C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
c12s-kubespray/cluster.yml

128 lines
4.2 KiB
YAML
Raw Normal View History

Initial commit
2015-10-03 20:19:50 +00:00
---
bump minimal ansible version to 2.8.0 (#5984) * bump minimal ansible version to 2.8.0 * check ansible version in separate playbook
2020-04-22 20:33:44 +00:00
- name: Check ansible version
import_playbook: ansible_version.yml
Assert if ansible 2.7 is used (#3589)
2018-10-26 07:29:21 +00:00
Rename ansible groups to use _ instead of - (#7552) * rename ansible groups to use _ instead of - k8s-cluster -> k8s_cluster k8s-node -> k8s_node calico-rr -> calico_rr no-floating -> no_floating Note: kube-node,k8s-cluster groups in upgrade CI need clean-up after v2.16 is tagged * ensure old groups are mapped to the new ones
2021-04-29 12:20:50 +00:00
- name: Ensure compatibility with old groups
import_playbook: legacy_groups.yml
Replace kube-master with kube_control_plane (#7256) This replaces kube-master with kube_control_plane because of [1]: The Kubernetes project is moving away from wording that is considered offensive. A new working group WG Naming was created to track this work, and the word "master" was declared as offensive. A proposal was formalized for replacing the word "master" with "control plane". This means it should be removed from source code, documentation, and user-facing configuration from Kubernetes and its sub-projects. NOTE: The reason why this changes it to kube_control_plane not kube-control-plane is for valid group names on ansible. [1]: https://github.com/kubernetes/enhancements/blob/master/keps/sig-cluster-lifecycle/kubeadm/2067-rename-master-label-taint/README.md#motivation
2021-03-24 00:26:05 +00:00
Split deploy steps in separate playbooks: part1 (#3451) * Fix bootstrap_os/ubuntu idempotency * Update bastion role * move container_engine in sub-roles * requires ansible 2.5 * ubuntu18 as first CI job
2018-10-10 02:14:33 +00:00
- hosts: bastion[0]
Add support for bastion hosts
2016-12-09 09:38:17 +00:00
gather_facts: False
Fix proxy usage when *_PROXY are present in environment (#7309) Since a790935d02dc2787f6de41695ec955dc49fc93b1 all proxy users should be properly configured Now when you have *_PROXY vars in your environment it can leads to failure if NO_PROXY is not correct, or to persistent configuration changes as seen with kubeadm in 1c5391dda78b43fc629320dd59f1234e81afb2ad Instead of playing constant whack-a-bug, inject empty *_PROXY vars everywhere at the play level, and override at the task level when needed Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-23 17:44:02 +00:00
environment: "{{ proxy_disable_env }}"
Add support for bastion hosts
2016-12-09 09:38:17 +00:00
roles:
Fix chicken and egg problem with proxy_env not defined on the first … (#5896) * Fix chicken and egg problem with proxy_env not defined on the first envinronment usage. * Disable fact gathering for the first proxy_env evaluation. * Move proxy_env var set up from the role defaults to the root playbooks as fact.
2020-04-08 07:53:43 +00:00
- { role: kubespray-defaults }
- { role: bastion-ssh-config, tags: ["localhost", "bastion"] }
Add support for bastion hosts
2016-12-09 09:38:17 +00:00
Rename ansible groups to use _ instead of - (#7552) * rename ansible groups to use _ instead of - k8s-cluster -> k8s_cluster k8s-node -> k8s_node calico-rr -> calico_rr no-floating -> no_floating Note: kube-node,k8s-cluster groups in upgrade CI need clean-up after v2.16 is tagged * ensure old groups are mapped to the new ones
2021-04-29 12:20:50 +00:00
- hosts: k8s_cluster:etcd
add strategy mitogen_linear when installed mitogen (#5985) * add strategy mitogen_linear when installed mitogen * add small docs Rename playbook file The raw action executes as a regular Mitogen connection, which requires Python on the target, so add strategy: linear to bootstrap-os role playbook. * add mitogen to CI test fix typo * enable mitogen test on deploy-part1 tests change version from master to release download tar.gz archive * run all CI tests with mitogen * disable mitogen with upgrade CI tests * enable mitogen on CI tests via env vars * disable mitogen on CI test by default, enable on some different OS * disable mitogen CI test on centos8 (get error /usr/bin/python: No such file or directory)
2020-04-24 12:20:07 +00:00
strategy: linear
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 09:52:39 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
combine bootstrap options, add xenial support
2016-09-06 14:04:41 +00:00
gather_facts: false
Fix proxy usage when *_PROXY are present in environment (#7309) Since a790935d02dc2787f6de41695ec955dc49fc93b1 all proxy users should be properly configured Now when you have *_PROXY vars in your environment it can leads to failure if NO_PROXY is not correct, or to persistent configuration changes as seen with kubeadm in 1c5391dda78b43fc629320dd59f1234e81afb2ad Instead of playing constant whack-a-bug, inject empty *_PROXY vars everywhere at the play level, and override at the task level when needed Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-23 17:44:02 +00:00
environment: "{{ proxy_disable_env }}"
combine bootstrap options, add xenial support
2016-09-06 14:04:41 +00:00
roles:
Fix chicken and egg problem with proxy_env not defined on the first … (#5896) * Fix chicken and egg problem with proxy_env not defined on the first envinronment usage. * Disable fact gathering for the first proxy_env evaluation. * Move proxy_env var set up from the role defaults to the root playbooks as fact.
