blob: 69ad7a84070b75905a04cf9ae24e1e7c0660a5fd (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
|
---
- name: Gather facts for node hosts
hosts: nodes
roles:
- openshift_facts
tasks:
# Since the master is registering the nodes before they are configured, we
# need to make sure to set the node properties beforehand if we do not want
# the defaults
- openshift_facts:
role: 'node'
local_facts:
hostname: "{{ openshift_hostname | default(None) }}"
external_id: "{{ openshift_node_external_id | default(None) }}"
resources_cpu: "{{ openshfit_node_resources_cpu | default(None) }}"
resources_memory: "{{ openshfit_node_resources_memory | default(None) }}"
pod_cidr: "{{ openshfit_node_pod_cidr | default(None) }}"
labels: "{{ openshfit_node_labels | default(None) }}"
annotations: "{{ openshfit_node_annotations | default(None) }}"
- name: Register nodes
hosts: masters[0]
vars:
openshift_nodes: "{{ hostvars | oo_select_keys(groups['nodes']) }}"
roles:
- openshift_register_nodes
tasks:
- name: Create local temp directory for syncing certs
local_action: command /usr/bin/mktemp -d /tmp/openshift-ansible-XXXXXXX
register: mktemp
- name: Sync master certs to localhost
synchronize:
mode: pull
checksum: yes
src: /var/lib/openshift/openshift.local.certificates
dest: "{{ mktemp.stdout }}"
- name: Configure node instances
hosts: nodes
vars:
sync_tmpdir: "{{ hostvars[groups['masters'][0]].mktemp.stdout }}"
cert_parent_rel_path: openshift.local.certificates
cert_rel_path: "{{ cert_parent_rel_path }}/node-{{ openshift.common.hostname }}"
cert_base_path: /var/lib/openshift
cert_parent_path: "{{ cert_base_path }}/{{ cert_parent_rel_path }}"
cert_path: "{{ cert_base_path }}/{{ cert_rel_path }}"
openshift_sdn_master_url: http://{{ hostvars[groups['masters'][0]].openshift.common.hostname }}:4001
pre_tasks:
- name: Ensure certificate directories exists
file:
path: "{{ item }}"
state: directory
with_items:
- "{{ cert_path }}"
- "{{ cert_parent_path }}/ca"
# TODO: notify restart openshift-node and/or restart openshift-sdn-node,
# possibly test service started time against certificate/config file
# timestamps in openshift-node or openshift-sdn-node to trigger notify
- name: Sync certs to nodes
synchronize:
checksum: yes
src: "{{ item.src }}"
dest: "{{ item.dest }}"
owner: no
group: no
with_items:
- src: "{{ sync_tmpdir }}/{{ cert_rel_path }}"
dest: "{{ cert_parent_path }}"
- src: "{{ sync_tmpdir }}/{{ cert_parent_rel_path }}/ca/cert.crt"
dest: "{{ cert_parent_path }}/ca/cert.crt"
- local_action: file name={{ sync_tmpdir }} state=absent
run_once: true
roles:
- openshift_node
- openshift_sdn_node
|
