kubespray/roles/kubernetes/master/tasks/main.yml

---
- include: pre-upgrade.yml
  tags: k8s-pre-upgrade

- name: Copy kubectl from hyperkube container
  command: "{{ docker_bin_dir }}/docker run --rm -v {{ bin_dir }}:/systembindir {{ hyperkube_image_repo }}:{{ hyperkube_image_tag }} /bin/cp /hyperkube /systembindir/kubectl"
  register: kube_task_result
  until: kube_task_result.rc == 0
  retries: 4
  delay: "{{ retry_stagger | random + 3 }}"
  changed_when: false
  tags: [hyperkube, kubectl, upgrade]

- name: Install kubectl bash completion
  shell: "{{ bin_dir }}/kubectl completion bash >/etc/bash_completion.d/kubectl.sh"
  when: ansible_os_family in ["Debian","RedHat"]
  tags: kubectl

- name: Set kubectl bash completion file
  file:
    path: /etc/bash_completion.d/kubectl.sh
    owner: root
    group: root
    mode: 0755
  when: ansible_os_family in ["Debian","RedHat"]
  tags: [kubectl, upgrade]

- name: Write kube-apiserver manifest
  template:
    src: manifests/kube-apiserver.manifest.j2
    dest: "{{ kube_manifest_dir }}/kube-apiserver.manifest"
  notify: Master | wait for the apiserver to be running
  tags: kube-apiserver

- meta: flush_handlers

- name: Write kube system namespace manifest
  template:
    src: namespace.j2
    dest: "{{kube_config_dir}}/{{system_namespace}}-ns.yml"
  run_once: yes
  when: inventory_hostname == groups['kube-master'][0]
  tags: apps

- name: Check if kube system namespace exists
  command: "{{ bin_dir }}/kubectl get ns {{system_namespace}}"
  register: 'kubesystem'
  changed_when: False
  failed_when: False
  run_once: yes
  tags: apps

- name: Create kube system namespace
  command: "{{ bin_dir }}/kubectl create -f {{kube_config_dir}}/{{system_namespace}}-ns.yml"
  retries: 4
  delay: "{{ retry_stagger | random + 3 }}"
  register: create_system_ns
  until: create_system_ns.rc == 0
  changed_when: False
  when: kubesystem|failed and inventory_hostname == groups['kube-master'][0]
  tags: apps

- name: Write kube-controller-manager manifest
  template:
    src: manifests/kube-controller-manager.manifest.j2
    dest: "{{ kube_manifest_dir }}/kube-controller-manager.manifest"
  notify: Master | wait for kube-controller-manager
  tags: kube-controller-manager

- name: Write kube-scheduler manifest
  template:
    src: manifests/kube-scheduler.manifest.j2
    dest: "{{ kube_manifest_dir }}/kube-scheduler.manifest"
  notify: Master | wait for kube-scheduler
  tags: kube-scheduler

