kubernetes-sigs
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
kubespray/upgrade-cluster.yml

129 lines
4.4 KiB
YAML
Raw Normal View History

first cut of an upgrade process
2016-12-10 02:44:52 +08:00
---
Assert if ansible 2.7 is used (#3589)
2018-10-26 15:29:21 +08:00
- hosts: localhost
Disable gather facts when checking ansible version (#3615)
2018-10-31 18:19:17 +08:00
gather_facts: false
Disable become for localhost (#4287)
2019-02-26 11:36:44 +08:00
become: no
Assert if ansible 2.7 is used (#3589)
2018-10-26 15:29:21 +08:00
tasks:
Upgrade to Ansible 2.7.8 (#4535)
2019-04-18 01:18:05 +08:00
- name: "Check ansible version >=2.7.8"
Assert if ansible 2.7 is used (#3589)
2018-10-26 15:29:21 +08:00
assert:
Upgrade to Ansible 2.7.8 (#4535)
2019-04-18 01:18:05 +08:00
msg: "Ansible must be v2.7.8 or higher"
Assert if ansible 2.7 is used (#3589)
2018-10-26 15:29:21 +08:00
that:
Upgrade to Ansible 2.7.8 (#4535)
2019-04-18 01:18:05 +08:00
- ansible_version.string is version("2.7.8", ">=")
Assert if ansible 2.7 is used (#3589)
2018-10-26 15:29:21 +08:00
tags:
- check
vars:
ansible_connection: local
Split deploy steps in separate playbooks: part1 (#3451) * Fix bootstrap_os/ubuntu idempotency * Update bastion role * move container_engine in sub-roles * requires ansible 2.5 * ubuntu18 as first CI job
2018-10-10 10:14:33 +08:00
- hosts: bastion[0]
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-15 00:08:44 +08:00
gather_facts: False
roles:
rename kargo mentions in top-level yml files
2017-06-17 00:18:35 +08:00
- { role: kubespray-defaults}
Add default var role
2017-02-23 19:07:17 +08:00
- { role: bastion-ssh-config, tags: ["localhost", "bastion"]}
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-15 00:08:44 +08:00
- hosts: k8s-cluster:etcd:calico-rr
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 17:52:39 +08:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-15 00:08:44 +08:00
gather_facts: false
vars:
# Need to disable pipelining for bootstrap-os as some systems have requiretty in sudoers set, which makes pipelining
# fail. bootstrap-os fixes this on these systems, so in later plays it can be enabled.
ansible_ssh_pipelining: false
roles:
rename kargo mentions in top-level yml files
2017-06-17 00:18:35 +08:00
- { role: kubespray-defaults}
Add default var role
2017-02-23 19:07:17 +08:00
- { role: bootstrap-os, tags: bootstrap-os}
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-15 00:08:44 +08:00
- hosts: k8s-cluster:etcd:calico-rr
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 17:52:39 +08:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Use batch mode for graceful docker/rkt upgrade (#1815)
2017-10-17 21:12:11 +08:00
serial: "{{ serial | default('20%') }}"
first cut of an upgrade process
2016-12-10 02:44:52 +08:00
roles:
rename kargo mentions in top-level yml files
2017-06-17 00:18:35 +08:00
- { role: kubespray-defaults}
first cut of an upgrade process
2016-12-10 02:44:52 +08:00
- { role: kubernetes/preinstall, tags: preinstall }
Add flag to deploy container engine manually. (#3753) This feature was removed by PR#3061. But change flag manage_docker to deploy_container_engine.
2018-11-26 23:26:40 +08:00
- { role: container-engine, tags: "container-engine", when: deploy_container_engine|default(true) }
Fix skip_downloads condition.