2020-04-08 07:53:43 +00:00
- { role: kubespray-defaults }
Add default var role
2017-02-23 11:07:17 +00:00
- { role: bootstrap-os, tags: bootstrap-os}
force fact check of all nodes first thing
2016-08-12 14:06:31 +00:00
Gather just the necessary facts (#5955) * Gather just the necessary facts * Move fact gathering to separate playbook.
2020-04-17 23:23:36 +00:00
- name: Gather facts
fix use of ansible tags (#6316) tags are not inherited for include_role therefore the change from include to import Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
2020-06-25 10:00:37 +00:00
tags: always
Gather just the necessary facts (#5955) * Gather just the necessary facts * Move fact gathering to separate playbook.
2020-04-17 23:23:36 +00:00
import_playbook: facts.yml
Rename ansible groups to use _ instead of - (#7552) * rename ansible groups to use _ instead of - k8s-cluster -> k8s_cluster k8s-node -> k8s_node calico-rr -> calico_rr no-floating -> no_floating Note: kube-node,k8s-cluster groups in upgrade CI need clean-up after v2.16 is tagged * ensure old groups are mapped to the new ones
2021-04-29 12:20:50 +00:00
- hosts: k8s_cluster:etcd
Gather just the necessary facts (#5955) * Gather just the necessary facts * Move fact gathering to separate playbook.
2020-04-17 23:23:36 +00:00
gather_facts: False
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 09:52:39 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Fix proxy usage when *_PROXY are present in environment (#7309) Since a790935d02dc2787f6de41695ec955dc49fc93b1 all proxy users should be properly configured Now when you have *_PROXY vars in your environment it can leads to failure if NO_PROXY is not correct, or to persistent configuration changes as seen with kubeadm in 1c5391dda78b43fc629320dd59f1234e81afb2ad Instead of playing constant whack-a-bug, inject empty *_PROXY vars everywhere at the play level, and override at the task level when needed Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-23 17:44:02 +00:00
environment: "{{ proxy_disable_env }}"
Use 0755 mode for binaries
2015-12-17 21:46:50 +00:00
roles:
Fix chicken and egg problem with proxy_env not defined on the first … (#5896) * Fix chicken and egg problem with proxy_env not defined on the first envinronment usage. * Disable fact gathering for the first proxy_env evaluation. * Move proxy_env var set up from the role defaults to the root playbooks as fact.
2020-04-08 07:53:43 +00:00
- { role: kubespray-defaults }
rename role common to kubernetes/preinstall
2015-12-31 09:03:22 +00:00
- { role: kubernetes/preinstall, tags: preinstall }
etcd: deploy container engine if needed (#7532) If the etcd cluster is separate and the etcd_deployment_type is "host", there is no need for a container engine on the etcd nodes Do not rely on a 'default(true)' filter, but define a proper default in kubespray-defaults depending on etcd deployment method and if internal or external etcd is used
2021-10-12 07:31:47 +00:00
- { role: "container-engine", tags: "container-engine", when: deploy_container_engine }
Fix skip_downloads condition.
2018-08-08 10:49:49 +00:00
- { role: download, tags: download, when: "not skip_downloads" }
Fix idempotency/recurrence of download and preinstall * Don't push containers if not changed * Do preinstall role only once and redistribute defaults to corresponding roles Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-10-24 13:11:52 +00:00
Remove standalone etcd specific play, cleanup host mode Now etcd role can optionally disable etcd cluster setup for faster deployment when it is combined with etcd role.
2017-03-03 20:30:37 +00:00
- hosts: etcd
Gather just the necessary facts (#5955) * Gather just the necessary facts * Move fact gathering to separate playbook.
