kubespray/roles/kubernetes/master/tasks/main.yml

67 lines
1.8 KiB
YAML
Raw Normal View History

2015-10-04 04:19:50 +08:00
---
- import_tasks: pre-upgrade.yml
tags:
- k8s-pre-upgrade
- import_tasks: users-file.yml
when: kube_basic_auth|default(true)
- import_tasks: encrypt-at-rest.yml
when: kube_encrypt_secret_data
2018-07-30 17:55:25 +08:00
- name: install | Copy kubectl binary from download dir
2018-09-16 10:50:56 +08:00
synchronize:
src: "{{ local_release_dir }}/hyperkube"
dest: "{{ bin_dir }}/kubectl"
compress: no
perms: yes
owner: no
group: no
2017-10-26 04:19:40 +08:00
changed_when: false
2018-09-16 10:50:56 +08:00
delegate_to: "{{ inventory_hostname }}"
2017-10-26 04:19:40 +08:00
tags:
- hyperkube
- kubectl
- upgrade
2018-07-30 17:55:25 +08:00
- name: install | Set kubectl binary permissions
file:
path: "{{ bin_dir }}/kubectl"
mode: "0755"
state: file
tags:
- hyperkube
- kubectl
- upgrade
2017-01-18 01:36:58 +08:00
- name: Install kubectl bash completion
shell: "{{ bin_dir }}/kubectl completion bash >/etc/bash_completion.d/kubectl.sh"
2018-07-30 17:55:25 +08:00
when: ansible_os_family in ["Debian","RedHat"]
tags:
- kubectl
2017-01-18 01:36:58 +08:00
- name: Set kubectl bash completion file
file:
path: /etc/bash_completion.d/kubectl.sh
owner: root
group: root
mode: 0755
2017-01-18 01:36:58 +08:00
when: ansible_os_family in ["Debian","RedHat"]
tags:
- kubectl
- upgrade
- name: Disable SecurityContextDeny admission-controller and enable PodSecurityPolicy
set_fact:
kube_apiserver_admission_control: "{{ kube_apiserver_admission_control | default([]) | difference(['SecurityContextDeny']) | union(['PodSecurityPolicy']) | unique }}"
kube_apiserver_enable_admission_plugins: "{{ kube_apiserver_enable_admission_plugins | difference(['SecurityContextDeny']) | union(['PodSecurityPolicy']) | unique }}"
when: podsecuritypolicy_enabled
- name: Include kubeadm setup if enabled
import_tasks: kubeadm-setup.yml
when: kubeadm_enabled|bool|default(false)
2017-06-27 12:27:25 +08:00
- name: Include static pod setup if not using kubeadm
import_tasks: static-pod-setup.yml
when: not kubeadm_enabled|bool|default(false)