- include: post-upgrade.yml
  tags: k8s-post-upgrade
Initial commit 2015-10-04 04:19:50 +08:00			`---`
Deploy kubelet and kube-apiserver as containers kubelet via docker kube-apiserver as a static pod Fixed etcd service start to be more tolerant of slow start. Workaround for kube_version to stay in download role, but not download an files by creating a new "nothing" download entry. 2016-07-08 17:59:21 +08:00			`- include: pre-upgrade.yml`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 21:36:00 +08:00			`tags: k8s-pre-upgrade`
Review role order, use master ip even when fqdn are used in the inventory 2015-12-17 06:49:01 +08:00
Copy kubectl from docker container Nearly the last stage of source all components to containers. Kubectl will be called from hyperkube image. Remaining tasks: * Move kube_version variable to kubernetes/preinstall * Drop placeholder download.nothing requirement 2016-07-25 18:56:58 +08:00			`- name: Copy kubectl from hyperkube container`
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-23 22:44:44 +08:00			`command: "{{ docker_bin_dir }}/docker run --rm -v {{ bin_dir }}:/systembindir {{ hyperkube_image_repo }}:{{ hyperkube_image_tag }} /bin/cp /hyperkube /systembindir/kubectl"`
Add retries for copying binaries from containers Closes issue: https://github.com/kubespray/kargo/issues/479 Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-09-13 20:36:01 +08:00			`register: kube_task_result`
			`until: kube_task_result.rc == 0`
			`retries: 4`
Add retry_stagger var for failed download/pushes. * Add the retry_stagger var to tweak push and retry time strategies. * Add large deployments related docs. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-09-15 17:23:27 +08:00			`delay: "{{ retry_stagger \| random + 3 }}"`
use command instead of synchronize 2016-01-22 23:37:07 +08:00			`changed_when: false`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 21:36:00 +08:00			`tags: [hyperkube, kubectl, upgrade]`
running kubernetes master processes as pods 2015-12-11 18:52:20 +08:00
Fix bash completion installation 2017-01-18 01:36:58 +08:00			`- name: Install kubectl bash completion`
			`shell: "{{ bin_dir }}/kubectl completion bash >/etc/bash_completion.d/kubectl.sh"`
Generate kubectl bash completion from kubectl instead of file 2016-11-14 16:22:46 +08:00			`when: ansible_os_family in ["Debian","RedHat"]`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 21:36:00 +08:00			`tags: kubectl`
Generate kubectl bash completion from kubectl instead of file 2016-11-14 16:22:46 +08:00
Fix bash completion installation 2017-01-18 01:36:58 +08:00			`- name: Set kubectl bash completion file`
			`file:`
			`path: /etc/bash_completion.d/kubectl.sh`
Generate kubectl bash completion from kubectl instead of file 2016-11-14 16:22:46 +08:00			`owner: root`
			`group: root`
			`mode: 0755`
Fix bash completion installation 2017-01-18 01:36:58 +08:00			`when: ansible_os_family in ["Debian","RedHat"]`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 21:36:00 +08:00			`tags: [kubectl, upgrade]`
Generate kubectl bash completion from kubectl instead of file 2016-11-14 16:22:46 +08:00
Deploy kubelet and kube-apiserver as containers kubelet via docker kube-apiserver as a static pod Fixed etcd service start to be more tolerant of slow start. Workaround for kube_version to stay in download role, but not download an files by creating a new "nothing" download entry. 2016-07-08 17:59:21 +08:00			`- name: Write kube-apiserver manifest`
run apiserver as a service reorder master handlers typo for sysvinit 2016-01-22 21:25:33 +08:00			`template:`
Deploy kubelet and kube-apiserver as containers kubelet via docker kube-apiserver as a static pod Fixed etcd service start to be more tolerant of slow start. Workaround for kube_version to stay in download role, but not download an files by creating a new "nothing" download entry. 2016-07-08 17:59:21 +08:00			`src: manifests/kube-apiserver.manifest.j2`
			`dest: "{{ kube_manifest_dir }}/kube-apiserver.manifest"`
Allow subdomains of dns_domain and fix kubelet restarts * Add a var for ndots (default 5) and put it hosts' /etc/resolv.conf. * Poke kube dns container image to v1.7 * In order to apply changes to kubelet, notify it to be restarted on changes made to /etc/resolv.conf. Ignore errors as the kubelet may yet to be present up to the moment of the notification being processed. * Remove unnecessary kubelet restart for master role as the node role ensures it is up and running. Notify master static pods waiters for apiserver, scheduler, controller-manager instead. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-09-27 17:54:12 +08:00			`notify: Master \| wait for the apiserver to be running`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 21:36:00 +08:00			`tags: kube-apiserver`
run apiserver as a service reorder master handlers typo for sysvinit 2016-01-22 21:25:33 +08:00
Allow subdomains of dns_domain and fix kubelet restarts * Add a var for ndots (default 5) and put it hosts' /etc/resolv.conf. * Poke kube dns container image to v1.7 * In order to apply changes to kubelet, notify it to be restarted on changes made to /etc/resolv.conf. Ignore errors as the kubelet may yet to be present up to the moment of the notification being processed. * Remove unnecessary kubelet restart for master role as the node role ensures it is up and running. Notify master static pods waiters for apiserver, scheduler, controller-manager instead. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-09-27 17:54:12 +08:00			`- meta: flush_handlers`
Address standalone kubelet config case Also place in global vars and do not repeat the kube_*_config_dir and kube_namespace vars for better code maintainability and UX. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-13 18:43:06 +08:00