2020-04-17 23:23:36 +00:00
gather_facts: False
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 09:52:39 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Fix proxy usage when *_PROXY are present in environment (#7309) Since a790935d02dc2787f6de41695ec955dc49fc93b1 all proxy users should be properly configured Now when you have *_PROXY vars in your environment it can leads to failure if NO_PROXY is not correct, or to persistent configuration changes as seen with kubeadm in 1c5391dda78b43fc629320dd59f1234e81afb2ad Instead of playing constant whack-a-bug, inject empty *_PROXY vars everywhere at the play level, and override at the task level when needed Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-23 17:44:02 +00:00
environment: "{{ proxy_disable_env }}"
Vault security hardening and role isolation
2017-02-08 21:41:36 +00:00
roles:
Fix chicken and egg problem with proxy_env not defined on the first … (#5896) * Fix chicken and egg problem with proxy_env not defined on the first envinronment usage. * Disable fact gathering for the first proxy_env evaluation. * Move proxy_env var set up from the role defaults to the root playbooks as fact.
2020-04-08 07:53:43 +00:00
- { role: kubespray-defaults }
Enable kubeadm etcd mode (#4818) * Enable kubeadm etcd mode Uses cert commands from kubeadm experimental control plane to enable non-master nodes to obtain etcd certs. Related story: PROD-29434 Change-Id: Idafa1d223e5c6ceadf819b6f9c06adf4c4f74178 * Add validation checks and exclude calico kdd mode Change-Id: Ic234f5e71261d33191376e70d438f9f6d35f358c * Move etcd mode test to ubuntu flannel HA job Change-Id: I9af6fd80a1bbb1692ab10d6da095eb368f6bc732 * rename etcd_mode to etcd_kubeadm_enabled Change-Id: Ib196d6c8a52f48cae370b026f7687ff9ca69c172
2019-06-20 18:12:51 +00:00
- role: etcd
tags: etcd
vars:
etcd_cluster_setup: true
etcd_events_cluster_setup: "{{ etcd_events_cluster_enabled }}"
Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable (#8317) * Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable Signed-off-by: necatican <necaticanyildirim@gmail.com> * Add etcd kubeadm deployment documentation Signed-off-by: necatican <necaticanyildirim@gmail.com> * Refactor warning for the deprecated 'etcd_kubeadm_enabled' variable Signed-off-by: necatican <necaticanyildirim@gmail.com>
2022-02-22 16:53:16 +00:00
when: etcd_deployment_type != "kubeadm"
Vault security hardening and role isolation
2017-02-08 21:41:36 +00:00
Rename ansible groups to use _ instead of - (#7552) * rename ansible groups to use _ instead of - k8s-cluster -> k8s_cluster k8s-node -> k8s_node calico-rr -> calico_rr no-floating -> no_floating Note: kube-node,k8s-cluster groups in upgrade CI need clean-up after v2.16 is tagged * ensure old groups are mapped to the new ones
2021-04-29 12:20:50 +00:00
- hosts: k8s_cluster
Gather just the necessary facts (#5955) * Gather just the necessary facts * Move fact gathering to separate playbook.
2020-04-17 23:23:36 +00:00
gather_facts: False
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 09:52:39 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Fix proxy usage when *_PROXY are present in environment (#7309) Since a790935d02dc2787f6de41695ec955dc49fc93b1 all proxy users should be properly configured Now when you have *_PROXY vars in your environment it can leads to failure if NO_PROXY is not correct, or to persistent configuration changes as seen with kubeadm in 1c5391dda78b43fc629320dd59f1234e81afb2ad Instead of playing constant whack-a-bug, inject empty *_PROXY vars everywhere at the play level, and override at the task level when needed Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-23 17:44:02 +00:00
environment: "{{ proxy_disable_env }}"
Fix idempotency/recurrence of download and preinstall * Don't push containers if not changed * Do preinstall role only once and redistribute defaults to corresponding roles Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-10-24 13:11:52 +00:00
roles:
Fix chicken and egg problem with proxy_env not defined on the first … (#5896) * Fix chicken and egg problem with proxy_env not defined on the first envinronment usage. * Disable fact gathering for the first proxy_env evaluation. * Move proxy_env var set up from the role defaults to the root playbooks as fact.
