Prevent dynamic port allocation in nodePort range kube_apiserver_node_port_range should be accessible only to kube-proxy and not be taken by a dynamic port allocation. Potentially temporary if https://github.com/kubernetes/kubernetes/issues/40920 gets fixed. 2017-02-03 15:26:30 +00:00			`- name: Ensure nodePort range is reserved`
			`sysctl:`
			`name: net.ipv4.ip_local_reserved_ports`
			`value: "{{ kube_apiserver_node_port_range }}"`
			`sysctl_set: yes`
			`state: present`
			`reload: yes`
			`when: kube_apiserver_node_port_range is defined`
			`tags: kube-proxy`

Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs 2015-12-11 10:32:13 +00:00			`- name: Write proxy manifest`
Fix systemd reload and calico unit 2016-01-25 01:01:25 +00:00			`template:`
Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs 2015-12-11 10:32:13 +00:00			`src: manifests/kube-proxy.manifest.j2`
			`dest: "{{ kube_manifest_dir }}/kube-proxy.manifest"`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`tags: kube-proxy`
Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs 2015-12-11 10:32:13 +00:00
Fix systemd reload and calico unit 2016-01-25 01:01:25 +00:00			`# reload-systemd`
			`- meta: flush_handlers`

Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs 2015-12-11 10:32:13 +00:00			`- name: Enable kubelet`
			`service:`
			`name: kubelet`
			`enabled: yes`
			`state: started`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 13:36:00 +00:00			`tags: kubelet`