Dell-Omnia-Clusters-HPC-AI/kubernetes/roles/startmanager/tasks/main.yml

#  Copyright 2020 Dell Inc. or its subsidiaries. All Rights Reserved.
#
#  Licensed under the Apache License, Version 2.0 (the "License");
#  you may not use this file except in compliance with the License.
#  You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
#  Unless required by applicable law or agreed to in writing, software
#  distributed under the License is distributed on an "AS IS" BASIS,
#  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#  See the License for the specific language governing permissions and
#  limitations under the License.
---

- name: Disable swap (if not already disabled)
  command: /usr/sbin/swapoff -a
  changed_when: true
  tags: init

- name: Start and enable docker service
  systemd:
    name: docker
    state: started
    enabled: yes
    daemon_reload: yes
  tags: docker

- name: Initialize kubeadm
  command: "/bin/kubeadm init --pod-network-cidr='{{ pod_network_cidr_ip }}' --apiserver-advertise-address='{{ manager_ip }}'"
  changed_when: true
  register: init_output
  tags: init

- name: Setup directory for Kubernetes environment for root
  file:
    path: "{{ k8s_root_directory }}"
    state: directory
    mode: "{{ k8s_root_directory_mode }}"
  tags: init

- name: Copy Kubernetes config for root
  copy:
    src: "{{ k8s_config_src }}"
    dest: "{{ k8s_config_dest }}"
    owner: root
    group: root
    mode: "{{ k8s_config_file_mode }}"
    remote_src: yes
  tags: init

- name: Update the kubernetes config file permissions
  shell: "chown $(id -u):$(id -g) '{{ k8s_config_dest }}'"
  args:
    warn: false
  changed_when: true
  tags: init

- name: Cluster token
  shell: >
    set -o pipefail && \
      kubeadm token list | cut -d ' ' -f1 | sed -n '2p'
  changed_when: false
  register: K8S_TOKEN
  tags: init

- name: CA Hash
  shell: >
    set -o pipefail && \
      openssl x509 -pubkey -in {{ k8s_cert_path }} | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex | sed 's/^.* //'
  changed_when: false
  register: K8S_MANAGER_CA_HASH
  tags: init

- name: Add K8S Manager IP, Token, and Hash to dummy host
  add_host:
    name:   "K8S_TOKEN_HOLDER"
    token:  "{{ K8S_TOKEN.stdout }}"
    hash:   "{{ K8S_MANAGER_CA_HASH.stdout }}"
    ip:     "{{ manager_ip }}"
  tags: init

- name: Print k8s token
  debug:
    msg: "[Manager] K8S_TOKEN_HOLDER K8S token is {{ hostvars['K8S_TOKEN_HOLDER']['token'] }}"
    verbosity: 2
  tags: init

- name: Print k8s hash
  debug:
    msg: "[Manager] K8S_TOKEN_HOLDER K8S Hash is  {{ hostvars['K8S_TOKEN_HOLDER']['hash'] }}"
    verbosity: 2
  tags: init

- name: Print k8s manager_ip
  debug:
    msg: "[Manager] K8S_MANAGER_IP is  {{ manager_ip }}"
    verbosity: 2
  tags: init

- name: Setup Calico SDN network
  command: "kubectl apply -f '{{ calico_yml_url }}'"
  when: k8s_cni == "calico"
  tags: init

- name: Setup Flannel SDN network
  command: "kubectl apply -f '{{ flannel_yml_url }}'"
  when: k8s_cni == "flannel"
  tags: init

- name: Create yaml repo for setup
  file:
    path: "{{ yaml_repo_dir_path }}"
    state: directory
    mode: "{{ yaml_repo_dir_mode }}"
  tags: init

- name: Create service account (K8s dashboard) files
  copy:
    src: create_admin_user.yaml
    dest: "{{ k8s_service_account_file_dest }}"
    owner: root
    group: root
    mode: "{{ k8s_service_account_file_mode }}"
  tags: init

- name: Create service account (K8s dashboard)
  command: "kubectl create -f '{{ k8s_service_account_file_dest }}'"
  changed_when: true
  tags: init

- name: Create clusterRoleBinding (K8s dashboard) files
  copy:
    src: create_clusterRoleBinding.yaml
    dest: "{{ k8s_clusterRoleBinding_file_dest }}"
    owner: root
    group: root
    mode: "{{ k8s_clusterRoleBinding_file_mode }}"
  tags: init

- name: Create clusterRoleBinding (K8s dashboard)
  command: "kubectl create -f '{{ k8s_clusterRoleBinding_file_dest }}'"
  changed_when: true
  tags: init

- name: Dump bearer token for K8s dashboard login
  shell: >
    set -o pipefail && \
      kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep admin-user | awk '{print $1}') > /root/k8s/token
  changed_when: true
  tags: init

- name: Edge / Workstation Install allows pods to scheudle on manager
  command: kubectl taint nodes --all node-role.kubernetes.io/master-
  when: single_node
  tags: init