2020-04-08 07:53:43 +00:00
- { role: kubespray-defaults }
Enable kubeadm etcd mode (#4818) * Enable kubeadm etcd mode Uses cert commands from kubeadm experimental control plane to enable non-master nodes to obtain etcd certs. Related story: PROD-29434 Change-Id: Idafa1d223e5c6ceadf819b6f9c06adf4c4f74178 * Add validation checks and exclude calico kdd mode Change-Id: Ic234f5e71261d33191376e70d438f9f6d35f358c * Move etcd mode test to ubuntu flannel HA job Change-Id: I9af6fd80a1bbb1692ab10d6da095eb368f6bc732 * rename etcd_mode to etcd_kubeadm_enabled Change-Id: Ib196d6c8a52f48cae370b026f7687ff9ca69c172
2019-06-20 18:12:51 +00:00
- role: etcd
tags: etcd
vars:
etcd_cluster_setup: false
etcd_events_cluster_setup: false
Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable (#8317) * Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable Signed-off-by: necatican <necaticanyildirim@gmail.com> * Add etcd kubeadm deployment documentation Signed-off-by: necatican <necaticanyildirim@gmail.com> * Refactor warning for the deprecated 'etcd_kubeadm_enabled' variable Signed-off-by: necatican <necaticanyildirim@gmail.com>
2022-02-22 16:53:16 +00:00
when: etcd_deployment_type != "kubeadm"
Fix etcd standalone deployment etcd facts are generated in kubernetes/preinstall, so etcd nodes need to be evaluated first before the rest of the deployment. Moved several directory facts from kubernetes/node to kubernetes/preinstall because they are not backward dependent.
2016-07-26 13:18:47 +00:00
Rename ansible groups to use _ instead of - (#7552) * rename ansible groups to use _ instead of - k8s-cluster -> k8s_cluster k8s-node -> k8s_node calico-rr -> calico_rr no-floating -> no_floating Note: kube-node,k8s-cluster groups in upgrade CI need clean-up after v2.16 is tagged * ensure old groups are mapped to the new ones
2021-04-29 12:20:50 +00:00
- hosts: k8s_cluster
Gather just the necessary facts (#5955) * Gather just the necessary facts * Move fact gathering to separate playbook.
2020-04-17 23:23:36 +00:00
gather_facts: False
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 09:52:39 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Fix proxy usage when *_PROXY are present in environment (#7309) Since a790935d02dc2787f6de41695ec955dc49fc93b1 all proxy users should be properly configured Now when you have *_PROXY vars in your environment it can leads to failure if NO_PROXY is not correct, or to persistent configuration changes as seen with kubeadm in 1c5391dda78b43fc629320dd59f1234e81afb2ad Instead of playing constant whack-a-bug, inject empty *_PROXY vars everywhere at the play level, and override at the task level when needed Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-23 17:44:02 +00:00
environment: "{{ proxy_disable_env }}"
Fix etcd standalone deployment etcd facts are generated in kubernetes/preinstall, so etcd nodes need to be evaluated first before the rest of the deployment. Moved several directory facts from kubernetes/node to kubernetes/preinstall because they are not backward dependent.
2016-07-26 13:18:47 +00:00
roles:
Fix chicken and egg problem with proxy_env not defined on the first … (#5896) * Fix chicken and egg problem with proxy_env not defined on the first envinronment usage. * Disable fact gathering for the first proxy_env evaluation. * Move proxy_env var set up from the role defaults to the root playbooks as fact.
2020-04-08 07:53:43 +00:00
- { role: kubespray-defaults }
Run etcd as pod
2015-12-23 22:27:40 +00:00
- { role: kubernetes/node, tags: node }
Initial commit
2015-10-03 20:19:50 +00:00
Replace kube-master with kube_control_plane (#7256) This replaces kube-master with kube_control_plane because of [1]: The Kubernetes project is moving away from wording that is considered offensive. A new working group WG Naming was created to track this work, and the word "master" was declared as offensive. A proposal was formalized for replacing the word "master" with "control plane". This means it should be removed from source code, documentation, and user-facing configuration from Kubernetes and its sub-projects. NOTE: The reason why this changes it to kube_control_plane not kube-control-plane is for valid group names on ansible. [1]: https://github.com/kubernetes/enhancements/blob/master/keps/sig-cluster-lifecycle/kubeadm/2067-rename-master-label-taint/README.md#motivation
2021-03-24 00:26:05 +00:00
- hosts: kube_control_plane
Gather just the necessary facts (#5955) * Gather just the necessary facts * Move fact gathering to separate playbook.
2020-04-17 23:23:36 +00:00
gather_facts: False
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 09:52:39 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Fix proxy usage when *_PROXY are present in environment (#7309) Since a790935d02dc2787f6de41695ec955dc49fc93b1 all proxy users should be properly configured Now when you have *_PROXY vars in your environment it can leads to failure if NO_PROXY is not correct, or to persistent configuration changes as seen with kubeadm in 1c5391dda78b43fc629320dd59f1234e81afb2ad Instead of playing constant whack-a-bug, inject empty *_PROXY vars everywhere at the play level, and override at the task level when needed Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-23 17:44:02 +00:00
environment: "{{ proxy_disable_env }}"
review roles order
2015-12-11 10:40:56 +00:00
roles:
Fix chicken and egg problem with proxy_env not defined on the first … (#5896) * Fix chicken and egg problem with proxy_env not defined on the first envinronment usage. * Disable fact gathering for the first proxy_env evaluation. * Move proxy_env var set up from the role defaults to the root playbooks as fact.