Move namespace file to template directory 2017-04-18 20:59:14 +08:00			`- name: Write kube system namespace manifest`
			`template:`
			`src: namespace.j2`
Cleanup legacy syntax, spacing, files all to yml Migrate older inline= syntax to pure yml syntax for module args as to be consistant with most of the rest of the tasks Cleanup some spacing in various files Rename some files named yaml to yml for consistancy 2017-02-18 05:22:34 +08:00			`dest: "{{kube_config_dir}}/{{system_namespace}}-ns.yml"`
running kubernetes master processes as pods 2015-12-11 18:52:20 +08:00			`run_once: yes`
			`when: inventory_hostname == groups['kube-master'][0]`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 21:36:00 +08:00			`tags: apps`
running kubernetes master processes as pods 2015-12-11 18:52:20 +08:00
Address standalone kubelet config case Also place in global vars and do not repeat the kube_*_config_dir and kube_namespace vars for better code maintainability and UX. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-13 18:43:06 +08:00			`- name: Check if kube system namespace exists`
			`command: "{{ bin_dir }}/kubectl get ns {{system_namespace}}"`
Fix namespace 2016-01-14 22:19:45 +08:00			`register: 'kubesystem'`
			`changed_when: False`
Add native Vagrant support This allows you to simply run `vagrant up` to get a 3 node HA cluster. * Creates a dynamic inventory and uses the inventory/group_vars/all.yml * commented lines in inventory.example so that ansible doesn't try to use it. * added requirements.txt to give easy way to install ansible/ipaddr * added gitignore files to stop attempts to save unwated files * changed `Check if kube-system exists` to `failed_when: false` instead of `ignore_errors` 2016-05-08 23:11:09 +08:00			`failed_when: False`
Fix namespace 2016-01-14 22:19:45 +08:00			`run_once: yes`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 21:36:00 +08:00			`tags: apps`
Fix namespace 2016-01-14 22:19:45 +08:00
Address standalone kubelet config case Also place in global vars and do not repeat the kube_*_config_dir and kube_namespace vars for better code maintainability and UX. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-13 18:43:06 +08:00			`- name: Create kube system namespace`
			`command: "{{ bin_dir }}/kubectl create -f {{kube_config_dir}}/{{system_namespace}}-ns.yml"`
switch debian8-canal-ha to ubuntu 2017-03-23 23:55:37 +08:00			`retries: 4`
			`delay: "{{ retry_stagger \| random + 3 }}"`
restart scheduler and controller-manager too 2017-03-24 23:29:28 +08:00			`register: create_system_ns`
			`until: create_system_ns.rc == 0`
Fix namespace 2016-01-14 22:19:45 +08:00			`changed_when: False`
run apiserver as a service reorder master handlers typo for sysvinit 2016-01-22 21:25:33 +08:00			`when: kubesystem\|failed and inventory_hostname == groups['kube-master'][0]`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 21:36:00 +08:00			`tags: apps`
Fix namespace 2016-01-14 22:19:45 +08:00
running kubernetes master processes as pods 2015-12-11 18:52:20 +08:00			`- name: Write kube-controller-manager manifest`
			`template:`
			`src: manifests/kube-controller-manager.manifest.j2`
use master election option instead of podmaster 2016-03-22 05:25:09 +08:00			`dest: "{{ kube_manifest_dir }}/kube-controller-manager.manifest"`
Allow subdomains of dns_domain and fix kubelet restarts * Add a var for ndots (default 5) and put it hosts' /etc/resolv.conf. * Poke kube dns container image to v1.7 * In order to apply changes to kubelet, notify it to be restarted on changes made to /etc/resolv.conf. Ignore errors as the kubelet may yet to be present up to the moment of the notification being processed. * Remove unnecessary kubelet restart for master role as the node role ensures it is up and running. Notify master static pods waiters for apiserver, scheduler, controller-manager instead. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-09-27 17:54:12 +08:00			`notify: Master \| wait for kube-controller-manager`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 21:36:00 +08:00			`tags: kube-controller-manager`
running kubernetes master processes as pods 2015-12-11 18:52:20 +08:00
			`- name: Write kube-scheduler manifest`
			`template:`
			`src: manifests/kube-scheduler.manifest.j2`
use master election option instead of podmaster 2016-03-22 05:25:09 +08:00			`dest: "{{ kube_manifest_dir }}/kube-scheduler.manifest"`
Allow subdomains of dns_domain and fix kubelet restarts * Add a var for ndots (default 5) and put it hosts' /etc/resolv.conf. * Poke kube dns container image to v1.7 * In order to apply changes to kubelet, notify it to be restarted on changes made to /etc/resolv.conf. Ignore errors as the kubelet may yet to be present up to the moment of the notification being processed. * Remove unnecessary kubelet restart for master role as the node role ensures it is up and running. Notify master static pods waiters for apiserver, scheduler, controller-manager instead. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-09-27 17:54:12 +08:00			`notify: Master \| wait for kube-scheduler`
Add tags Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-08 21:36:00 +08:00			`tags: kube-scheduler`
Migrate k8s data to etcd3 api store Default backend is now etcd3 (was etcd2). The migration process consists of the following steps: * check if migration is necessary * stop etcd on first etcd server * run migration script * start etcd on first etcd server * stop kube-apiserver until configuration is updated * update kube-apiserver * purge old etcdv2 data 2017-03-06 18:22:13 +08:00
			`- include: post-upgrade.yml`
			`tags: k8s-post-upgrade`