C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Fix safe upgrade

Browse source 
Even though there it kubeadm_token_ttl=0 which means that kubeadm token never expires, it is not present in `kubeadm token list` after cluster is provisioned (at least after it is running for some time) and there is issue regarding this https://github.com/kubernetes/kubeadm/issues/335, so we need to create a new temporary token during the cluster upgrade.
This commit is contained in:
mlushpenko 2018-02-06 00:14:50 +01:00
parent 17f9242b58
commit b472c2df98
1 changed files with 10 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
roles/kubernetes/kubeadm/tasks/main.yml
View file

@ -22,6 +22,16 @@
delegate_to: "{{ groups['kube-master'][0] }}" delegate_to: "{{ groups['kube-master'][0] }}"
run_once: true run_once: true
- name: Create kubeadm token for joining nodes with 24h expiration (default)
command: "{{ bin_dir }}/kubeadm token create"
run_once: true
register: temp_token
delegate_to: "{{ groups['kube-master'][0] }}"
- name: Override predefined kubeadm_token that expires after 24h
set_fact:
kubeadm_token: "{{ temp_token.stdout }}"
- name: Create kubeadm client config - name: Create kubeadm client config
template: template:
src: kubeadm-client.conf.j2 src: kubeadm-client.conf.j2