2020-04-08 07:53:43 +00:00
- { role: kubespray-defaults }
Move kubernetes/master to kubernetes/control-plane (#7218) This is a small step to replace "master" with "control-plane" in Kubespray project.
2021-02-01 15:15:49 +00:00
- { role: kubernetes/control-plane, tags: master }
Move cluster roles and system namespace to new role This should be done after kubeconfig is set for admin and before network plugins are up.
2017-10-26 08:10:33 +00:00
- { role: kubernetes/client, tags: client }
- { role: kubernetes-apps/cluster_roles, tags: cluster-roles }
kubeadm support (#1631) * kubeadm support * move k8s master to a subtask * disable k8s secrets when using kubeadm * fix etcd cert serial var * move simple auth users to master role * make a kubeadm-specific env file for kubelet * add non-ha CI job * change ci boolean vars to json format * fixup * Update create-gce.yml * Update create-gce.yml * Update create-gce.yml
2017-09-13 18:00:51 +00:00
Rename ansible groups to use _ instead of - (#7552) * rename ansible groups to use _ instead of - k8s-cluster -> k8s_cluster k8s-node -> k8s_node calico-rr -> calico_rr no-floating -> no_floating Note: kube-node,k8s-cluster groups in upgrade CI need clean-up after v2.16 is tagged * ensure old groups are mapped to the new ones
2021-04-29 12:20:50 +00:00
- hosts: k8s_cluster
Gather just the necessary facts (#5955) * Gather just the necessary facts * Move fact gathering to separate playbook.
2020-04-17 23:23:36 +00:00
gather_facts: False
kubeadm support (#1631) * kubeadm support * move k8s master to a subtask * disable k8s secrets when using kubeadm * fix etcd cert serial var * move simple auth users to master role * make a kubeadm-specific env file for kubelet * add non-ha CI job * change ci boolean vars to json format * fixup * Update create-gce.yml * Update create-gce.yml * Update create-gce.yml
2017-09-13 18:00:51 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Fix proxy usage when *_PROXY are present in environment (#7309) Since a790935d02dc2787f6de41695ec955dc49fc93b1 all proxy users should be properly configured Now when you have *_PROXY vars in your environment it can leads to failure if NO_PROXY is not correct, or to persistent configuration changes as seen with kubeadm in 1c5391dda78b43fc629320dd59f1234e81afb2ad Instead of playing constant whack-a-bug, inject empty *_PROXY vars everywhere at the play level, and override at the task level when needed Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-23 17:44:02 +00:00
environment: "{{ proxy_disable_env }}"
kubeadm support (#1631) * kubeadm support * move k8s master to a subtask * disable k8s secrets when using kubeadm * fix etcd cert serial var * move simple auth users to master role * make a kubeadm-specific env file for kubelet * add non-ha CI job * change ci boolean vars to json format * fixup * Update create-gce.yml * Update create-gce.yml * Update create-gce.yml
2017-09-13 18:00:51 +00:00
roles:
Fix chicken and egg problem with proxy_env not defined on the first … (#5896) * Fix chicken and egg problem with proxy_env not defined on the first envinronment usage. * Disable fact gathering for the first proxy_env evaluation. * Move proxy_env var set up from the role defaults to the root playbooks as fact.
2020-04-08 07:53:43 +00:00
- { role: kubespray-defaults }
Remove non-kubeadm deployment (#3811) * Remove non-kubeadm deployment * More cleanup * More cleanup * More cleanup * More cleanup * Fix gitlab * Try stop gce first before absent to make the delete process work * More cleanup * Fix bug with checking if kubeadm has already run * Fix bug with checking if kubeadm has already run * More fixes * Fix test * fix * Fix gitlab checkout untill kubespray 2.8 is on quay * Fixed * Add upgrade path from non-kubeadm to kubeadm. Revert ssl path * Readd secret checking * Do gitlab checks from v2.7.0 test upgrade path to 2.8.0 * fix typo * Fix CI jobs to kubeadm again. Fix broken hyperkube path * Fix gitlab * Fix rotate tokens * More fixes * More fixes * Fix tokens
2018-12-06 10:33:38 +00:00
- { role: kubernetes/kubeadm, tags: kubeadm}
tag role kubernetes/node-label in playbooks (#5560)
2020-01-20 19:43:36 +00:00
- { role: kubernetes/node-label, tags: node-label }
Add nodeSelctor for other services and node labels before CNI setup (#7613)
2021-05-25 20:40:43 +00:00
- { role: network_plugin, tags: network }
kubeadm support (#1631) * kubeadm support * move k8s master to a subtask * disable k8s secrets when using kubeadm * fix etcd cert serial var * move simple auth users to master role * make a kubeadm-specific env file for kubelet * add non-ha CI job * change ci boolean vars to json format * fixup * Update create-gce.yml * Update create-gce.yml * Update create-gce.yml
2017-09-13 18:00:51 +00:00
Rename ansible groups to use _ instead of - (#7552) * rename ansible groups to use _ instead of - k8s-cluster -> k8s_cluster k8s-node -> k8s_node calico-rr -> calico_rr no-floating -> no_floating Note: kube-node,k8s-cluster groups in upgrade CI need clean-up after v2.16 is tagged * ensure old groups are mapped to the new ones
2021-04-29 12:20:50 +00:00
- hosts: calico_rr
Gather just the necessary facts (#5955) * Gather just the necessary facts * Move fact gathering to separate playbook.
