wire-server-deploy
wire-server-deploy copied to clipboard
Bump ansible, kubespray
This bumps ansible to the latest supported version in nixpkgs (2.12)
We still need to check https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_4.html and all our playbooks, if any need changes.
So, it seems the error from CI:
fatal: [upward-hare-restund-1]: FAILED! => {"after": ["3B4FE6ACC0B21F32", "D94AA3F0EFE21092", "871920D1991BC93C"], "before": ["3B4FE6ACC0B21F32", "D94AA3F0EFE21092", "871920D1991BC93C"], "changed": true, "fp": "FD591E349AA74E75", "id": "FD591E349AA74E75", "key_id": "FD591E349AA74E75", "msg": "apt-key did not return an error, but failed to add the key (check that the id is correct and not a subkey)", "short_id": "9AA74E75"}
Did hide the fact apt-key
was failing on actually expired keys (and we use a key stored in GH Actions, not create an ephemeral one).
The key got renewed, and the comments around that updated, let's check CI again.
Now CI is sucessfully bootstrapping the cluster, but failing here:
TASK [kubernetes-apps/ansible : Kubernetes Apps | Register coredns deployment annotation `createdby`] ***
skipping: [known-dogfish-kubenode-1]
skipping: [known-dogfish-kubenode-2]
fatal: [known-dogfish-kubenode-0]: FAILED! => {"changed": false, "cmd": "/usr/local/bin/kubectl get deploy -n kube-system coredns -o jsonpath='{ .spec.template.metadata.annotations.createdby }'", "delta": "0:00:00.142188", "end": "2022-06-13 17:45:58.007179", "msg": "non-zero return code", "rc": 1, "start": "2022-06-13 17:45:57.864991", "stderr": "Error from server (NotFound): deployments.apps \"coredns\" not found", "stderr_lines": ["Error from server (NotFound): deployments.apps \"coredns\" not found"], "stdout": "", "stdout_lines": []}
...ignoring
TASK [kubernetes-apps/ansible : Kubernetes Apps | Delete kubeadm CoreDNS] ******
skipping: [known-dogfish-kubenode-1]
skipping: [known-dogfish-kubenode-2]
ok: [known-dogfish-kubenode-0]
TASK [kubernetes-apps/ansible : Kubernetes Apps | Delete kubeadm Kube-DNS service] ***
skipping: [known-dogfish-kubenode-1]
skipping: [known-dogfish-kubenode-2]
ok: [known-dogfish-kubenode-0]
ERROR! 'item' is undefined
I'm not entirely sure why deployments.apps "coredns"
can't be found. I'm suspecting that's fixed by https://github.com/kubernetes-sigs/kubespray/pull/8565/commits/685c284e26def2c683d1da035716dd9c22d51a0e, so I'll try cherry-picking that in.
Cherry-picking various kubespray commits is not gonna fly.
We need to update kubespray (and update our offline bundle to include the updated dependencies of kubespray).
I updated this PR to just bump kubespray to the latest release, (and use git submodule
again).
This needs to be rebased, and once https://github.com/wireapp/wire-server-deploy/pull/583 is merged, the revert of it added to this PR.
This has been heavily superceeded, thankfully. closing.