kubespray/roles/kubernetes/control-plane/meta/main.yml

---
dependencies:
  - role: kubernetes/tokens
    when: kube_token_auth
    tags:
      - k8s-secrets
  - role: adduser
    user: "{{ addusers.etcd }}"
    when:
      - etcd_deployment_type == "kubeadm"
      - not (ansible_os_family in ["Flatcar", "Flatcar Container Linux by Kinvolk", "ClearLinux"] or is_fedora_coreos)
  - role: network_plugin/calico_defaults
Fix basic auth tokens for kubeadm deployment. (#3801) * Fix basic auth tokens for kubeadm deployment. * Tokens should be a dependancy on master, not nodes 2018-12-04 02:44:29 +08:00			`---`
			`dependencies:`
			`- role: kubernetes/tokens`
			`when: kube_token_auth`
			`tags:`
			`- k8s-secrets`
fix-the-issue-of-miss-the-etcd-user (#9016) 2022-06-29 00:13:58 +08:00			`- role: adduser`
			`user: "{{ addusers.etcd }}"`
			`when:`
			`- etcd_deployment_type == "kubeadm"`
			`- not (ansible_os_family in ["Flatcar", "Flatcar Container Linux by Kinvolk", "ClearLinux"] or is_fedora_coreos)`
Disable podCIDR allocation from control-plane when using calico (#10639) * Disable control plane allocating podCIDR for nodes when using calico Calico does not use the .spec.podCIDR field for its IP address management. Furthermore, it can false positives from the kube controller manager if kube_network_node_prefix and calico_pool_blocksize are unaligned, which is the case with the default shipped by kubespray. If the subnets obtained from using kube_network_node_prefix are bigger, this would result at some point in the control plane thinking it does not have subnets left for a new node, while calico will work without problems. Explicitely set a default value of false for calico_ipam_host_local to facilitate its use in templates. * Don't default to kube_network_node_prefix for calico_pool_blocksize They have different semantics: kube_network_node_prefix is intended to be the size of the subnet for all pods on a node, while there can be more than on calico block of the specified size (they are allocated on demand). Besides, this commit does not actually change anything, because the current code is buggy: we don't ever default to kube_network_node_prefix, since the variable is defined in the role defaults. 2023-12-12 21:38:36 +08:00			`- role: network_plugin/calico_defaults`