Add Kubelet config, remove deprecated flags and fix minor bugs (#4724)

* Add kubelet config

* Change kubelet_authorization_mode_webhook to true

* Fix lint

* Sync env file

* Refactor the kubernetes node folder

* Remove deprecated flag and fix lint
This commit is contained in:
Andreas Krüger
2019-05-08 22:38:36 +02:00
committed by Kubernetes Prow Robot
parent 8a5eae94ea
commit 044dcbaed0
22 changed files with 221 additions and 43 deletions

View File

@@ -17,7 +17,7 @@
tags:
- kubelet
- import_tasks: nginx-proxy.yml
- import_tasks: loadbalancer/nginx-proxy.yml
when:
- not is_kube_master
- loadbalancer_apiserver_localhost
@@ -25,7 +25,7 @@
tags:
- nginx
- import_tasks: haproxy.yml
- import_tasks: loadbalancer/haproxy.yml
when:
- not is_kube_master
- loadbalancer_apiserver_localhost
@@ -33,23 +33,6 @@
tags:
- haproxy
- name: Make sure dynamic kubelet configuration directory is writeable
file:
path: "{{ dynamic_kubelet_configuration_dir }}"
mode: 0600
state: directory
when: dynamic_kubelet_configuration
- name: Write kubelet config file (kubeadm)
template:
src: kubelet.kubeadm.env.j2
dest: "{{ kube_config_dir }}/kubelet.env"
backup: yes
notify: restart kubelet
tags:
- kubelet
- kubeadm
- name: Ensure nodePort range is reserved
sysctl:
name: net.ipv4.ip_local_reserved_ports
@@ -99,7 +82,7 @@
name: "{{ item }}"
state: present
sysctl_file: "{{ sysctl_file_path }}"
value: 1
value: "1"
reload: yes
when: sysctl_bridge_nf_call_iptables.rc == 0
with_items:
@@ -175,7 +158,7 @@
tags:
- kube-proxy
- include_tasks: "{{ cloud_provider }}-credential-check.yml"
- include_tasks: "cloud-credentials/{{ cloud_provider }}-credential-check.yml"
when:
- cloud_provider is defined
- cloud_provider in [ 'openstack', 'azure', 'vsphere' ]
@@ -200,7 +183,7 @@
- name: Write cloud-config
template:
src: "{{ cloud_provider }}-cloud-config.j2"
src: "cloud-configs/{{ cloud_provider }}-cloud-config.j2"
dest: "{{ kube_config_dir }}/cloud_config"
group: "{{ kube_cert_group }}"
mode: 0640
@@ -211,13 +194,7 @@
tags:
- cloud-provider
# reload-systemd
- meta: flush_handlers
- name: Enable kubelet
service:
name: kubelet
enabled: yes
state: started
- import_tasks: kubelet.yml
tags:
- kubelet
- kubeadm