2018-08-08 18:49:49 +08:00
- { role: download, tags: download, when: "not skip_downloads" }
ansible-lint: add spaces around variables [E206] (#4699)
2019-05-03 05:24:21 +08:00
environment: "{{ proxy_env }}"
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-15 00:08:44 +08:00
Remove standalone etcd specific play, cleanup host mode Now etcd role can optionally disable etcd cluster setup for faster deployment when it is combined with etcd role.
2017-03-04 04:30:37 +08:00
- hosts: etcd
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 17:52:39 +08:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
first cut of an upgrade process
2016-12-10 02:44:52 +08:00
roles:
rename kargo mentions in top-level yml files
2017-06-17 00:18:35 +08:00
- { role: kubespray-defaults}
Enable kubeadm etcd mode (#4818) * Enable kubeadm etcd mode Uses cert commands from kubeadm experimental control plane to enable non-master nodes to obtain etcd certs. Related story: PROD-29434 Change-Id: Idafa1d223e5c6ceadf819b6f9c06adf4c4f74178 * Add validation checks and exclude calico kdd mode Change-Id: Ic234f5e71261d33191376e70d438f9f6d35f358c * Move etcd mode test to ubuntu flannel HA job Change-Id: I9af6fd80a1bbb1692ab10d6da095eb368f6bc732 * rename etcd_mode to etcd_kubeadm_enabled Change-Id: Ib196d6c8a52f48cae370b026f7687ff9ca69c172
2019-06-21 02:12:51 +08:00
- role: etcd
tags: etcd
vars:
etcd_cluster_setup: true
etcd_events_cluster_setup: false
when: not etcd_kubeadm_enabled | default(false)
first cut of an upgrade process
2016-12-10 02:44:52 +08:00
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-15 00:08:44 +08:00
- hosts: k8s-cluster
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 17:52:39 +08:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
first cut of an upgrade process
2016-12-10 02:44:52 +08:00
roles:
rename kargo mentions in top-level yml files
2017-06-17 00:18:35 +08:00
- { role: kubespray-defaults}
Enable kubeadm etcd mode (#4818) * Enable kubeadm etcd mode Uses cert commands from kubeadm experimental control plane to enable non-master nodes to obtain etcd certs. Related story: PROD-29434 Change-Id: Idafa1d223e5c6ceadf819b6f9c06adf4c4f74178 * Add validation checks and exclude calico kdd mode Change-Id: Ic234f5e71261d33191376e70d438f9f6d35f358c * Move etcd mode test to ubuntu flannel HA job Change-Id: I9af6fd80a1bbb1692ab10d6da095eb368f6bc732 * rename etcd_mode to etcd_kubeadm_enabled Change-Id: Ib196d6c8a52f48cae370b026f7687ff9ca69c172
2019-06-21 02:12:51 +08:00
- role: etcd
tags: etcd
vars:
etcd_cluster_setup: false
etcd_events_cluster_setup: false
when: not etcd_kubeadm_enabled | default(false)
first cut of an upgrade process
2016-12-10 02:44:52 +08:00
Yamllint fixes (#4410) * Lint everything in the repository with yamllint * yamllint fixes: syntax fixes only * yamllint fixes: move comments to play names * yamllint fixes: indent comments in .gitlab-ci.yml file
2019-04-01 17:38:33 +08:00
- name: Handle upgrades to master components first to maintain backwards compat.
hosts: kube-master
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 17:52:39 +08:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
first cut of an upgrade process
2016-12-10 02:44:52 +08:00
serial: 1
roles:
rename kargo mentions in top-level yml files
2017-06-17 00:18:35 +08:00
- { role: kubespray-defaults}
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-15 00:08:44 +08:00
- { role: upgrade/pre-upgrade, tags: pre-upgrade }
first cut of an upgrade process
2016-12-10 02:44:52 +08:00
- { role: kubernetes/node, tags: node }
Fix reconfigure and upgrade cluster (#3938)
2018-12-25 15:06:27 +08:00
- { role: kubernetes/master, tags: master, upgrade_cluster_setup: true }
Move cluster roles and system namespace to new role This should be done after kubeconfig is set for admin and before network plugins are up.
