29307740dd
* Enable containerd to deploy vanilla containerd package Fixes kubeadm references to CRI socket for containerd Fixes download role cache feature to work with containerd Change-Id: I2ab8f0031107e2f0d1a85c39b4beb66f08509a01 * use containerd for flannel-addons job Change-Id: Ied375c7d65e64a625ffbd995ff16f2374067dee6 * add containerd vars Change-Id: Ib9a8a04e501c481a86235413cbec63f3672baf91 * fixup vars Change-Id: Ibea64e4b18405a578b52a13da100384582aa24c2 * more fixes * fix rh repo Change-Id: I00575a77cfb7b81d6095db5d918a52023c8f13ba * Adjust helm host install for containerd
107 lines
3.5 KiB
YAML
107 lines
3.5 KiB
YAML
---
|
|
- name: ensure containerd repository public key is installed
|
|
action: "{{ containerd_repo_key_info.pkg_key }}"
|
|
args:
|
|
id: "{{ item }}"
|
|
url: "{{ containerd_repo_key_info.url }}"
|
|
state: present
|
|
register: keyserver_task_result
|
|
until: keyserver_task_result is succeeded
|
|
retries: 4
|
|
delay: "{{ retry_stagger | d(3) }}"
|
|
with_items: "{{ containerd_repo_key_info.repo_keys }}"
|
|
when:
|
|
- ansible_os_family in ['Ubuntu', 'Debian']
|
|
- not is_atomic
|
|
|
|
- name: ensure containerd repository is enabled
|
|
action: "{{ containerd_repo_info.pkg_repo }}"
|
|
args:
|
|
repo: "{{ item }}"
|
|
state: present
|
|
with_items: "{{ containerd_repo_info.repos }}"
|
|
when:
|
|
- ansible_os_family in ['Ubuntu', 'Debian']
|
|
- not is_atomic
|
|
- containerd_repo_info.repos|length > 0
|
|
|
|
# This is required to ensure any apt upgrade will not break kubernetes
|
|
- name: Set containerd pin priority to apt_preferences on Debian family
|
|
template:
|
|
src: "apt_preferences.d/debian_containerd.j2"
|
|
dest: "/etc/apt/preferences.d/containerd"
|
|
owner: "root"
|
|
mode: 0644
|
|
when:
|
|
- ansible_os_family in ['Ubuntu', 'Debian']
|
|
- not is_atomic
|
|
|
|
- name: ensure containerd repository public key is installed
|
|
action: "{{ containerd_repo_key_info.pkg_key }}"
|
|
args:
|
|
id: "{{ item }}"
|
|
url: "{{ containerd_repo_key_info.url }}"
|
|
state: present
|
|
register: keyserver_task_result
|
|
until: keyserver_task_result is succeeded
|
|
retries: 4
|
|
delay: "{{ retry_stagger | d(3) }}"
|
|
with_items: "{{ containerd_repo_key_info.repo_keys }}"
|
|
when: not (ansible_os_family in ["CoreOS", "Container Linux by CoreOS", "RedHat", "Suse", "ClearLinux"] or is_atomic)
|
|
|
|
- name: ensure containerd repository is enabled
|
|
action: "{{ containerd_repo_info.pkg_repo }}"
|
|
args:
|
|
repo: "{{ item }}"
|
|
state: present
|
|
with_items: "{{ containerd_repo_info.repos }}"
|
|
when: not (ansible_os_family in ["CoreOS", "Container Linux by CoreOS", "RedHat", "Suse", "ClearLinux"] or is_atomic) and (containerd_repo_info.repos|length > 0)
|
|
|
|
- name: Configure containerd repository on Fedora
|
|
template:
|
|
src: "fedora_containerd.repo.j2"
|
|
dest: "{{ yum_repo_dir }}/containerd.repo"
|
|
when: ansible_distribution == "Fedora" and not is_atomic
|
|
|
|
- name: Configure containerd repository on RedHat/CentOS
|
|
template:
|
|
src: "rh_containerd.repo.j2"
|
|
dest: "{{ yum_repo_dir }}/containerd.repo"
|
|
when: ansible_distribution in ["CentOS","RedHat"] and not is_atomic
|
|
|
|
- name: check if container-selinux is available
|
|
yum:
|
|
list: "container-selinux"
|
|
register: yum_result
|
|
when: ansible_distribution in ["CentOS","RedHat"] and not is_atomic
|
|
|
|
- name: Configure extras repository on RedHat/CentOS if container-selinux is not available in current repos
|
|
yum_repository:
|
|
name: extras
|
|
description: "CentOS-7 - Extras"
|
|
state: present
|
|
baseurl: "{{ extras_rh_repo_base_url }}"
|
|
file: "extras"
|
|
gpgcheck: yes
|
|
gpgkey: "{{ extras_rh_repo_gpgkey }}"
|
|
keepcache: "{{ containerd_rpm_keepcache | default('1') }}"
|
|
proxy: " {{ http_proxy | default('_none_') }}"
|
|
when:
|
|
- ansible_distribution in ["CentOS","RedHat"] and not is_atomic
|
|
- yum_result.results | length == 0
|
|
|
|
- name: Copy yum.conf for editing
|
|
copy:
|
|
src: "{{ yum_conf }}"
|
|
dest: "{{ containerd_yum_conf }}"
|
|
remote_src: yes
|
|
when: ansible_distribution in ["CentOS","RedHat"] and not is_atomic
|
|
|
|
- name: Edit copy of yum.conf to set obsoletes=0
|
|
lineinfile:
|
|
path: "{{ containerd_yum_conf }}"
|
|
state: present
|
|
regexp: '^obsoletes='
|
|
line: 'obsoletes=0'
|
|
when: ansible_distribution in ["CentOS","RedHat"] and not is_atomic
|