micqdf
1156dc0203
The primary control plane was stalling because kubelet still had to pull both the Rancher pause image and the kube-vip image before the DaemonSet pod could become Ready. Pre-pull those images into containerd, extend the readiness wait, and emit pod diagnostics if kube-vip still does not come up.
66 lines
2.0 KiB
YAML
66 lines
2.0 KiB
YAML
---
|
|
- name: Pre-pull kube-vip bootstrap images into containerd
|
|
command: /usr/local/bin/ctr -n k8s.io images pull {{ item }}
|
|
register: kube_vip_image_pull
|
|
retries: 12
|
|
delay: 15
|
|
until: kube_vip_image_pull.rc == 0
|
|
loop: "{{ kube_vip_prepull_images }}"
|
|
changed_when: true
|
|
|
|
- name: Render kube-vip control plane manifest
|
|
template:
|
|
src: kube-vip-control-plane.yaml.j2
|
|
dest: /tmp/kube-vip-control-plane.yaml
|
|
mode: "0644"
|
|
|
|
- name: Apply kube-vip control plane manifest
|
|
command: kubectl apply -f /tmp/kube-vip-control-plane.yaml
|
|
changed_when: true
|
|
|
|
- name: Wait for local kube-vip pod to be ready
|
|
shell: >-
|
|
kubectl -n kube-system get pods
|
|
-l app.kubernetes.io/name=kube-vip
|
|
--field-selector spec.nodeName={{ inventory_hostname }}
|
|
-o jsonpath='{.items[0].status.conditions[?(@.type=="Ready")].status}'
|
|
register: kube_vip_pod_ready
|
|
changed_when: false
|
|
until: kube_vip_pod_ready.stdout == "True"
|
|
retries: 30
|
|
delay: 10
|
|
|
|
- name: Show kube-vip pod status on failure
|
|
command: kubectl -n kube-system get pods -l app.kubernetes.io/name=kube-vip -o wide
|
|
register: kube_vip_pods
|
|
changed_when: false
|
|
failed_when: false
|
|
when: kube_vip_pod_ready is failed
|
|
|
|
- name: Describe kube-vip pod on failure
|
|
shell: >-
|
|
kubectl -n kube-system describe pod
|
|
$(kubectl -n kube-system get pods -l app.kubernetes.io/name=kube-vip --field-selector spec.nodeName={{ inventory_hostname }} -o jsonpath='{.items[0].metadata.name}')
|
|
register: kube_vip_pod_describe
|
|
changed_when: false
|
|
failed_when: false
|
|
when: kube_vip_pod_ready is failed
|
|
|
|
- name: Fail with kube-vip diagnostics
|
|
fail:
|
|
msg: |
|
|
kube-vip failed to become ready on {{ inventory_hostname }}.
|
|
Pods:
|
|
{{ kube_vip_pods.stdout | default('n/a') }}
|
|
|
|
Describe:
|
|
{{ kube_vip_pod_describe.stdout | default('n/a') }}
|
|
when: kube_vip_pod_ready is failed
|
|
|
|
- name: Wait for API VIP on 6443
|
|
wait_for:
|
|
host: "{{ kube_vip_address }}"
|
|
port: 6443
|
|
state: started
|
|
timeout: 180
|