2020-04-17 23:23:36 +00:00
gather_facts: False
Refactor calico route reflector to run in k8s cluster (#4975) * Refactor calico-rr to run in k8s cluster with taint Change-Id: I75a3169ff5b36ce8302fc7ef1c32d3eb697b5afa * add preinstall checks * rework calico/rr role Change-Id: I2f0a7e6cb77cf91ad4a615923680760d2e5d9ca8 * add empty calico-rr group Change-Id: I006c0a60db9b72d02245bf8fdfabcf982144a5ad
2019-08-08 14:37:22 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Fix proxy usage when *_PROXY are present in environment (#7309) Since a790935d02dc2787f6de41695ec955dc49fc93b1 all proxy users should be properly configured Now when you have *_PROXY vars in your environment it can leads to failure if NO_PROXY is not correct, or to persistent configuration changes as seen with kubeadm in 1c5391dda78b43fc629320dd59f1234e81afb2ad Instead of playing constant whack-a-bug, inject empty *_PROXY vars everywhere at the play level, and override at the task level when needed Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-23 17:44:02 +00:00
environment: "{{ proxy_disable_env }}"
Refactor calico route reflector to run in k8s cluster (#4975) * Refactor calico-rr to run in k8s cluster with taint Change-Id: I75a3169ff5b36ce8302fc7ef1c32d3eb697b5afa * add preinstall checks * rework calico/rr role Change-Id: I2f0a7e6cb77cf91ad4a615923680760d2e5d9ca8 * add empty calico-rr group Change-Id: I006c0a60db9b72d02245bf8fdfabcf982144a5ad
2019-08-08 14:37:22 +00:00
roles:
Fix chicken and egg problem with proxy_env not defined on the first … (#5896) * Fix chicken and egg problem with proxy_env not defined on the first envinronment usage. * Disable fact gathering for the first proxy_env evaluation. * Move proxy_env var set up from the role defaults to the root playbooks as fact.
2020-04-08 07:53:43 +00:00
- { role: kubespray-defaults }
- { role: network_plugin/calico/rr, tags: ['network', 'calico_rr'] }
Refactor calico route reflector to run in k8s cluster (#4975) * Refactor calico-rr to run in k8s cluster with taint Change-Id: I75a3169ff5b36ce8302fc7ef1c32d3eb697b5afa * add preinstall checks * rework calico/rr role Change-Id: I2f0a7e6cb77cf91ad4a615923680760d2e5d9ca8 * add empty calico-rr group Change-Id: I006c0a60db9b72d02245bf8fdfabcf982144a5ad
2019-08-08 14:37:22 +00:00
Replace kube-master with kube_control_plane (#7256) This replaces kube-master with kube_control_plane because of [1]: The Kubernetes project is moving away from wording that is considered offensive. A new working group WG Naming was created to track this work, and the word "master" was declared as offensive. A proposal was formalized for replacing the word "master" with "control plane". This means it should be removed from source code, documentation, and user-facing configuration from Kubernetes and its sub-projects. NOTE: The reason why this changes it to kube_control_plane not kube-control-plane is for valid group names on ansible. [1]: https://github.com/kubernetes/enhancements/blob/master/keps/sig-cluster-lifecycle/kubeadm/2067-rename-master-label-taint/README.md#motivation
2021-03-24 00:26:05 +00:00
- hosts: kube_control_plane[0]
Gather just the necessary facts (#5955) * Gather just the necessary facts * Move fact gathering to separate playbook.
