githubixx / ansible-role-etcd Goto Github PK

TASK [githubixx.etcd : Copy certificates] *******************************************************************************************************
An exception occurred during task execution. To see the full traceback, use -vvv. The error was: If you are using a module and expect the file to exist on the remote, see the remote_src option
failed: [patroni1] (item=ca-etcd.pem) => {
    "changed": false, 
    "item": "ca-etcd.pem"
}

MSG:

Could not find or access '/home/user/k8s/certs/ca-etcd.pem' on the Ansible Controller.
If you are using a module and expect the file to exist on the remote, see the remote_src option

- hosts: etcd
  roles:
    - githubixx.etcd

[defaults]
inventory = hosts
remote_user = user
host_key_checking = False
stdout_callback=debug
log_path=logfile

cat hosts 
[etcd]
patroni1 ansible_host=192.168.88.197
patroni2 ansible_host=192.168.88.196
patroni3 ansible_host=192.168.88.195

Mar 21 12:45:10 node-1.example.local etcd[7198]: etcd --config-file
Mar 21 12:45:10 node-1.example.local etcd[7198]: path to the server configuration file
Mar 21 12:45:10 node-1.example.local etcd[7198]: etcd gateway
Mar 21 12:45:10 node-1.example.local etcd[7198]: run the stateless pass-through etcd TCP connection forwarding proxy
Mar 21 12:45:10 node-1.example.local etcd[7198]: etcd grpc-proxy
Mar 21 12:45:10 node-1.example.local etcd[7198]: run the stateless etcd v3 gRPC L7 reverse proxy
Mar 21 12:45:10 node-1.example.local systemd[1]: etcd.service: main process exited, code=exited, status=2/INVALIDARGUMENT
Mar 21 12:45:10 node-1.example.local systemd[1]: Failed to start etcd.
Mar 21 12:45:10 node-1.example.local systemd[1]: Unit etcd.service entered failed state.
Mar 21 12:45:10 node-1.example.local systemd[1]: etcd.service failed.

systemctl cat etcd
# /etc/systemd/system/etcd.service
[Unit]
Description=etcd
Documentation=https://github.com/coreos

[Service]
ExecStart=/usr/local/bin/etcd \
  --advertise-client-urls="https://192.168.50.101:2379" \
  --auto-compaction-retention="0" \
  --cert-file="/etc/etcd/cert.pem" \
  --client-cert-auth="true" \
  --cors="" \
  --data-dir="/var/lib/etcd" \
  --election-timeout="1000" \
  --heartbeat-interval="100" \
  --initial-advertise-peer-urls="https://192.168.50.101:2380" \
  --initial-cluster="node-1=https://192.168.50.101:2380,node-2=https://192.168.50.102:2380" \
  --initial-cluster-state="new" \
  --initial-cluster-token="etcd-cluster-0" \
  --key-file="/etc/etcd/private.pem" \
  --listen-client-urls="https://192.168.50.101:2379,https://127.0.0.1:2379" \
  --listen-peer-urls="https://192.168.50.101:2380" \
  --log-output="default" \
  --log-package-levels="" \
  --max-snapshots="5" \
  --max-wals="5" \
  --name="node-1" \
  --peer-cert-file="/etc/etcd/cert.pem" \
  --peer-client-cert-auth="true" \
  --peer-key-file="/etc/etcd/private.pem" \
  --peer-trusted-ca-file="/etc/etcd/cert.pem" \
  --quota-backend-bytes="0" \
  --snapshot-count="100000" \
  --trusted-ca-file="/etc/etcd/cert.pem" \
  --wal-dir="" 
Restart=on-failure
RestartSec=5
Type=notify

- name: Downloading official etcd release
  get_url:
    url: https://github.com/coreos/etcd/releases/download/v{{etcd_version}}/etcd-v{{etcd_version}}-linux-amd64.tar.gz
    dest: "{{etcd_download_dir}}"
    mode: 0755
  tags:
    - etcd

    dest: "{{etcd_download_dir}}/etcd-v{{etcd_version}}-linux-amd64.tar.gz"

- name: Unzip downloaded file
  unarchive:
    src: "{{etcd_download_dir}}/etcd-v{{etcd_version}}-linux-amd64.tar.gz"
    dest: "{{etcd_download_dir}}/"
    remote_src: yes
    creates: "{{etcd_download_dir}}/etcd-v{{etcd_version}}-linux-amd64/etcd"
  tags:
    - etcd

An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AnsibleFileNotFound: Could not find or access '/etc/cfssl/ca-etcd.pem'
failed: [k8s-node-1.my-host.com] (item=ca-etcd.pem) => {"changed": false, "item": "ca-etcd.pem", "msg": "Could not find or access '/etc/cfssl/ca-etcd.pem'"}

k8s_ca_conf_directory: "{{ '~/.k8s/certs' | expanduser }}"