a56d9de502
* Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
72 lines
2.3 KiB
YAML
72 lines
2.3 KiB
YAML
---
|
|
- include: pre-upgrade.yml
|
|
tags: k8s-pre-upgrade
|
|
|
|
- name: Copy kubectl from hyperkube container
|
|
command: "{{ docker_bin_dir }}/docker run --rm -v {{ bin_dir }}:/systembindir {{ hyperkube_image_repo }}:{{ hyperkube_image_tag }} /bin/cp /hyperkube /systembindir/kubectl"
|
|
register: kube_task_result
|
|
until: kube_task_result.rc == 0
|
|
retries: 4
|
|
delay: "{{ retry_stagger | random + 3 }}"
|
|
changed_when: false
|
|
tags: [hyperkube, kubectl, upgrade]
|
|
|
|
- name: Gather kubectl bash completion
|
|
command: "{{ bin_dir }}/kubectl completion bash"
|
|
no_log: true
|
|
register: kubectl_bash_completion
|
|
when: ansible_os_family in ["Debian","RedHat"]
|
|
tags: kubectl
|
|
|
|
- name: Write kubectl bash completion
|
|
copy:
|
|
content: "{{ kubectl_bash_completion.stdout }}"
|
|
dest: /etc/bash_completion.d/kubectl.sh
|
|
owner: root
|
|
group: root
|
|
mode: 0755
|
|
when: ansible_os_family in ["Debian","RedHat"] and kubectl_bash_completion.changed
|
|
tags: [kubectl, upgrade]
|
|
|
|
- name: Write kube-apiserver manifest
|
|
template:
|
|
src: manifests/kube-apiserver.manifest.j2
|
|
dest: "{{ kube_manifest_dir }}/kube-apiserver.manifest"
|
|
notify: Master | wait for the apiserver to be running
|
|
tags: kube-apiserver
|
|
|
|
- meta: flush_handlers
|
|
|
|
- name: copy kube system namespace manifest
|
|
copy: src=namespace.yml dest={{kube_config_dir}}/{{system_namespace}}-ns.yml
|
|
run_once: yes
|
|
when: inventory_hostname == groups['kube-master'][0]
|
|
tags: apps
|
|
|
|
- name: Check if kube system namespace exists
|
|
command: "{{ bin_dir }}/kubectl get ns {{system_namespace}}"
|
|
register: 'kubesystem'
|
|
changed_when: False
|
|
failed_when: False
|
|
run_once: yes
|
|
tags: apps
|
|
|
|
- name: Create kube system namespace
|
|
command: "{{ bin_dir }}/kubectl create -f {{kube_config_dir}}/{{system_namespace}}-ns.yml"
|
|
changed_when: False
|
|
when: kubesystem|failed and inventory_hostname == groups['kube-master'][0]
|
|
tags: apps
|
|
|
|
- name: Write kube-controller-manager manifest
|
|
template:
|
|
src: manifests/kube-controller-manager.manifest.j2
|
|
dest: "{{ kube_manifest_dir }}/kube-controller-manager.manifest"
|
|
notify: Master | wait for kube-controller-manager
|
|
tags: kube-controller-manager
|
|
|
|
- name: Write kube-scheduler manifest
|
|
template:
|
|
src: manifests/kube-scheduler.manifest.j2
|
|
dest: "{{ kube_manifest_dir }}/kube-scheduler.manifest"
|
|
notify: Master | wait for kube-scheduler
|
|
tags: kube-scheduler
|