2020-04-17 23:23:36 +00:00
gather_facts: False
kubeadm support (#1631) * kubeadm support * move k8s master to a subtask * disable k8s secrets when using kubeadm * fix etcd cert serial var * move simple auth users to master role * make a kubeadm-specific env file for kubelet * add non-ha CI job * change ci boolean vars to json format * fixup * Update create-gce.yml * Update create-gce.yml * Update create-gce.yml
2017-09-13 18:00:51 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Fix proxy usage when *_PROXY are present in environment (#7309) Since a790935d02dc2787f6de41695ec955dc49fc93b1 all proxy users should be properly configured Now when you have *_PROXY vars in your environment it can leads to failure if NO_PROXY is not correct, or to persistent configuration changes as seen with kubeadm in 1c5391dda78b43fc629320dd59f1234e81afb2ad Instead of playing constant whack-a-bug, inject empty *_PROXY vars everywhere at the play level, and override at the task level when needed Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-23 17:44:02 +00:00
environment: "{{ proxy_disable_env }}"
kubeadm support (#1631) * kubeadm support * move k8s master to a subtask * disable k8s secrets when using kubeadm * fix etcd cert serial var * move simple auth users to master role * make a kubeadm-specific env file for kubelet * add non-ha CI job * change ci boolean vars to json format * fixup * Update create-gce.yml * Update create-gce.yml * Update create-gce.yml
2017-09-13 18:00:51 +00:00
roles:
Fix chicken and egg problem with proxy_env not defined on the first … (#5896) * Fix chicken and egg problem with proxy_env not defined on the first envinronment usage. * Disable fact gathering for the first proxy_env evaluation. * Move proxy_env var set up from the role defaults to the root playbooks as fact.
2020-04-08 07:53:43 +00:00
- { role: kubespray-defaults }
- { role: win_nodes/kubernetes_patch, tags: ["master", "win_nodes"] }
Run rotate_tokens role only once (#1970)
2017-11-15 18:50:23 +00:00
Replace kube-master with kube_control_plane (#7256) This replaces kube-master with kube_control_plane because of [1]: The Kubernetes project is moving away from wording that is considered offensive. A new working group WG Naming was created to track this work, and the word "master" was declared as offensive. A proposal was formalized for replacing the word "master" with "control plane". This means it should be removed from source code, documentation, and user-facing configuration from Kubernetes and its sub-projects. NOTE: The reason why this changes it to kube_control_plane not kube-control-plane is for valid group names on ansible. [1]: https://github.com/kubernetes/enhancements/blob/master/keps/sig-cluster-lifecycle/kubeadm/2067-rename-master-label-taint/README.md#motivation
2021-03-24 00:26:05 +00:00
- hosts: kube_control_plane
Gather just the necessary facts (#5955) * Gather just the necessary facts * Move fact gathering to separate playbook.
2020-04-17 23:23:36 +00:00
gather_facts: False
Run rotate_tokens role only once (#1970)
2017-11-15 18:50:23 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Fix proxy usage when *_PROXY are present in environment (#7309) Since a790935d02dc2787f6de41695ec955dc49fc93b1 all proxy users should be properly configured Now when you have *_PROXY vars in your environment it can leads to failure if NO_PROXY is not correct, or to persistent configuration changes as seen with kubeadm in 1c5391dda78b43fc629320dd59f1234e81afb2ad Instead of playing constant whack-a-bug, inject empty *_PROXY vars everywhere at the play level, and override at the task level when needed Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-23 17:44:02 +00:00
environment: "{{ proxy_disable_env }}"
Run rotate_tokens role only once (#1970)
2017-11-15 18:50:23 +00:00
roles:
Fix chicken and egg problem with proxy_env not defined on the first … (#5896) * Fix chicken and egg problem with proxy_env not defined on the first envinronment usage. * Disable fact gathering for the first proxy_env evaluation. * Move proxy_env var set up from the role defaults to the root playbooks as fact.
