kubernetes-sigs
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
kubespray/roles/kubernetes/preinstall/defaults/main.yml

49 lines
1.1 KiB
YAML
Raw Normal View History

install docker on a largest number of linux distribution (based on https://github.com/marklee77/ansible-role-docker)
2015-12-31 00:11:33 +08:00
---
don't run gitinfos by default
2016-01-21 20:19:02 +08:00
run_gitinfos: false
Verify valid settings before deploy (#1705) Also fix yaml lint issues Fixes #1703
2017-09-27 21:47:47 +08:00
# Set to true to allow pre-checks to fail and continue deployment
ignore_assert_errors: false
Disalbe install epel-release rpm on Centos/Redhat 1.Disalbe install epel-release rpm on Centos/Redhat 2.Use yum install epel-release
2018-02-07 14:53:09 +08:00
epel_enabled: false
Parameterize several dependency endpoints so that they can be overridden with internal mirrors. Signed-off-by: Chad Swenson <chadswen@gmail.com>
2016-10-15 05:46:44 +08:00
split role download and preinstall
2015-12-31 21:07:02 +08:00
common_required_pkgs:
common role in order to support other linux distribs
2015-12-31 05:15:18 +08:00
- python-httplib2
opensuse: Fix OpenSSL package name OpenSSL 1.1 package in openSUSE Tumbleweed is named openssl-1_1, not openssl-1_1_0.
2018-05-08 16:03:30 +08:00
- "{{ (ansible_distribution == 'openSUSE Tumbleweed') | ternary('openssl-1_1', 'openssl') }}"
split role download and preinstall
2015-12-31 21:07:02 +08:00
- curl
Flannel running as pod
2016-01-09 17:45:50 +08:00
- rsync
generate secrets on deployment machine test travis with sudo=true instead of required
2016-02-12 06:08:16 +08:00
- bash-completion
Add socat do required pkgs It's required for port forwarding.
2016-09-15 03:27:33 +08:00
- socat
Vault security hardening and role isolation
2017-02-09 05:41:36 +08:00
- unzip
split role download and preinstall
2015-12-31 21:07:02 +08:00
Add option to disable ipv6 dns lookup New variable disable_ipv6_dns in kubernetes/preinstall.
2016-08-08 18:59:20 +08:00
# Set to true if your network does not support IPv6
# This maybe necessary for pulling Docker images from
# GCE docker repository
disable_ipv6_dns: false
Implemented cloud-provider integration for OpenStack. Currently kubespray does not install kubernetes in a way that allows cinder volumes to be used. This commit provides the necessary cloud configuration file and configures kubelet and kube-apiserver to use it.
2016-03-29 20:50:22 +08:00
Rework inventory all by real groups' vars * Leave all.yml to keep only optional vars * Store groups' specific vars by existing group names * Fix optional vars casted as mandatory (add default()) * Fix missing defaults for an optional IP var * Relink group_vars for terraform to reflect changes Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2016-12-27 23:39:00 +08:00
kube_cert_group: kube-cert
kube_config_dir: /etc/kubernetes
Implemented cloud-provider integration for OpenStack. Currently kubespray does not install kubernetes in a way that allows cinder volumes to be used. This commit provides the necessary cloud configuration file and configures kubelet and kube-apiserver to use it.
2016-03-29 20:50:22 +08:00
Rename CoreOS fact Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-05 18:35:16 +08:00
# Container Linux by CoreOS cloud init config file to define /etc/resolv.conf content
Preconfigure DNS stack and docker early In order to enable offline/intranet installation cases: * Move DNS/resolvconf configuration to preinstall role. Remove skip_dnsmasq_k8s var as not needed anymore. * Preconfigure DNS stack early, which may be the case when downloading artifacts from intranet repositories. Do not configure K8s DNS resolvers for hosts /etc/resolv.conf yet early (as they may be not existing). * Reconfigure K8s DNS resolvers for hosts only after kubedns/dnsmasq was set up and before K8s apps to be created. * Move docker install task to early stage as well and unbind it from the etcd role's specific install path. Fix external flannel dependency on docker role handlers. Also fix the docker restart handlers' steps ordering to match the expected sequence (the socket then the service). * Add default resolver fact, which is the cloud provider specific and remove hardcoded GCE resolver. * Reduce default ndots for hosts /etc/resolv.conf to 2. Multiple search domains combined with high ndots values lead to poor performance of DNS stack and make ansible workers to fail very often with the "Timeout (12s) waiting for privilege escalation prompt:" error. * Update docs. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-07 23:57:05 +08:00
# for hostnet pods and infra needs
resolveconf_cloud_init_conf: /etc/resolveconf_cloud_init.conf
added flag for not populating inventory entries to etc hosts file
2017-06-30 20:17:03 +08:00
# All inventory hostnames will be written into each /etc/hosts file.
populate_inventory_to_hosts_file: true
Rename dns_server, add var for selinux. (#1572) * Rename dns_server to dnsmasq_dns_server so that it includes role prefix as the var name is generic and conflicts when integrating with existing ansible automation. * Enable selinux state to be configurable with new var preinstall_selinux_state
2017-10-12 03:40:21 +08:00
preinstall_selinux_state: permissive
sysctl file should be in defaults so that it can be overriden (#2475) * sysctl file should be in defaults so that it can be overriden * Change sysctl_file_path to be consistent with roles/kubernetes/preinstall/defaults/main.yml
2018-04-27 23:50:58 +08:00
sysctl_file_path: "/etc/sysctl.d/99-sysctl.conf"
Localhost in hosts files should be updated (if necessary), not overriden
2018-08-22 18:10:49 +08:00
same work with less lines
2018-08-24 20:06:07 +08:00
etc_hosts_localhost_entries:
127.0.0.1:
expected:
- localhost
- localhost.localdomain
Localhost in hosts files should be updated (if necessary), not overriden
2018-08-22 18:10:49 +08:00
::1:
same work with less lines
2018-08-24 20:06:07 +08:00
expected:
- localhost6
- localhost6.localdomain
unexpected:
- localhost
- localhost.localdomain