openstack
/
tripleo-heat-templates
Code Issues Proposed changes
Heat templates for deploying OpenStack
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
5935 Commits
7 Branches
59MB
Tree: d6e5cc181b
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'd6e5cc181b'
${ noResults }
tripleo-heat-templates/extraconfig/services/kubernetes-master.yaml

156 lines
5.8KB
Raw Blame History 

  1. heat_template_version: ocata

  2. 

  3. description: Triggers a Mistral workflow for the deployment of Kubernetes

  4. 

  5. parameters:

  6.   RoleNetIpMap:

  7.     default: {}

  8.     type: json

  9.   ServiceData:

  10.     default: {}

  11.     description: Dictionary packing service data

  12.     type: json

  13.   ServiceNetMap:

  14.     default: {}

  15.     description: Mapping of service_name -> network name. Typically set

  16.                  via parameter_defaults in the resource registry.  This

  17.                  mapping overrides those in ServiceNetMapDefaults.

  18.     type: json

  19.   DefaultPasswords:

  20.     default: {}

  21.     type: json

  22.   RoleName:

  23.     default: ''

  24.     description: Role name on which the service is applied

  25.     type: string

  26.   RoleParameters:

  27.     default: {}

  28.     description: Parameters specific to the role

  29.     type: json

  30.   EndpointMap:

  31.     default: {}

  32.     description: Mapping of service endpoint -> protocol. Typically set

  33.                  via parameter_defaults in the resource registry.

  34.     type: json

  35. 

  36. outputs:

  37.   role_data:

  38.     description: Role data for the Kubernetes Service

  39.     value:

  40.       service_name: kubernetes_master

  41.       config_settings:

  42.         tripleo.kubernetes_master.firewall_rules:

  43.           '200 kubernetes-master api':

  44.             dport: 6443

  45.             proto: tcp

  46.           '200 kubernetes-master etcd':

  47.             dport:

  48.               - 2379

  49.               - 2380

  50.             proto: tcp

  51.           '200 kubernetes-master flannel':

  52.             dport:

  53.               - 8285

  54.               - 8472

  55.             proto: udp

  56.       upgrade_tasks: []

  57.       step_config: ''

  58.       external_deploy_tasks:

  59.         # FIXME: remove this block when kubespray is packaged

  60.         - name: kubernetes_master step 2 kubespray repository

  61.           when: step == '2'

  62.           block:

  63.             - name: check kubespray directory existence

  64.               stat:

  65.                 path: /usr/share/kubespray

  66.               register: kubespray_stat

  67.             - name: clone kubespray repo

  68.               git:

  69.                 repo: https://github.com/kubernetes-incubator/kubespray

  70.                 dest: /usr/share/kubespray

  71.                 update: no

  72.               become: yes

  73.               become_user: root

  74.               when: not kubespray_stat.stat.exists

  75.         - name: kubernetes_master step 2

  76.           when: step == '2'

  77.           block:

  78.             - name: create kubespray temp dirs

  79.               file:

  80.                 path: "{{item}}"

  81.                 state: directory

  82.               with_items:

  83.                 - "{{playbook_dir}}/kubespray"

  84.                 - "{{playbook_dir}}/kubespray/artifacts"

  85.             - name: generate kubespray inventory

  86.               copy:

  87.                 dest: "{{playbook_dir}}/kubespray/inventory.yml"

  88.                 content: |

  89.                   kube-master:

  90.                     hosts:

  91.                       {% for host in groups['kubernetes_master'] -%}

  92.                       {{ hostvars.raw_get(host)['ansible_hostname'] }}:

  93.                         ansible_user: {{ hostvars.raw_get(host)['ansible_user'] | default(hostvars.raw_get(host)['ansible_ssh_user']) | default('root') }}

  94.                         ansible_host: {{ hostvars.raw_get(host)['ansible_host'] | default(host) }}

  95.                       {% endfor %}

  96. 

  97.                   kube-node:

  98. 

  99.                     hosts:

  100.                       {% for host in groups['kubernetes_worker'] -%}

  101.                       {{ hostvars.raw_get(host)['ansible_hostname'] }}:

  102.                         ansible_user: {{ hostvars.raw_get(host)['ansible_user'] | default(hostvars.raw_get(host)['ansible_ssh_user']) | default('root') }}

  103.                         ansible_host: {{ hostvars.raw_get(host)['ansible_host'] | default(host) }}

  104.                       {% endfor %}

  105. 

  106.                   etcd:

  107.                     children:

  108.                       kube-master: {}

  109. 

  110.                   k8s-cluster:

  111.                     children:

  112.                       kube-master: {}

  113.                       kube-node: {}

  114.             - name: generate kubespray global vars

  115.               copy:

  116.                 dest: "{{playbook_dir}}/kubespray/global_vars.yml"

  117.                 content: |

  118.                   kubeconfig_localhost: true

  119.                   kubectl_localhost: true

  120.                   artifacts_dir: '{{playbook_dir}}/kubespray/artifacts'

  121.             - name: generate kubespray playbook

  122.               copy:

  123.                 dest: "{{playbook_dir}}/kubespray/playbook.yml"

  124.                 content: |

  125.                   - include: /usr/share/kubespray/cluster.yml

  126.             - name: set kubespray command

  127.               set_fact:

  128.                 # NOTE: We could let kubespray configure docker

  129.                 # (remove --skip-tags docker) and run it in step 1

  130.                 # when this RFE is implemented:

  131.                 # https://github.com/kubernetes-incubator/kubespray/issues/1836

  132.                 kubespray_command: >-

  133.                   {%- if kubespray_command is defined -%}

  134.                   {{kubespray_command}}

  135.                   {%- else -%}

  136.                   ansible-playbook

  137.                   -b

  138.                   -i '{{playbook_dir}}/kubespray/inventory.yml'

  139.                   --skip-tags docker,bastion-ssh-config

  140.                   --extra-vars '@{{playbook_dir}}/kubespray/global_vars.yml'

  141.                   '{{playbook_dir}}/kubespray/playbook.yml'

  142.                   {%- endif -%}

  143.             - name: print kubespray command

  144.               debug:

  145.                 var: kubespray_command

  146.             - name: run kubespray (immediate log at {{playbook_dir}}/kubespray/playbook.log)

  147.               shell: |

  148.                 {{kubespray_command}} 2>&1 | tee {{playbook_dir}}/kubespray/playbook.log

  149.                 exit ${PIPESTATUS[0]}

  150.               register: outputs

  151.             - name: print kubespray outputs

  152.               debug:

  153.                 var: (outputs.stderr|default('')).split('\n')|union(outputs.stdout_lines|default([]))

  154.               failed_when: outputs|failed

  155.               when: outputs is defined