- name: 创建kube-node 相关目录 file: name={{ item }} state=directory with_items: - /var/lib/kubelet - /var/lib/kube-proxy - /etc/cni/net.d - name: 下载 kubelet,kube-proxy 二进制和基础 cni plugins copy: src={{ base_dir }}/bin/{{ item }} dest={{ bin_dir }}/{{ item }} mode=0755 with_items: - kubectl - kubelet - kube-proxy - bridge - host-local - loopback tags: upgrade_k8s # 每个 node 节点运行 haproxy 连接到多个 apiserver - import_tasks: node_lb.yml when: "inventory_hostname not in groups['kube-master']" - name: 替换 kubeconfig 的 apiserver 地址 lineinfile: dest: /root/.kube/config regexp: "^ server" line: " server: {{ KUBE_APISERVER }}" ##----------kubelet 配置部分-------------- # 创建 kubelet 相关证书及 kubelet.kubeconfig - import_tasks: create-kubelet-kubeconfig.yml - name: 准备 cni配置文件 template: src=cni-default.conf.j2 dest=/etc/cni/net.d/10-default.conf # 判断 kubernetes 版本 - name: 注册变量 TMP_VER shell: "{{ base_dir }}/bin/kube-apiserver --version|cut -d' ' -f2|cut -d'v' -f2" register: TMP_VER connection: local tags: upgrade_k8s, restart_node - name: 获取 kubernetes 主版本号 set_fact: KUBE_VER: "{{ TMP_VER.stdout.split('.')[0]|int + TMP_VER.stdout.split('.')[1]|int/100 }}" tags: upgrade_k8s, restart_node - name: debug info debug: var="KUBE_VER" - name: 创建kubelet的配置文件 template: src=kubelet-config.yaml.j2 dest=/var/lib/kubelet/config.yaml tags: upgrade_k8s, restart_node - name: 创建kubelet的systemd unit文件 template: src=kubelet.service.j2 dest=/etc/systemd/system/kubelet.service tags: upgrade_k8s, restart_node - name: 开机启用kubelet 服务 shell: systemctl enable kubelet ignore_errors: true - name: 开启kubelet 服务 shell: systemctl daemon-reload && systemctl restart kubelet tags: upgrade_k8s, restart_node ##-------kube-proxy部分---------------- - name: 替换 kube-proxy.kubeconfig 的 apiserver 地址 lineinfile: dest: /etc/kubernetes/kube-proxy.kubeconfig regexp: "^ server" line: " server: {{ KUBE_APISERVER }}" - name: 创建kube-proxy 服务文件 template: src=kube-proxy.service.j2 dest=/etc/systemd/system/kube-proxy.service tags: reload-kube-proxy, restart_node, upgrade_k8s - name: 开机启用kube-proxy 服务 shell: systemctl enable kube-proxy ignore_errors: true - name: 开启kube-proxy 服务 shell: systemctl daemon-reload && systemctl restart kube-proxy tags: reload-kube-proxy, upgrade_k8s, restart_node # 轮询等待kubelet启动完成 - name: 轮询等待kubelet启动 shell: "systemctl status kubelet.service|grep Active" register: kubelet_status until: '"running" in kubelet_status.stdout' retries: 8 delay: 2 tags: reload-kube-proxy, upgrade_k8s, restart_node - name: 轮询等待node达到Ready状态 shell: "{{ bin_dir }}/kubectl get node {{ inventory_hostname }}|awk 'NR>1{print $2}'" register: node_status until: node_status.stdout == "Ready" or node_status.stdout == "Ready,SchedulingDisabled" retries: 8 delay: 8 tags: upgrade_k8s, restart_node - name: 设置node节点role shell: "{{ bin_dir }}/kubectl label node {{ inventory_hostname }} kubernetes.io/role=node --overwrite" ignore_errors: true