76 lines
2.9 KiB
YAML
76 lines
2.9 KiB
YAML
---
|
|
# https://github.com/kevincoakley/ansible-role-k8s-rolling-update
|
|
- name: Cluster rollout update
|
|
hosts: all
|
|
become: true
|
|
gather_facts: true
|
|
any_errors_fatal: true
|
|
serial: 1
|
|
pre_tasks:
|
|
- name: Pausing for 5 seconds...
|
|
ansible.builtin.pause:
|
|
seconds: 5
|
|
tasks:
|
|
- name: Details
|
|
ansible.builtin.command: "kubectl get node {% raw %}{{ inventory_hostname }}{% endraw %} -o json"
|
|
register: kubectl_get_node
|
|
delegate_to: "{% raw %}{{ groups['master'][0] }}{% endraw %}"
|
|
failed_when: false
|
|
changed_when: false
|
|
|
|
- name: Update
|
|
when:
|
|
# When status.conditions[x].type == Ready then check stats.conditions[x].status for True|False
|
|
- kubectl_get_node['stdout'] | from_json | json_query("status.conditions[?type == 'Ready'].status")
|
|
# If spec.unschedulable is defined then the node is cordoned
|
|
- not (kubectl_get_node['stdout'] | from_json).spec.unschedulable is defined
|
|
block:
|
|
- name: Cordon
|
|
ansible.builtin.command: "kubectl cordon {% raw %}{{ inventory_hostname }}{% endraw %}"
|
|
delegate_to: "{% raw %}{{ groups['master'][0] }}{% endraw %}"
|
|
changed_when: false
|
|
|
|
- name: Wait for cordon
|
|
ansible.builtin.command: "kubectl get node {% raw %}{{ inventory_hostname }}{% endraw %} -o json"
|
|
register: wait_for_cordon
|
|
retries: 10
|
|
delay: 10
|
|
delegate_to: "{% raw %}{{ groups['master'][0] }}{% endraw %}"
|
|
changed_when: false
|
|
until: (wait_for_cordon['stdout'] | from_json).spec.unschedulable
|
|
|
|
- name: Drain
|
|
ansible.builtin.command: "kubectl drain --ignore-daemonsets --delete-emptydir-data --force {% raw %}{{ inventory_hostname }}{% endraw %}"
|
|
delegate_to: "{% raw %}{{ groups['master'][0] }}{% endraw %}"
|
|
changed_when: false
|
|
|
|
- name: Update
|
|
ansible.builtin.apt:
|
|
upgrade: dist
|
|
update_cache: true
|
|
|
|
- name: Check if reboot is required
|
|
ansible.builtin.stat:
|
|
path: /var/run/reboot-required
|
|
register: reboot_required
|
|
|
|
- name: Reboot
|
|
when: reboot_required.stat.exists
|
|
ansible.builtin.reboot:
|
|
msg: Rebooting node
|
|
post_reboot_delay: 60
|
|
reboot_timeout: 3600
|
|
|
|
- name: Uncordon
|
|
ansible.builtin.command: "kubectl uncordon {% raw %}{{ inventory_hostname }}{% endraw %}"
|
|
delegate_to: "{% raw %}{{ groups['master'][0] }}{% endraw %}"
|
|
changed_when: false
|
|
|
|
- name: Wait for uncordon
|
|
ansible.builtin.command: "kubectl get node {% raw %}{{ inventory_hostname }}{% endraw %} -o json"
|
|
retries: 10
|
|
delay: 10
|
|
delegate_to: "{% raw %}{{ groups['master'][0] }}{% endraw %}"
|
|
changed_when: false
|
|
until: not (kubectl_get_node['stdout'] | from_json).spec.unschedulable is defined
|