dc6a17e092
import_tasks will consume far less memory, so it should be used whenever it is compatible.
63 lines
1.8 KiB
YAML
63 lines
1.8 KiB
YAML
---
|
|
- include_tasks: check_certs.yml
|
|
when: cert_management == "script"
|
|
tags:
|
|
- etcd-secrets
|
|
- facts
|
|
|
|
- include_tasks: "gen_certs_{{ cert_management }}.yml"
|
|
tags:
|
|
- etcd-secrets
|
|
|
|
- include_tasks: upd_ca_trust.yml
|
|
tags:
|
|
- etcd-secrets
|
|
|
|
- name: "Gen_certs | Get etcd certificate serials"
|
|
shell: "openssl x509 -in {{ etcd_cert_dir }}/node-{{ inventory_hostname }}.pem -noout -serial | cut -d= -f2"
|
|
register: "etcd_client_cert_serial_result"
|
|
changed_when: false
|
|
when: inventory_hostname in groups['k8s-cluster']|union(groups['etcd'])|union(groups['calico-rr']|default([]))|unique|sort
|
|
|
|
- name: Set etcd_client_cert_serial
|
|
set_fact:
|
|
etcd_client_cert_serial: "{{ etcd_client_cert_serial_result.stdout }}"
|
|
when: inventory_hostname in groups['k8s-cluster']|union(groups['etcd'])|union(groups['calico-rr']|default([]))|unique|sort
|
|
|
|
- include_tasks: "install_{{ etcd_deployment_type }}.yml"
|
|
when: is_etcd_master
|
|
tags:
|
|
- upgrade
|
|
|
|
- import_tasks: set_cluster_health.yml
|
|
when: is_etcd_master and etcd_cluster_setup
|
|
|
|
- import_tasks: configure.yml
|
|
when: is_etcd_master and etcd_cluster_setup
|
|
|
|
- import_tasks: refresh_config.yml
|
|
when: is_etcd_master and etcd_cluster_setup
|
|
|
|
- name: Restart etcd if certs changed
|
|
command: /bin/true
|
|
notify: restart etcd
|
|
when: is_etcd_master and etcd_secret_changed|default(false)
|
|
|
|
# reload-systemd
|
|
- meta: flush_handlers
|
|
|
|
- name: Ensure etcd is running
|
|
service:
|
|
name: etcd
|
|
state: started
|
|
enabled: yes
|
|
when: is_etcd_master and etcd_cluster_setup
|
|
|
|
# After etcd cluster is assembled, make sure that
|
|
# initial state of the cluster is in `existing`
|
|
# state insted of `new`.
|
|
- import_tasks: set_cluster_health.yml
|
|
when: is_etcd_master and etcd_cluster_setup
|
|
|
|
- import_tasks: refresh_config.yml
|
|
when: is_etcd_master and etcd_cluster_setup
|