2020-04-08 07:53:43 +00:00
- { role: kubespray-defaults }
External OpenStack Cloud Controller Manager implementation (#5491) * External OpenStack Cloud Controller Manager implementation * Adding controller image tag * Minor fixes * Restructuring the external cloud controller to work with KubeADM
2020-02-18 12:47:28 +00:00
- { role: kubernetes-apps/external_cloud_controller, tags: external-cloud-controller }
Adding support for canal network plugin This patch provides support for Canal network plugin installation as a self-hosted app, see the following link for details: https://github.com/tigera/canal/tree/master/k8s-install
2016-11-03 15:57:11 +00:00
- { role: kubernetes-apps/network_plugin, tags: network }
Move calico-policy-controller into separate role By default Calico CNI does not create any network access policies or profiles if 'policy' is enabled in CNI config. And without any policies/profiles network access to/from PODs is blocked. K8s related policies are created by calico-policy-controller in such case. So we need to start it as soon as possible, before any real workloads. This patch also fixes kube-api port in calico-policy-controller yaml template. Closes #1132
2017-03-13 15:04:31 +00:00
- { role: kubernetes-apps/policy_controller, tags: policy-controller }
Integrate kubernetes/ingress-nginx 0.11.0 to Kubespray
2018-02-13 01:08:44 +00:00
- { role: kubernetes-apps/ingress_controller, tags: ingress-controller }
Upgrade Local Volume Provisioner Addon to v2.0.0
2018-02-15 01:55:43 +00:00
- { role: kubernetes-apps/external_provisioner, tags: external-provisioner }
restored gather facts on all hosts
2016-09-19 19:12:42 +00:00
- { role: kubernetes-apps, tags: apps }
Run dns_late preinstall tasks on all k8s nodes (#4672) * Run dns_late preinstall tasks on all k8s nodes Related issue: #4656 Change-Id: I63f8559ef1a497b7580ab084561e6603fe647834 * Fix ansible-lint Change-Id: Ia5b33fa63dbc36d8c3e9557ef3f2ea02af2325a5 * Fix recover_control_plane lint issues Change-Id: I16643a3193c11b6ba704e9698812cac7e4fd19a8
2019-04-29 12:12:22 +00:00
Rename ansible groups to use _ instead of - (#7552) * rename ansible groups to use _ instead of - k8s-cluster -> k8s_cluster k8s-node -> k8s_node calico-rr -> calico_rr no-floating -> no_floating Note: kube-node,k8s-cluster groups in upgrade CI need clean-up after v2.16 is tagged * ensure old groups are mapped to the new ones
2021-04-29 12:20:50 +00:00
- hosts: k8s_cluster
Gather just the necessary facts (#5955) * Gather just the necessary facts * Move fact gathering to separate playbook.
2020-04-17 23:23:36 +00:00
gather_facts: False
Run dns_late preinstall tasks on all k8s nodes (#4672) * Run dns_late preinstall tasks on all k8s nodes Related issue: #4656 Change-Id: I63f8559ef1a497b7580ab084561e6603fe647834 * Fix ansible-lint Change-Id: Ia5b33fa63dbc36d8c3e9557ef3f2ea02af2325a5 * Fix recover_control_plane lint issues Change-Id: I16643a3193c11b6ba704e9698812cac7e4fd19a8
2019-04-29 12:12:22 +00:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Fix proxy usage when *_PROXY are present in environment (#7309) Since a790935d02dc2787f6de41695ec955dc49fc93b1 all proxy users should be properly configured Now when you have *_PROXY vars in your environment it can leads to failure if NO_PROXY is not correct, or to persistent configuration changes as seen with kubeadm in 1c5391dda78b43fc629320dd59f1234e81afb2ad Instead of playing constant whack-a-bug, inject empty *_PROXY vars everywhere at the play level, and override at the task level when needed Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-23 17:44:02 +00:00
environment: "{{ proxy_disable_env }}"
Run dns_late preinstall tasks on all k8s nodes (#4672) * Run dns_late preinstall tasks on all k8s nodes Related issue: #4656 Change-Id: I63f8559ef1a497b7580ab084561e6603fe647834 * Fix ansible-lint Change-Id: Ia5b33fa63dbc36d8c3e9557ef3f2ea02af2325a5 * Fix recover_control_plane lint issues Change-Id: I16643a3193c11b6ba704e9698812cac7e4fd19a8
2019-04-29 12:12:22 +00:00
roles:
Fix chicken and egg problem with proxy_env not defined on the first … (#5896) * Fix chicken and egg problem with proxy_env not defined on the first envinronment usage. * Disable fact gathering for the first proxy_env evaluation. * Move proxy_env var set up from the role defaults to the root playbooks as fact.
2020-04-08 07:53:43 +00:00
- { role: kubespray-defaults }
Run dns_late preinstall tasks on all k8s nodes (#4672) * Run dns_late preinstall tasks on all k8s nodes Related issue: #4656 Change-Id: I63f8559ef1a497b7580ab084561e6603fe647834 * Fix ansible-lint Change-Id: Ia5b33fa63dbc36d8c3e9557ef3f2ea02af2325a5 * Fix recover_control_plane lint issues Change-Id: I16643a3193c11b6ba704e9698812cac7e4fd19a8
2019-04-29 12:12:22 +00:00
- { role: kubernetes/preinstall, when: "dns_mode != 'none' and resolvconf_mode == 'host_resolvconf'", tags: resolvconf, dns_late: true }
Reference in a new issue Copy permalink