23c9071c30
* File and container image downloads are now cached localy, so that repeated vagrant up/down runs do not trigger downloading of those files. This is especially useful on laptops with kubernetes runnig locally on vm's. The total size of the cache, after an ansible run, is currently around 800MB, so bandwidth (=time) savings can be quite significant.
* When download_run_once is false, the default is still not to cache, but setting download_force_cache will still enable caching.
* The local cache location can be set with download_cache_dir and defaults to /tmp/kubernetes_cache
* A local docker instance is no longer required to cache docker images; Images are cached to file. A local docker instance is still required, though, if you wish to download images on localhost.
* Fixed a FIXME, wher the argument was that delegate_to doesn't play nice with omit. That is a correct observation and the fix is to use default(inventory_host) instead of default(omit). See ansible/ansible#26009
* Removed "Register docker images info" task from download_container and set_docker_image_facts because it was faulty and unused.
* Removed redundant when:download.{container,enabled,run_once} conditions from {sync,download}_container.yml
* All features of commit d6fd0d2aca by Timoses <timosesu@gmail.com>, merged May 1st 2019, are included in this patch. Not all code was included verbatim, but each feature of that commit was checked to be working in this patch. One notable change: The actual downloading of the kubeadm images was moved to {download,sync)_container, to enable caching.
Note 1: I considered splitting this patch, but most changes that are not directly related to caching, are a pleasant by-product of implementing the caching code, so splitting would be impractical.
Note 2: I have my doubts about the usefulness of the upload, download and upgrade tags in the download role. Must they remain or can they be removed? If anybody knows, then please speak up.
130 lines
4.6 KiB
YAML
130 lines
4.6 KiB
YAML
---
|
|
- block:
|
|
- name: download_container | Set a few facts
|
|
import_tasks: set_container_facts.yml
|
|
run_once: "{{ download_run_once }}"
|
|
tags:
|
|
- facts
|
|
|
|
- name: download_container | Determine if image is in cache
|
|
stat:
|
|
path: "{{ image_path_cached }}"
|
|
delegate_to: localhost
|
|
delegate_facts: no
|
|
register: cache_image
|
|
changed_when: false
|
|
become: false
|
|
when:
|
|
- download_force_cache
|
|
|
|
- name: download_container | Set fact indicating if image is in cache
|
|
set_fact:
|
|
image_is_cached: "{{ cache_image.stat.exists | default(false) }}"
|
|
tags:
|
|
- facts
|
|
when:
|
|
- download_force_cache
|
|
|
|
- name: download_container | Upload image to node if it is cached
|
|
synchronize:
|
|
src: "{{ image_path_cached }}"
|
|
dest: "{{ image_path_final }}"
|
|
use_ssh_args: "{{ has_bastion | default(false) }}"
|
|
mode: push
|
|
delegate_facts: no
|
|
register: upload_image
|
|
failed_when: not upload_image
|
|
run_once: "{{ download_run_once }}"
|
|
until: upload_image is succeeded
|
|
retries: 4
|
|
delay: "{{ retry_stagger | random + 3 }}"
|
|
when:
|
|
- download_force_cache
|
|
- image_is_cached
|
|
- not download_localhost
|
|
- ansible_os_family not in ["CoreOS", "Container Linux by CoreOS"]
|
|
|
|
- name: download_container | Load image into docker
|
|
shell: "{{ docker_bin_dir }}/docker load < {{ image_path_cached if download_localhost else image_path_final }}"
|
|
delegate_to: "{{ download_delegate if download_run_once or inventory_hostname }}"
|
|
run_once: "{{ download_run_once }}"
|
|
register: container_load_status
|
|
failed_when: container_load_status | failed
|
|
become: "{{ user_can_become_root | default(false) or not (download_run_once and download_localhost) }}"
|
|
when:
|
|
- download_force_cache
|
|
- image_is_cached
|
|
- ansible_os_family not in ["CoreOS", "Container Linux by CoreOS"]
|
|
|
|
- name: download_container | Prepare container download
|
|
import_tasks: check_pull_required.yml
|
|
run_once: "{{ download_run_once }}"
|
|
when:
|
|
- not download_always_pull
|
|
|
|
- debug:
|
|
msg: "XXX Pull required is: {{ pull_required }}"
|
|
|
|
# NOTE: Pre-loading docker images will not prevent 'docker pull' from re-downloading the layers in that image
|
|
# if a pull is forced. This is a known issue with docker. See https://github.com/moby/moby/issues/23684
|
|
- name: download_container | Download image if required
|
|
command: "{{ docker_bin_dir }}/docker pull {{ image_reponame }}"
|
|
delegate_to: "{{ download_delegate if download_run_once or inventory_hostname }}"
|
|
delegate_facts: yes
|
|
run_once: "{{ download_run_once }}"
|
|
register: pull_task_result
|
|
until: pull_task_result is succeeded
|
|
delay: "{{ retry_stagger | random + 3 }}"
|
|
retries: 4
|
|
become: "{{ user_can_become_root | default(false) or not download_localhost }}"
|
|
when:
|
|
- pull_required | default(download_always_pull)
|
|
|
|
# NOTE: image_changed is only valid if a pull is was needed or forced.
|
|
- name: download_container | Check if image changed
|
|
set_fact:
|
|
image_changed: "{{ true if pull_task_result.stdout is defined and not 'up to date' in pull_task_result.stdout else false }}"
|
|
run_once: true
|
|
when:
|
|
- download_force_cache
|
|
tags:
|
|
- facts
|
|
|
|
- name: download_container | Save and compress image
|
|
shell: "{{ docker_bin_dir }}/docker save {{ image_reponame }} | gzip -{{ download_compress }} > {{ image_path_cached if download_localhost else image_path_final }}"
|
|
delegate_to: "{{ download_delegate if download_run_once or inventory_hostname }}"
|
|
delegate_facts: no
|
|
register: container_save_status
|
|
failed_when: container_save_status.stderr
|
|
run_once: true
|
|
become: "{{ user_can_become_root | default(false) or not download_localhost }}"
|
|
when:
|
|
- download_force_cache
|
|
- not image_is_cached or (image_changed | default(true))
|
|
- ansible_os_family not in ["CoreOS", "Container Linux by CoreOS"]
|
|
|
|
- name: download_container | Copy image to ansible host cache
|
|
synchronize:
|
|
src: "{{ image_path_final }}"
|
|
dest: "{{ image_path_cached }}"
|
|
use_ssh_args: "{{ has_bastion | default(false) }}"
|
|
mode: pull
|
|
delegate_facts: no
|
|
run_once: true
|
|
when:
|
|
- download_force_cache
|
|
- not download_localhost
|
|
- not image_is_cached or (image_changed | default(true))
|
|
- ansible_os_family not in ["CoreOS", "Container Linux by CoreOS"]
|
|
|
|
- name: download_container | Remove container image from cache
|
|
file:
|
|
state: absent
|
|
path: "{{ image_path_final }}"
|
|
when:
|
|
- not download_keep_remote_cache
|
|
- ansible_os_family not in ["CoreOS", "Container Linux by CoreOS"]
|
|
|
|
tags:
|
|
- download
|