bc9e14a762
* Adds support for Multus (multiple interfaces) CNI plugin Multus is a latin word for "Multi". As the name suggests, it acts as a Multi plugin in Kubernetes and provides multiple network interface support in a pod. Multus uses the concept of invoking delegates by grouping multiple plugins into delegates and invoking them in the sequential order of the CNI configuration file provided in json format. * Change CNI version (0.1.0->0.3.1) of Contiv to be compatible with Multus
147 lines
4.9 KiB
YAML
147 lines
4.9 KiB
YAML
---
|
|
- hosts: kube-node
|
|
tasks:
|
|
- name: Test tunl0 routes
|
|
shell: "! /sbin/ip ro | grep '/26 via' | grep -v tunl0"
|
|
when:
|
|
- (ipip|default(false) or cloud_provider is defined)
|
|
- kube_network_plugin == 'calico'
|
|
|
|
- hosts: k8s-cluster
|
|
vars:
|
|
agent_report_interval: 10
|
|
netcheck_namespace: default
|
|
netchecker_port: 31081
|
|
|
|
tasks:
|
|
- name: Force binaries directory for Container Linux by CoreOS
|
|
set_fact:
|
|
bin_dir: "/opt/bin"
|
|
when: ansible_os_family in ["CoreOS", "Container Linux by CoreOS"]
|
|
|
|
- set_fact:
|
|
bin_dir: "/usr/local/bin"
|
|
when: not ansible_os_family in ["CoreOS", "Container Linux by CoreOS"]
|
|
|
|
- name: Wait for netchecker server
|
|
shell: "{{ bin_dir }}/kubectl get pods --namespace {{netcheck_namespace}} | grep ^netchecker-server"
|
|
delegate_to: "{{groups['kube-master'][0]}}"
|
|
run_once: true
|
|
register: ncs_pod
|
|
until: ncs_pod.stdout.find('Running') != -1
|
|
retries: 3
|
|
delay: 10
|
|
|
|
- name: Wait for netchecker agents
|
|
shell: "{{ bin_dir }}/kubectl get pods --namespace {{netcheck_namespace}} | grep '^netchecker-agent-.*Running'"
|
|
run_once: true
|
|
delegate_to: "{{groups['kube-master'][0]}}"
|
|
register: nca_pod
|
|
until: nca_pod.stdout_lines|length >= groups['kube-node']|intersect(play_hosts)|length * 2
|
|
retries: 3
|
|
delay: 10
|
|
|
|
- name: Get netchecker agents
|
|
uri: url=http://localhost:{{netchecker_port}}/api/v1/agents/ return_content=yes
|
|
run_once: true
|
|
delegate_to: "{{groups['kube-master'][0]}}"
|
|
register: agents
|
|
retries: 18
|
|
delay: "{{ agent_report_interval }}"
|
|
until: agents.content|length > 0 and
|
|
agents.content[0] == '{' and
|
|
agents.content|from_json|length >= groups['kube-node']|intersect(play_hosts)|length * 2
|
|
failed_when: false
|
|
no_log: true
|
|
|
|
- debug: var=agents.content|from_json
|
|
failed_when: not agents is success and not agents.content=='{}'
|
|
run_once: true
|
|
|
|
- name: Check netchecker status
|
|
uri: url=http://localhost:{{netchecker_port}}/api/v1/connectivity_check status_code=200 return_content=yes
|
|
delegate_to: "{{groups['kube-master'][0]}}"
|
|
run_once: true
|
|
register: result
|
|
retries: 3
|
|
delay: "{{ agent_report_interval }}"
|
|
no_log: true
|
|
failed_when: false
|
|
when:
|
|
- agents.content != '{}'
|
|
|
|
- debug: var=result.content|from_json
|
|
failed_when: not result is success
|
|
run_once: true
|
|
when: not agents.content == '{}'
|
|
delegate_to: "{{groups['kube-master'][0]}}"
|
|
|
|
- debug: msg="Cannot get reports from agents, consider as PASSING"
|
|
run_once: true
|
|
when:
|
|
- agents.content == '{}'
|
|
|
|
- name: Create macvlan network conf
|
|
# We cannot use only shell: below because Ansible will render the text
|
|
# with leading spaces, which means the shell will never find the string
|
|
# EOF at the beginning of a line. We can avoid Ansible's unhelpful
|
|
# heuristics by using the cmd parameter like this:
|
|
shell:
|
|
cmd: |
|
|
cat <<EOF | {{ bin_dir }}/kubectl create -f -
|
|
apiVersion: "k8s.cni.cncf.io/v1"
|
|
kind: NetworkAttachmentDefinition
|
|
metadata:
|
|
name: macvlan-conf
|
|
spec:
|
|
config: '{
|
|
"cniVersion": "0.3.0",
|
|
"type": "macvlan",
|
|
"master": "eth0",
|
|
"mode": "bridge",
|
|
"ipam": {
|
|
"type": "host-local",
|
|
"subnet": "192.168.1.0/24",
|
|
"rangeStart": "192.168.1.200",
|
|
"rangeEnd": "192.168.1.216",
|
|
"routes": [
|
|
{ "dst": "0.0.0.0/0" }
|
|
],
|
|
"gateway": "192.168.1.1"
|
|
}
|
|
}'
|
|
EOF
|
|
when:
|
|
- kube_network_plugin_multus|default(false)
|
|
|
|
- name: Annotate pod with macvlan network
|
|
# We cannot use only shell: below because Ansible will render the text
|
|
# with leading spaces, which means the shell will never find the string
|
|
# EOF at the beginning of a line. We can avoid Ansible's unhelpful
|
|
# heuristics by using the cmd parameter like this:
|
|
shell:
|
|
cmd: |
|
|
cat <<EOF | {{ bin_dir }}/kubectl create -f -
|
|
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: samplepod
|
|
annotations:
|
|
k8s.v1.cni.cncf.io/networks: macvlan-conf
|
|
spec:
|
|
containers:
|
|
- name: samplepod
|
|
command: ["/bin/bash", "-c", "sleep 2000000000000"]
|
|
image: dougbtv/centos-network
|
|
EOF
|
|
when:
|
|
- kube_network_plugin_multus|default(false)
|
|
|
|
- name: Check secondary macvlan interface
|
|
shell: "{{ bin_dir }}/kubectl exec samplepod -- ip addr show dev net1"
|
|
register: output
|
|
until: output.rc == 0
|
|
retries: 90
|
|
changed_when: false
|
|
when:
|
|
- kube_network_plugin_multus|default(false)
|