2017-10-26 16:10:33 +08:00
- { role: kubernetes/client, tags: client }
tag role kubernetes/node-label in playbooks (#5560)
2020-01-21 03:43:36 +08:00
- { role: kubernetes/node-label, tags: node-label }
Move cluster roles and system namespace to new role This should be done after kubeconfig is set for admin and before network plugins are up.
2017-10-26 16:10:33 +08:00
- { role: kubernetes-apps/cluster_roles, tags: cluster-roles }
Uncodron Masters which have scheduling Enabled
2017-06-28 04:11:44 +08:00
- { role: upgrade/post-upgrade, tags: post-upgrade }
ansible-lint: add spaces around variables [E206] (#4699)
2019-05-03 05:24:21 +08:00
environment: "{{ proxy_env }}"
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-15 00:08:44 +08:00
Yamllint fixes (#4410) * Lint everything in the repository with yamllint * yamllint fixes: syntax fixes only * yamllint fixes: move comments to play names * yamllint fixes: indent comments in .gitlab-ci.yml file
2019-04-01 17:38:33 +08:00
- name: Upgrade calico on all masters and nodes
hosts: kube-master:kube-node
calico upgrade to v3 (#3086) * calico upgrade to v3 * update calico_rr version * add missing file * change contents of main.yml as it was left old version * enable network policy by default * remove unneeded task * Fix kubelet calico settings * fix when statement * switch back to node-kubeconfig.yaml
2018-08-23 22:17:18 +08:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
serial: "{{ serial | default('20%') }}"
roles:
- { role: kubespray-defaults}
- { role: network_plugin, tags: network }
- { role: kubernetes-apps/network_plugin, tags: network }
- { role: kubernetes-apps/policy_controller, tags: policy-controller }
Yamllint fixes (#4410) * Lint everything in the repository with yamllint * yamllint fixes: syntax fixes only * yamllint fixes: move comments to play names * yamllint fixes: indent comments in .gitlab-ci.yml file
2019-04-01 17:38:33 +08:00
- name: Finally handle worker upgrades, based on given batch size
hosts: kube-node:!kube-master
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 17:52:39 +08:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-15 00:08:44 +08:00
serial: "{{ serial | default('20%') }}"
roles:
rename kargo mentions in top-level yml files
2017-06-17 00:18:35 +08:00
- { role: kubespray-defaults}
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-15 00:08:44 +08:00
- { role: upgrade/pre-upgrade, tags: pre-upgrade }
- { role: kubernetes/node, tags: node }
Remove non-kubeadm deployment (#3811) * Remove non-kubeadm deployment * More cleanup * More cleanup * More cleanup * More cleanup * Fix gitlab * Try stop gce first before absent to make the delete process work * More cleanup * Fix bug with checking if kubeadm has already run * Fix bug with checking if kubeadm has already run * More fixes * Fix test * fix * Fix gitlab checkout untill kubespray 2.8 is on quay * Fixed * Add upgrade path from non-kubeadm to kubeadm. Revert ssl path * Readd secret checking * Do gitlab checks from v2.7.0 test upgrade path to 2.8.0 * fix typo * Fix CI jobs to kubeadm again. Fix broken hyperkube path * Fix gitlab * Fix rotate tokens * More fixes * More fixes * Fix tokens
2018-12-06 18:33:38 +08:00
- { role: kubernetes/kubeadm, tags: kubeadm }
tag role kubernetes/node-label in playbooks (#5560)
2020-01-21 03:43:36 +08:00
- { role: kubernetes/node-label, tags: node-label }
Fix upgrade k8s
2018-09-12 13:24:31 +08:00
- { role: upgrade/post-upgrade, tags: post-upgrade }
ansible-lint: add spaces around variables [E206] (#4699)
2019-05-03 05:24:21 +08:00
