mirror of https://github.com/easzlab/kubeasz.git
135 lines
4.4 KiB
YAML
135 lines
4.4 KiB
YAML
- name: 创建kube_node 相关目录
|
|
file: name={{ item }} state=directory
|
|
with_items:
|
|
- /var/lib/kubelet
|
|
- /var/lib/kube-proxy
|
|
- /etc/cni/net.d
|
|
- /opt/cni/bin
|
|
|
|
- name: 下载 kubelet,kube-proxy 二进制
|
|
copy: src={{ base_dir }}/bin/{{ item }} dest={{ bin_dir }}/{{ item }} mode=0755
|
|
with_items:
|
|
- kubectl
|
|
- kubelet
|
|
- kube-proxy
|
|
tags: upgrade_k8s
|
|
|
|
- name: 下载 cni plugins 二进制文件
|
|
copy: src={{ item }} dest=/opt/cni/bin/ mode=0755
|
|
with_fileglob:
|
|
- "{{ base_dir }}/bin/cni-bin/*"
|
|
|
|
- name: 添加 kubectl 自动补全
|
|
lineinfile:
|
|
dest: ~/.bashrc
|
|
state: present
|
|
regexp: 'kubectl completion'
|
|
line: 'source <(kubectl completion bash) # generated by kubeasz'
|
|
|
|
##----------kubelet 配置部分--------------
|
|
# 创建 kubelet 相关证书及 kubelet.kubeconfig
|
|
- import_tasks: create-kubelet-kubeconfig.yml
|
|
tags: force_change_certs
|
|
|
|
- name: 准备 cni配置文件
|
|
template: src=cni-default.conf.j2 dest=/etc/cni/net.d/10-default.conf
|
|
|
|
- name: 创建kubelet的配置文件
|
|
template: src=kubelet-config.yaml.j2 dest=/var/lib/kubelet/config.yaml
|
|
tags: upgrade_k8s, restart_node
|
|
|
|
- name: 检查文件/run/systemd/resolve/resolv.conf
|
|
stat: path="/run/systemd/resolve/resolv.conf"
|
|
register: resolv
|
|
tags: upgrade_k8s, restart_node
|
|
|
|
- name: 替换resolvConf 配置
|
|
lineinfile:
|
|
dest: /var/lib/kubelet/config.yaml
|
|
state: present
|
|
regexp: 'resolvConf'
|
|
line: 'resolvConf: /run/systemd/resolve/resolv.conf'
|
|
when: "resolv.stat.isreg is defined"
|
|
tags: upgrade_k8s, restart_node
|
|
|
|
- name: 创建kubelet的systemd unit文件
|
|
template: src=kubelet.service.j2 dest=/etc/systemd/system/kubelet.service
|
|
tags: upgrade_k8s, restart_node
|
|
|
|
- name: 开机启用kubelet 服务
|
|
shell: systemctl enable kubelet
|
|
ignore_errors: true
|
|
|
|
- name: 开启kubelet 服务
|
|
shell: systemctl daemon-reload && systemctl restart kubelet
|
|
tags: upgrade_k8s, restart_node, force_change_certs
|
|
|
|
##-------kube-proxy部分----------------
|
|
- name: 分发 kube-proxy.kubeconfig配置文件
|
|
copy: src={{ cluster_dir }}/kube-proxy.kubeconfig dest=/etc/kubernetes/kube-proxy.kubeconfig
|
|
tags: force_change_certs
|
|
|
|
- name: 替换 kube-proxy.kubeconfig 的 apiserver 地址
|
|
lineinfile:
|
|
dest: /etc/kubernetes/kube-proxy.kubeconfig
|
|
regexp: "^ server"
|
|
line: " server: {{ KUBE_APISERVER }}"
|
|
tags: force_change_certs
|
|
|
|
- name: 创建kube-proxy 配置
|
|
template: src=kube-proxy-config.yaml.j2 dest=/var/lib/kube-proxy/kube-proxy-config.yaml
|
|
tags: reload-kube-proxy, restart_node, upgrade_k8s
|
|
|
|
- name: 创建kube-proxy 服务文件
|
|
template: src=kube-proxy.service.j2 dest=/etc/systemd/system/kube-proxy.service
|
|
tags: reload-kube-proxy, restart_node, upgrade_k8s
|
|
|
|
- name: 开机启用kube-proxy 服务
|
|
shell: systemctl enable kube-proxy
|
|
ignore_errors: true
|
|
|
|
- name: 开启kube-proxy 服务
|
|
shell: systemctl daemon-reload && systemctl restart kube-proxy
|
|
tags: reload-kube-proxy, upgrade_k8s, restart_node, force_change_certs
|
|
|
|
# 轮询等待kube-proxy启动完成
|
|
- name: 轮询等待kube-proxy启动
|
|
shell: "systemctl is-active kube-proxy.service"
|
|
register: kubeproxy_status
|
|
until: '"active" in kubeproxy_status.stdout'
|
|
retries: 4
|
|
delay: 2
|
|
tags: reload-kube-proxy, upgrade_k8s, restart_node, force_change_certs
|
|
|
|
# 轮询等待kubelet启动完成
|
|
- name: 轮询等待kubelet启动
|
|
shell: "systemctl is-active kubelet.service"
|
|
register: kubelet_status
|
|
until: '"active" in kubelet_status.stdout'
|
|
retries: 4
|
|
delay: 2
|
|
tags: reload-kube-proxy, upgrade_k8s, restart_node, force_change_certs
|
|
|
|
- name: 轮询等待node达到Ready状态
|
|
shell: "{{ base_dir }}/bin/kubectl get node {{ K8S_NODENAME }}|awk 'NR>1{print $2}'"
|
|
register: node_status
|
|
until: node_status.stdout == "Ready" or node_status.stdout == "Ready,SchedulingDisabled"
|
|
retries: 8
|
|
delay: 8
|
|
tags: upgrade_k8s, restart_node, force_change_certs
|
|
connection: local
|
|
|
|
- block:
|
|
- name: Setting worker role name
|
|
shell: "{{ base_dir }}/bin/kubectl label node {{ K8S_NODENAME }} kubernetes.io/role=node --overwrite"
|
|
|
|
- name: Setting master role name
|
|
shell: "{{ base_dir }}/bin/kubectl label node {{ K8S_NODENAME }} kubernetes.io/role=master --overwrite"
|
|
when: "inventory_hostname in groups['kube_master']"
|
|
|
|
- name: Making master nodes SchedulingDisabled
|
|
shell: "{{ base_dir }}/bin/kubectl cordon {{ K8S_NODENAME }} "
|
|
when: "inventory_hostname not in groups['kube_node']"
|
|
ignore_errors: true
|
|
connection: local
|