blob: abdbcf8d6630526cf923098734854dc87b4f1b06 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
|
---
- include: ../../../roles/etcd_client_certificates/tasks/main.yml
vars:
etcd_cert_prefix: calico.etcd-
etcd_cert_config_dir: "{{ openshift.common.config_base }}/calico"
embedded_etcd: "{{ hostvars[groups.oo_first_master.0].openshift.master.embedded_etcd }}"
etcd_ca_host: "{{ groups.oo_etcd_to_config.0 }}"
etcd_cert_subdir: "openshift-calico-{{ openshift.common.hostname }}"
- name: Assure the calico certs have been generated
stat:
path: "{{ item }}"
with_items:
- "{{ calico_etcd_ca_cert_file }}"
- "{{ calico_etcd_cert_file}}"
- "{{ calico_etcd_key_file }}"
- name: Configure Calico service unit file
template:
dest: "/lib/systemd/system/calico.service"
src: calico.service.j2
- name: Enable calico
become: yes
systemd:
name: calico
daemon_reload: yes
state: started
enabled: yes
register: start_result
- name: Assure CNI conf dir exists
become: yes
file: path="{{ cni_conf_dir }}" state=directory
- name: Generate Calico CNI config
become: yes
template:
src: "calico.conf.j2"
dest: "{{ cni_conf_dir }}/10-calico.conf"
- name: Assures Kuberentes CNI bin dir exists
become: yes
file: path="{{ cni_bin_dir }}" state=directory
- name: Download Calico CNI Plugin
become: yes
get_url:
url: "{{ calico_url_cni }}"
dest: "{{ cni_bin_dir }}"
mode: a+x
- name: Download Calico IPAM Plugin
become: yes
get_url:
url: "{{ calico_url_ipam }}"
dest: "{{ cni_bin_dir }}"
mode: a+x
- name: Download and unzip standard CNI plugins
become: yes
unarchive:
remote_src: True
src: "{{ cni_url }}"
dest: "{{ cni_bin_dir }}"
- name: Assure Calico conf dir exists
become: yes
file: path=/etc/calico/ state=directory
- name: Set calicoctl.cfg
template:
src: calico.cfg.j2
dest: "/etc/calico/calicoctl.cfg"
|