environment: "{{ proxy_env }}"
move network plugins out of grouped upgrades
2017-03-23 22:18:51 +08:00
Run rotate_tokens role only once (#1970)
2017-11-16 02:50:23 +08:00
- hosts: kube-master[0]
move network plugins out of grouped upgrades
2017-03-23 22:18:51 +08:00
any_errors_fatal: true
roles:
rename kargo mentions in top-level yml files
2017-06-17 00:18:35 +08:00
- { role: kubespray-defaults}
Upgrade to kubeadm (#1667) * Enable upgrade to kubeadm * fix kubedns upgrade * try upgrade route * use init/upgrade strategy for kubeadm and ignore kubedns svc * Use bin_dir for kubeadm * delete more secrets * fix waiting for terminating pods * Manually enforce kube-proxy for kubeadm deploy * remove proxy. update to kubeadm 1.8.0rc1
2017-09-26 17:38:58 +08:00
- { role: kubernetes-apps/rotate_tokens, tags: rotate_tokens, when: "secret_changed|default(false)" }
Reapply win_node patches (#3868)
2018-12-13 22:17:46 +08:00
- { role: win_nodes/kubernetes_patch, tags: ["master", "win_nodes"]}
Run rotate_tokens role only once (#1970)
2017-11-16 02:50:23 +08:00
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-15 00:08:44 +08:00
- hosts: calico-rr
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 17:52:39 +08:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-15 00:08:44 +08:00
roles:
rename kargo mentions in top-level yml files
2017-06-17 00:18:35 +08:00
- { role: kubespray-defaults}
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-15 00:08:44 +08:00
- { role: network_plugin/calico/rr, tags: network }
ansible-lint: add spaces around variables [E206] (#4699)
2019-05-03 05:24:21 +08:00
environment: "{{ proxy_env }}"
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-15 00:08:44 +08:00
Install Helm on all masters
2018-09-10 17:39:26 +08:00
- hosts: kube-master
Make any_errors_fatal configurable Useful at scale when 1 or 2 noes my fail and you can proceed with the majority and go back and fix the others later.
2017-04-04 17:52:39 +08:00
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
Add graceful upgrade process Based on #718 introduced by rsmitty. Includes all roles and all options to support deployment of new hosts in case they were added to inventory. Main difference here is that master role is evaluated first so that master components get upgraded first. Fixes #694
2017-02-15 00:08:44 +08:00
roles:
rename kargo mentions in top-level yml files
2017-06-17 00:18:35 +08:00
- { role: kubespray-defaults}
Install Helm on all masters
2018-09-10 17:39:26 +08:00
- { role: kubernetes-apps, tags: apps }
ansible-lint: add spaces around variables [E206] (#4699)
2019-05-03 05:24:21 +08:00
environment: "{{ proxy_env }}"
Run dns_late preinstall tasks on all k8s nodes (#4672) * Run dns_late preinstall tasks on all k8s nodes Related issue: #4656 Change-Id: I63f8559ef1a497b7580ab084561e6603fe647834 * Fix ansible-lint Change-Id: Ia5b33fa63dbc36d8c3e9557ef3f2ea02af2325a5 * Fix recover_control_plane lint issues Change-Id: I16643a3193c11b6ba704e9698812cac7e4fd19a8
2019-04-29 20:12:22 +08:00
- hosts: k8s-cluster
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
roles:
- { role: kubespray-defaults}
Remove kubedns and dnsmasq. Move dns_late phase after apps (#4406) Both kubedns and dnsmasq modes are long not maintained. We should run dns_late steps at the end because sshd makes DNS lookups during Ansible run and has 2s timeouts for each failed lookup trying to connect to coredns before it is ready.
2019-04-02 03:32:34 +08:00
- { role: kubernetes/preinstall, when: "dns_mode != 'none' and resolvconf_mode == 'host_resolvconf'", tags: resolvconf }