Devin Buhl
df642e5425
* feat: update jinja delimiters back to default Signed-off-by: Devin Buhl <devin@buhl.casa> * feat: remove cert-manager promrules Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: update talos csr approver Signed-off-by: Devin Buhl <devin@buhl.casa> --------- Signed-off-by: Devin Buhl <devin@buhl.casa>
88 lines
3.2 KiB
YAML
88 lines
3.2 KiB
YAML
---
|
|
# https://github.com/kevincoakley/ansible-role-k8s-rolling-update
|
|
- name: Cluster rollout update
|
|
hosts: kubernetes
|
|
become: true
|
|
gather_facts: true
|
|
any_errors_fatal: true
|
|
serial: 1
|
|
pre_tasks:
|
|
- name: Pausing for 5 seconds...
|
|
ansible.builtin.pause:
|
|
seconds: 5
|
|
tasks:
|
|
- name: Details
|
|
{% if distribution in ['k3s'] %}
|
|
ansible.builtin.command: "k3s kubectl get node {% raw %}{{ inventory_hostname }}{% endraw %} -o json"
|
|
{% elif distribution in ['k0s'] %}
|
|
ansible.builtin.command: "k0s kubectl get node {% raw %}{{ inventory_hostname }}{% endraw %} -o json"
|
|
{% endif %}
|
|
register: kubectl_get_node
|
|
delegate_to: "{% raw %}{{ groups['master'][0] }}{% endraw %}"
|
|
failed_when: false
|
|
changed_when: false
|
|
|
|
- name: Update
|
|
when:
|
|
# When status.conditions[x].type == Ready then check stats.conditions[x].status for True|False
|
|
- kubectl_get_node['stdout'] | from_json | json_query("status.conditions[?type == 'Ready'].status")
|
|
# If spec.unschedulable is defined then the node is cordoned
|
|
- not (kubectl_get_node['stdout'] | from_json).spec.unschedulable is defined
|
|
block:
|
|
- name: Cordon
|
|
kubernetes.core.k8s_drain:
|
|
name: "{% raw %}{{ inventory_hostname }}{% endraw %}"
|
|
{% if distribution in ['k3s'] %}
|
|
kubeconfig: /etc/rancher/k3s/k3s.yaml
|
|
{% elif distribution in ['k0s'] %}
|
|
kubeconfig: /var/lib/k0s/pki/admin.conf
|
|
{% endif %}
|
|
state: cordon
|
|
delegate_to: "{% raw %}{{ groups['master'][0] }}{% endraw %}"
|
|
|
|
- name: Drain
|
|
kubernetes.core.k8s_drain:
|
|
name: "{% raw %}{{ inventory_hostname }}{% endraw %}"
|
|
{% if distribution in ['k3s'] %}
|
|
kubeconfig: /etc/rancher/k3s/k3s.yaml
|
|
{% elif distribution in ['k0s'] %}
|
|
kubeconfig: /var/lib/k0s/pki/admin.conf
|
|
{% endif %}
|
|
state: drain
|
|
delete_options:
|
|
delete_emptydir_data: true
|
|
ignore_daemonsets: true
|
|
terminate_grace_period: 600
|
|
wait_timeout: 900
|
|
pod_selectors:
|
|
- app!=rook-ceph-osd # Rook Ceph
|
|
delegate_to: "{% raw %}{{ groups['master'][0] }}{% endraw %}"
|
|
|
|
- name: Update
|
|
ansible.builtin.apt:
|
|
upgrade: dist
|
|
update_cache: true
|
|
|
|
- name: Check if reboot is required
|
|
ansible.builtin.stat:
|
|
path: /var/run/reboot-required
|
|
register: reboot_required
|
|
|
|
- name: Reboot
|
|
when: reboot_required.stat.exists
|
|
ansible.builtin.reboot:
|
|
msg: Rebooting node
|
|
post_reboot_delay: 60
|
|
reboot_timeout: 3600
|
|
|
|
- name: Uncordon
|
|
kubernetes.core.k8s_drain:
|
|
name: "{% raw %}{{ inventory_hostname }}{% endraw %}"
|
|
{% if distribution in ['k3s'] %}
|
|
kubeconfig: /etc/rancher/k3s/k3s.yaml
|
|
{% elif distribution in ['k0s'] %}
|
|
kubeconfig: /var/lib/k0s/pki/admin.conf
|
|
{% endif %}
|
|
state: uncordon
|
|
delegate_to: "{% raw %}{{ groups['master'][0] }}{% endraw %}"
|