diff --git a/roles/bootstrap-os/tasks/bootstrap-coreos.yml b/roles/bootstrap-os/tasks/bootstrap-coreos.yml index 1307e0ad7918c9c3cee5f849c2a73cf261d75735..9ef440e5996b8026987eb11df69cc8ae125dfea6 100644 --- a/roles/bootstrap-os/tasks/bootstrap-coreos.yml +++ b/roles/bootstrap-os/tasks/bootstrap-coreos.yml @@ -18,6 +18,7 @@ register: need_pip failed_when: false changed_when: false + check_mode: no when: (need_bootstrap | failed) tags: facts @@ -45,6 +46,7 @@ - name: Check configured hostname shell: hostname register: configured_hostname + check_mode: no - name: Assign inventory name to unconfigured hostnames shell: sh -c "echo \"{{inventory_hostname}}\" > /etc/hostname; hostname \"{{inventory_hostname}}\"" diff --git a/roles/docker/tasks/set_facts_dns.yml b/roles/docker/tasks/set_facts_dns.yml index 03cd987d7b9ada854b2709b3325099bbe04d6a59..2f629802f7e930c30597e8b4c51a0557d75703aa 100644 --- a/roles/docker/tasks/set_facts_dns.yml +++ b/roles/docker/tasks/set_facts_dns.yml @@ -32,11 +32,13 @@ shell: grep "^nameserver" /etc/resolv.conf | sed 's/^nameserver\s*//' changed_when: False register: system_nameservers + check_mode: no - name: check system search domains shell: grep "^search" /etc/resolv.conf | sed 's/^search\s*//' changed_when: False register: system_search_domains + check_mode: no - name: add system nameservers to docker options set_fact: diff --git a/roles/download/tasks/set_docker_image_facts.yml b/roles/download/tasks/set_docker_image_facts.yml index 2626780c918aab84697c71b8735da42f3f593dec..6fe4af4405e1a828cf6e7f13a7b08dee734c94c2 100644 --- a/roles/download/tasks/set_docker_image_facts.yml +++ b/roles/download/tasks/set_docker_image_facts.yml @@ -12,6 +12,7 @@ {{ docker_bin_dir }}/docker images -q | xargs {{ docker_bin_dir }}/docker inspect -f "{{ '{{' }} .RepoTags {{ '}}' }},{{ '{{' }} .RepoDigests {{ '}}' }}" register: docker_images_raw failed_when: false + check_mode: no when: not download_always_pull|bool - set_fact: docker_images="{{docker_images_raw.stdout|regex_replace('\[|\]|\\n]','')|regex_replace('\s',',')}}" diff --git a/roles/etcd/tasks/configure.yml b/roles/etcd/tasks/configure.yml index 535874060b6be1af77106b703a9ad22919c237ff..633b1d6024d71a05a32ba5e3b0ad445cc1046d8f 100644 --- a/roles/etcd/tasks/configure.yml +++ b/roles/etcd/tasks/configure.yml @@ -4,6 +4,7 @@ register: etcd_member_in_cluster failed_when: false changed_when: false + check_mode: no when: is_etcd_master tags: facts diff --git a/roles/etcd/tasks/gen_certs_script.yml b/roles/etcd/tasks/gen_certs_script.yml index a4fd3a9d79eccb0cc502f34bafb68420761fe3c0..73d1ed768c7881a95a4e7b36d6a1e81f8aa24567 100644 --- a/roles/etcd/tasks/gen_certs_script.yml +++ b/roles/etcd/tasks/gen_certs_script.yml @@ -87,6 +87,7 @@ args: executable: /bin/bash register: etcd_master_cert_data + check_mode: no delegate_to: "{{groups['etcd'][0]}}" when: inventory_hostname in groups['etcd'] and sync_certs|default(false) and inventory_hostname != groups['etcd'][0] @@ -97,6 +98,7 @@ args: executable: /bin/bash register: etcd_node_cert_data + check_mode: no delegate_to: "{{groups['etcd'][0]}}" when: (('calico-rr' in groups and inventory_hostname in groups['calico-rr']) or inventory_hostname in groups['k8s-cluster']) and diff --git a/roles/etcd/tasks/set_cluster_health.yml b/roles/etcd/tasks/set_cluster_health.yml index b99594c995e0f430cd525cc91b576f33cba81a55..cdc87787acbcb3b8fa1f9c7f6e09703eda089dc5 100644 --- a/roles/etcd/tasks/set_cluster_health.yml +++ b/roles/etcd/tasks/set_cluster_health.yml @@ -4,5 +4,6 @@ register: etcd_cluster_is_healthy failed_when: false changed_when: false + check_mode: no when: is_etcd_master tags: facts diff --git a/roles/kubernetes/preinstall/tasks/main.yml b/roles/kubernetes/preinstall/tasks/main.yml index 41a90e29ff0d022cb049202d88d6eeb7124b2a85..f8b4987d66c3e938358e7b7cfb0ca0074d5e6145 100644 --- a/roles/kubernetes/preinstall/tasks/main.yml +++ b/roles/kubernetes/preinstall/tasks/main.yml @@ -108,6 +108,7 @@ shell: rpm -qa | grep epel-release || rpm -ivh {{ epel_rpm_download_url }} when: ansible_distribution in ["CentOS","RedHat"] changed_when: False + check_mode: no tags: bootstrap-os - name: Install packages requirements diff --git a/roles/kubernetes/preinstall/tasks/set_resolv_facts.yml b/roles/kubernetes/preinstall/tasks/set_resolv_facts.yml index 81db5a34e0df1c195532367e14bc1ef7cecedf6f..c2413e89f53496b74a913880781b801c99e5a29a 100644 --- a/roles/kubernetes/preinstall/tasks/set_resolv_facts.yml +++ b/roles/kubernetes/preinstall/tasks/set_resolv_facts.yml @@ -4,6 +4,7 @@ register: resolvconf failed_when: false changed_when: false + check_mode: no - set_fact: resolvconf: >- diff --git a/roles/kubernetes/secrets/tasks/gen_certs_script.yml b/roles/kubernetes/secrets/tasks/gen_certs_script.yml index ebcfb7d816fbe085aa37349d0fdb81a7368bbfb6..80f424576763fe41b80f6f5cfc83db142e046608 100644 --- a/roles/kubernetes/secrets/tasks/gen_certs_script.yml +++ b/roles/kubernetes/secrets/tasks/gen_certs_script.yml @@ -81,6 +81,7 @@ args: executable: /bin/bash register: master_cert_data + check_mode: no delegate_to: "{{groups['kube-master'][0]}}" when: inventory_hostname in groups['kube-master'] and sync_certs|default(false) and inventory_hostname != groups['kube-master'][0] @@ -90,6 +91,7 @@ args: executable: /bin/bash register: node_cert_data + check_mode: no delegate_to: "{{groups['kube-master'][0]}}" when: inventory_hostname in groups['kube-node'] and sync_certs|default(false) and @@ -115,6 +117,7 @@ - name: Gen_certs | Unpack certs on masters shell: "base64 -d < {{ cert_tempfile.stdout }} | tar xz -C {{ kube_cert_dir }}" changed_when: false + check_mode: no when: inventory_hostname in groups['kube-master'] and sync_certs|default(false) and inventory_hostname != groups['kube-master'][0] notify: set secret_changed @@ -131,6 +134,7 @@ args: executable: /bin/bash changed_when: false + check_mode: no when: inventory_hostname in groups['kube-node'] and sync_certs|default(false) and inventory_hostname != groups['kube-master'][0] diff --git a/roles/kubernetes/secrets/tasks/gen_tokens.yml b/roles/kubernetes/secrets/tasks/gen_tokens.yml index dbe35811b7670ae35838406962093aebdbb9bdf6..35a8196ac98168684a909d813264c46d664c8b51 100644 --- a/roles/kubernetes/secrets/tasks/gen_tokens.yml +++ b/roles/kubernetes/secrets/tasks/gen_tokens.yml @@ -40,12 +40,14 @@ shell: "(find {{ kube_token_dir }} -maxdepth 1 -type f)" register: tokens_list changed_when: false + check_mode: no delegate_to: "{{groups['kube-master'][0]}}" when: sync_tokens|default(false) - name: Gen_tokens | Gather tokens shell: "tar cfz - {{ tokens_list.stdout_lines | join(' ') }} | base64 --wrap=0" register: tokens_data + check_mode: no delegate_to: "{{groups['kube-master'][0]}}" run_once: true when: sync_tokens|default(false) diff --git a/roles/network_plugin/flannel/tasks/main.yml b/roles/network_plugin/flannel/tasks/main.yml index 4fb637975420587e0ade8249ba5d529309662b7e..65719999d64312ec74934b6b6664ac6184441151 100644 --- a/roles/network_plugin/flannel/tasks/main.yml +++ b/roles/network_plugin/flannel/tasks/main.yml @@ -42,6 +42,7 @@ shell: cat /run/flannel/subnet.env | awk -F'=' '$1 == "FLANNEL_SUBNET" {print $2}' register: flannel_subnet_output changed_when: false + check_mode: no - set_fact: flannel_subnet: "{{ flannel_subnet_output.stdout }}" @@ -51,6 +52,7 @@ shell: cat /run/flannel/subnet.env | awk -F'=' '$1 == "FLANNEL_MTU" {print $2}' register: flannel_mtu_output changed_when: false + check_mode: no - set_fact: flannel_mtu: "{{ flannel_mtu_output.stdout }}" diff --git a/roles/reset/tasks/main.yml b/roles/reset/tasks/main.yml index 4bc2b2372dfeaf5857606dacb62b133df6164ded..df5e6784ba94992fc1cca9f1b04ff47e3eb03d5b 100644 --- a/roles/reset/tasks/main.yml +++ b/roles/reset/tasks/main.yml @@ -38,6 +38,7 @@ - name: reset | gather mounted kubelet dirs shell: mount | grep /var/lib/kubelet | awk '{print $3}' | tac + check_mode: no register: mounted_dirs - name: reset | unmount kubelet dirs