mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-10-30 22:16:23 -02:30
Shaleen Bathla
a7391a1461
* kubelet.service: use standard permissions systemd[1]: Configuration file /etc/systemd/system/kubelet.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway. * crio.service: reduce execute permission systemd[1]: Configuration file /etc/systemd/system/crio.service is marked executable. Please remove executable permission bits. Proceeding anyway.
56 lines
1.4 KiB
YAML
56 lines
1.4 KiB
YAML
---
|
|
- name: Set kubelet api version to v1beta1
|
|
set_fact:
|
|
kubeletConfig_api_version: v1beta1
|
|
tags:
|
|
- kubelet
|
|
- kubeadm
|
|
|
|
- name: Write kubelet environment config file (kubeadm)
|
|
template:
|
|
src: "kubelet.env.{{ kubeletConfig_api_version }}.j2"
|
|
dest: "{{ kube_config_dir }}/kubelet.env"
|
|
setype: "{{ (preinstall_selinux_state != 'disabled') | ternary('etc_t', omit) }}"
|
|
backup: true
|
|
mode: "0600"
|
|
notify: Node | restart kubelet
|
|
tags:
|
|
- kubelet
|
|
- kubeadm
|
|
|
|
- name: Write kubelet config file
|
|
template:
|
|
src: "kubelet-config.{{ kubeletConfig_api_version }}.yaml.j2"
|
|
dest: "{{ kube_config_dir }}/kubelet-config.yaml"
|
|
mode: "0600"
|
|
notify: Kubelet | restart kubelet
|
|
tags:
|
|
- kubelet
|
|
- kubeadm
|
|
|
|
- name: Write kubelet systemd init file
|
|
template:
|
|
src: "kubelet.service.j2"
|
|
dest: "/etc/systemd/system/kubelet.service"
|
|
backup: true
|
|
mode: "0644"
|
|
validate: "sh -c '[ -f /usr/bin/systemd/system/factory-reset.target ] || exit 0 && systemd-analyze verify %s:kubelet.service'"
|
|
# FIXME: check that systemd version >= 250 (factory-reset.target was introduced in that release)
|
|
# Remove once we drop support for systemd < 250
|
|
notify: Node | restart kubelet
|
|
tags:
|
|
- kubelet
|
|
- kubeadm
|
|
|
|
- name: Flush_handlers and reload-systemd
|
|
meta: flush_handlers
|
|
|
|
- name: Enable kubelet
|
|
service:
|
|
name: kubelet
|
|
enabled: true
|
|
state: started
|
|
tags:
|
|
- kubelet
|
|
notify: Kubelet | restart kubelet
|