kubespray/roles/kubernetes/master/tasks/main.yml

---
- include: pre-upgrade.yml
  tags:
    - k8s-pre-upgrade

# upstream bug: https://github.com/kubernetes/kubeadm/issues/441
- name: Disable kube_basic_auth until kubeadm/441 is fixed
  set_fact:
    kube_basic_auth: false
  when: kubeadm_enabled|bool|default(false)

- include: users-file.yml
  when: kube_basic_auth|default(true)

- name: Copy kubectl from hyperkube container
  command: "{{ docker_bin_dir }}/docker run --rm -v {{ bin_dir }}:/systembindir {{ hyperkube_image_repo }}:{{ hyperkube_image_tag }} /bin/cp /hyperkube /systembindir/kubectl"
  register: kube_task_result
  until: kube_task_result.rc == 0
  retries: 4
  delay: "{{ retry_stagger | random + 3 }}"
  changed_when: false
  tags:
    - hyperkube
    - kubectl
    - upgrade

- name: Install kubectl bash completion
  shell: "{{ bin_dir }}/kubectl completion bash >/etc/bash_completion.d/kubectl.sh"
  when: ansible_os_family in ["Debian","RedHat"]
  tags:
    - kubectl

- name: Set kubectl bash completion file
  file:
    path: /etc/bash_completion.d/kubectl.sh
    owner: root
    group: root
    mode: 0755
  when: ansible_os_family in ["Debian","RedHat"]
  tags:
    - kubectl
    - upgrade

- task: Include kubeadm setup if enabled
  include: kubeadm-setup.yml
  when: kubeadm_enabled|bool|default(false)

- task: Include static pod setup if not using kubeadm
  include: static-pod-setup.yml
  when: not kubeadm_enabled|bool|default(false)
Initial commit 2015-10-04 04:19:50 +08:00			`---`
Deploy kubelet and kube-apiserver as containers kubelet via docker kube-apiserver as a static pod Fixed etcd service start to be more tolerant of slow start. Workaround for kube_version to stay in download role, but not download an files by creating a new "nothing" download entry. 2016-07-08 17:59:21 +08:00			`- include: pre-upgrade.yml`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 15:43:04 +08:00			`tags:`
			`- k8s-pre-upgrade`
Review role order, use master ip even when fqdn are used in the inventory 2015-12-17 06:49:01 +08:00
Enable HA deploy of kubeadm (#1658) * Enable HA deploy of kubeadm * raise delay to 60s for starting gce hosts 2017-09-16 05:28:15 +08:00			`# upstream bug: https://github.com/kubernetes/kubeadm/issues/441`
			`- name: Disable kube_basic_auth until kubeadm/441 is fixed`
			`set_fact:`
			`kube_basic_auth: false`
			`when: kubeadm_enabled\|bool\|default(false)`

kubeadm support (#1631) * kubeadm support * move k8s master to a subtask * disable k8s secrets when using kubeadm * fix etcd cert serial var * move simple auth users to master role * make a kubeadm-specific env file for kubelet * add non-ha CI job * change ci boolean vars to json format * fixup * Update create-gce.yml * Update create-gce.yml * Update create-gce.yml 2017-09-14 02:00:51 +08:00			`- include: users-file.yml`
			`when: kube_basic_auth\|default(true)`

Copy kubectl from docker container Nearly the last stage of source all components to containers. Kubectl will be called from hyperkube image. Remaining tasks: * Move kube_version variable to kubernetes/preinstall * Drop placeholder download.nothing requirement 2016-07-25 18:56:58 +08:00			`- name: Copy kubectl from hyperkube container`
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-23 22:44:44 +08:00			`command: "{{ docker_bin_dir }}/docker run --rm -v {{ bin_dir }}:/systembindir {{ hyperkube_image_repo }}:{{ hyperkube_image_tag }} /bin/cp /hyperkube /systembindir/kubectl"`
Add retries for copying binaries from containers Closes issue: https://github.com/kubespray/kargo/issues/479 Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-09-13 20:36:01 +08:00			`register: kube_task_result`
			`until: kube_task_result.rc == 0`
			`retries: 4`
Add retry_stagger var for failed download/pushes. * Add the retry_stagger var to tweak push and retry time strategies. * Add large deployments related docs. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-09-15 17:23:27 +08:00			`delay: "{{ retry_stagger \| random + 3 }}"`
use command instead of synchronize 2016-01-22 23:37:07 +08:00			`changed_when: false`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 15:43:04 +08:00			`tags:`
			`- hyperkube`
			`- kubectl`
			`- upgrade`
running kubernetes master processes as pods 2015-12-11 18:52:20 +08:00
Fix bash completion installation 2017-01-18 01:36:58 +08:00			`- name: Install kubectl bash completion`
			`shell: "{{ bin_dir }}/kubectl completion bash >/etc/bash_completion.d/kubectl.sh"`
Generate kubectl bash completion from kubectl instead of file 2016-11-14 16:22:46 +08:00			`when: ansible_os_family in ["Debian","RedHat"]`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 15:43:04 +08:00			`tags:`
			`- kubectl`
Generate kubectl bash completion from kubectl instead of file 2016-11-14 16:22:46 +08:00
Fix bash completion installation 2017-01-18 01:36:58 +08:00			`- name: Set kubectl bash completion file`
			`file:`
			`path: /etc/bash_completion.d/kubectl.sh`
Generate kubectl bash completion from kubectl instead of file 2016-11-14 16:22:46 +08:00			`owner: root`
			`group: root`
			`mode: 0755`
Fix bash completion installation 2017-01-18 01:36:58 +08:00			`when: ansible_os_family in ["Debian","RedHat"]`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 15:43:04 +08:00			`tags:`
			`- kubectl`
			`- upgrade`
Generate kubectl bash completion from kubectl instead of file 2016-11-14 16:22:46 +08:00
kubeadm support (#1631) * kubeadm support * move k8s master to a subtask * disable k8s secrets when using kubeadm * fix etcd cert serial var * move simple auth users to master role * make a kubeadm-specific env file for kubelet * add non-ha CI job * change ci boolean vars to json format * fixup * Update create-gce.yml * Update create-gce.yml * Update create-gce.yml 2017-09-14 02:00:51 +08:00			`- task: Include kubeadm setup if enabled`
			`include: kubeadm-setup.yml`
			`when: kubeadm_enabled\|bool\|default(false)`
basic rbac support 2017-06-27 12:27:25 +08:00
kubeadm support (#1631) * kubeadm support * move k8s master to a subtask * disable k8s secrets when using kubeadm * fix etcd cert serial var * move simple auth users to master role * make a kubeadm-specific env file for kubelet * add non-ha CI job * change ci boolean vars to json format * fixup * Update create-gce.yml * Update create-gce.yml * Update create-gce.yml 2017-09-14 02:00:51 +08:00			`- task: Include static pod setup if not using kubeadm`
			`include: static-pod-setup.yml`
			`when: not kubeadm_enabled\|bool\|default(false)`