kubernetes-sigs
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
kubespray/roles/kubernetes/preinstall/defaults/main.yml

53 lines
1.3 KiB
YAML
Raw Normal View History

install docker on a largest number of linux distribution (based on https://github.com/marklee77/ansible-role-docker)
2015-12-31 00:11:33 +08:00
---
don't run gitinfos by default
2016-01-21 20:19:02 +08:00
run_gitinfos: false
Verify valid settings before deploy (#1705) Also fix yaml lint issues Fixes #1703
2017-09-27 21:47:47 +08:00
# Set to true to allow pre-checks to fail and continue deployment
ignore_assert_errors: false
Disalbe install epel-release rpm on Centos/Redhat 1.Disalbe install epel-release rpm on Centos/Redhat 2.Use yum install epel-release
2018-02-07 14:53:09 +08:00
epel_enabled: false
Skip most of kubernetes/preinstall role during late DNS config (#3627) When using resolvconf_mode host_resolvconf, there is an early DNS config stage where Kubernetes cluster DNS is not injected for host DNS intially. Later, the cluster DNS is enabled, but we do not need to run every task from the kubernetes/preinstall role.
2018-11-01 23:08:50 +08:00
dns_late: false
Parameterize several dependency endpoints so that they can be overridden with internal mirrors. Signed-off-by: Chad Swenson <chadswen@gmail.com>
2016-10-15 05:46:44 +08:00
split role download and preinstall
2015-12-31 21:07:02 +08:00
common_required_pkgs:
common role in order to support other linux distribs
2015-12-31 05:15:18 +08:00
- python-httplib2
opensuse: Fix OpenSSL package name OpenSSL 1.1 package in openSUSE Tumbleweed is named openssl-1_1, not openssl-1_1_0.
2018-05-08 16:03:30 +08:00
- "{{ (ansible_distribution == 'openSUSE Tumbleweed') | ternary('openssl-1_1', 'openssl') }}"
split role download and preinstall
2015-12-31 21:07:02 +08:00
- curl
Flannel running as pod
2016-01-09 17:45:50 +08:00
- rsync
Add socat do required pkgs It's required for port forwarding.
2016-09-15 03:27:33 +08:00
- socat
Vault security hardening and role isolation
2017-02-09 05:41:36 +08:00
- unzip
Install the latest filesystem creation packages (#3904) This PR ensures that the e2fsprogs and xfsprogs packages are installed on all Kubernetes nodes and that the packages are the latest versions. It also ensures that the nodes can create XFS filesystems when necessary, since not all distros install xfsprogs by default. e2fsprogs - ext2/ext3/ext4 file system utilities xfsprogs - Utilities for managing the XFS filesystem
2019-02-05 04:23:33 +08:00
- e2fsprogs
- xfsprogs
split role download and preinstall
2015-12-31 21:07:02 +08:00
Add option to disable ipv6 dns lookup New variable disable_ipv6_dns in kubernetes/preinstall.
2016-08-08 18:59:20 +08:00
# Set to true if your network does not support IPv6
# This maybe necessary for pulling Docker images from
# GCE docker repository
disable_ipv6_dns: false
Implemented cloud-provider integration for OpenStack. Currently kubespray does not install kubernetes in a way that allows cinder volumes to be used. This commit provides the necessary cloud configuration file and configures kubelet and kube-apiserver to use it.
2016-03-29 20:50:22 +08:00
Rework inventory all by real groups' vars * Leave all.yml to keep only optional vars * Store groups' specific vars by existing group names * Fix optional vars casted as mandatory (add default()) * Fix missing defaults for an optional IP var * Relink group_vars for terraform to reflect changes Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2016-12-27 23:39:00 +08:00
kube_cert_group: kube-cert
kube_config_dir: /etc/kubernetes
Use K8s 1.14 and add kubeadm experimental control plane mode (#4514) * Use K8s 1.14 and add kubeadm experimental control plane mode This reverts commit d39c273d96afe610fed03a2558ffc1beec64c114. * Cleanup kubeadm setup run on first master * pin kubeadm_certificate_key in test * Remove kubelet autolabel of kube-node, add symlink for pki dir Change-Id: Id5e74dd667c60675dbfe4193b0bc9fb44380e1ca
2019-04-19 21:01:54 +08:00
kube_cert_dir: "{{ kube_config_dir }}/ssl"
kube_cert_compat_dir: /etc/kubernetes/pki
Implemented cloud-provider integration for OpenStack. Currently kubespray does not install kubernetes in a way that allows cinder volumes to be used. This commit provides the necessary cloud configuration file and configures kubelet and kube-apiserver to use it.
2016-03-29 20:50:22 +08:00
Rename CoreOS fact Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-05 18:35:16 +08:00
# Container Linux by CoreOS cloud init config file to define /etc/resolv.conf content
Preconfigure DNS stack and docker early In order to enable offline/intranet installation cases: * Move DNS/resolvconf configuration to preinstall role. Remove skip_dnsmasq_k8s var as not needed anymore. * Preconfigure DNS stack early, which may be the case when downloading artifacts from intranet repositories. Do not configure K8s DNS resolvers for hosts /etc/resolv.conf yet early (as they may be not existing). * Reconfigure K8s DNS resolvers for hosts only after kubedns/dnsmasq was set up and before K8s apps to be created. * Move docker install task to early stage as well and unbind it from the etcd role's specific install path. Fix external flannel dependency on docker role handlers. Also fix the docker restart handlers' steps ordering to match the expected sequence (the socket then the service). * Add default resolver fact, which is the cloud provider specific and remove hardcoded GCE resolver. * Reduce default ndots for hosts /etc/resolv.conf to 2. Multiple search domains combined with high ndots values lead to poor performance of DNS stack and make ansible workers to fail very often with the "Timeout (12s) waiting for privilege escalation prompt:" error. * Update docs. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-07 23:57:05 +08:00
# for hostnet pods and infra needs
resolveconf_cloud_init_conf: /etc/resolveconf_cloud_init.conf
added flag for not populating inventory entries to etc hosts file
2017-06-30 20:17:03 +08:00
# All inventory hostnames will be written into each /etc/hosts file.
populate_inventory_to_hosts_file: true
Rename dns_server, add var for selinux. (#1572) * Rename dns_server to dnsmasq_dns_server so that it includes role prefix as the var name is generic and conflicts when integrating with existing ansible automation. * Enable selinux state to be configurable with new var preinstall_selinux_state
2017-10-12 03:40:21 +08:00
preinstall_selinux_state: permissive
sysctl file should be in defaults so that it can be overriden (#2475) * sysctl file should be in defaults so that it can be overriden * Change sysctl_file_path to be consistent with roles/kubernetes/preinstall/defaults/main.yml
2018-04-27 23:50:58 +08:00
sysctl_file_path: "/etc/sysctl.d/99-sysctl.conf"
Localhost in hosts files should be updated (if necessary), not overriden
2018-08-22 18:10:49 +08:00
same work with less lines
2018-08-24 20:06:07 +08:00
etc_hosts_localhost_entries:
127.0.0.1:
expected:
- localhost
- localhost.localdomain
Localhost in hosts files should be updated (if necessary), not overriden
2018-08-22 18:10:49 +08:00
::1:
same work with less lines
2018-08-24 20:06:07 +08:00
expected:
- localhost6
- localhost6.localdomain
unexpected:
- localhost
- localhost.localdomain