122 lines
2.7 KiB
Bash
122 lines
2.7 KiB
Bash
|
#!/bin/bash
|
||
|
|
set -eux
|
||
|
|
|
||
|
|
# unset any AWS_DEFAULT_PROFILE as it will break aws-iam-auth
|
||
|
|
unset AWS_DEFAULT_PROFILE
|
||
|
|
|
||
|
|
nodes=$(kubectl get nodes -l node-role.kubernetes.io/control-plane -o json | jq .items[].metadata.name -r)
|
||
|
|
|
||
|
|
for node in $nodes; do
|
||
|
|
echo "Deploying node upgrade job on $node..."
|
||
|
|
|
||
|
|
cat <<'EOF' | sed -e "s/__node__/$node/g" | kubectl apply -f -
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Pod
|
||
|
|
metadata:
|
||
|
|
name: kubezero-upgrade-node-__node__
|
||
|
|
namespace: kube-system
|
||
|
|
labels:
|
||
|
|
app: kubezero-upgrade-node
|
||
|
|
spec:
|
||
|
|
hostNetwork: true
|
||
|
|
containers:
|
||
|
|
- name: kubezero-admin
|
||
|
|
image: public.ecr.aws/zero-downtime/kubezero-admin:v1.21.7
|
||
|
|
imagePullPolicy: Always
|
||
|
|
command: ["kubezero.sh"]
|
||
|
|
args:
|
||
|
|
- node-upgrade
|
||
|
|
env:
|
||
|
|
- name: DEBUG
|
||
|
|
value: "1"
|
||
|
|
- name: NODE_NAME
|
||
|
|
valueFrom:
|
||
|
|
fieldRef:
|
||
|
|
fieldPath: spec.nodeName
|
||
|
|
volumeMounts:
|
||
|
|
- name: host
|
||
|
|
mountPath: /host
|
||
|
|
- name: workdir
|
||
|
|
mountPath: /tmp
|
||
|
|
securityContext:
|
||
|
|
capabilities:
|
||
|
|
add: ["SYS_CHROOT"]
|
||
|
|
volumes:
|
||
|
|
- name: host
|
||
|
|
hostPath:
|
||
|
|
path: /
|
||
|
|
type: Directory
|
||
|
|
- name: workdir
|
||
|
|
emptyDir: {}
|
||
|
|
nodeSelector:
|
||
|
|
kubernetes.io/hostname: __node__
|
||
|
|
tolerations:
|
||
|
|
- key: node-role.kubernetes.io/master
|
||
|
|
effect: NoSchedule
|
||
|
|
restartPolicy: Never
|
||
|
|
EOF
|
||
|
|
kubectl wait pod kubezero-upgrade-node-$node -n kube-system --timeout 120s --for=condition=initialized
|
||
|
|
while true; do
|
||
|
|
kubectl logs kubezero-upgrade-node-$node -n kube-system -f && break
|
||
|
|
sleep 3
|
||
|
|
done
|
||
|
|
kubectl delete pod kubezero-upgrade-node-$node -n kube-system
|
||
|
|
done
|
||
|
|
|
||
|
|
echo "Deploying cluster upgrade job ..."
|
||
|
|
|
||
|
|
cat <<'EOF' | kubectl apply -f -
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Pod
|
||
|
|
metadata:
|
||
|
|
name: kubezero-upgrade-v121
|
||
|
|
namespace: kube-system
|
||
|
|
labels:
|
||
|
|
app: kubezero-upgrade
|
||
|
|
spec:
|
||
|
|
hostNetwork: true
|
||
|
|
#hostIPC: true
|
||
|
|
#hostPID: true
|
||
|
|
containers:
|
||
|
|
- name: kubezero-admin
|
||
|
|
image: public.ecr.aws/zero-downtime/kubezero-admin:v1.21.7
|
||
|
|
imagePullPolicy: Always
|
||
|
|
command: ["kubezero.sh"]
|
||
|
|
args:
|
||
|
|
- upgrade
|
||
|
|
env:
|
||
|
|
- name: DEBUG
|
||
|
|
value: "1"
|
||
|
|
- name: NODE_NAME
|
||
|
|
valueFrom:
|
||
|
|
fieldRef:
|
||
|
|
fieldPath: spec.nodeName
|
||
|
|
volumeMounts:
|
||
|
|
- name: host
|
||
|
|
mountPath: /host
|
||
|
|
- name: workdir
|
||
|
|
mountPath: /tmp
|
||
|
|
securityContext:
|
||
|
|
capabilities:
|
||
|
|
add: ["SYS_CHROOT"]
|
||
|
|
volumes:
|
||
|
|
- name: host
|
||
|
|
hostPath:
|
||
|
|
path: /
|
||
|
|
type: Directory
|
||
|
|
- name: workdir
|
||
|
|
emptyDir: {}
|
||
|
|
nodeSelector:
|
||
|
|
node-role.kubernetes.io/master: ""
|
||
|
|
tolerations:
|
||
|
|
- key: node-role.kubernetes.io/master
|
||
|
|
effect: NoSchedule
|
||
|
|
restartPolicy: Never
|
||
|
|
EOF
|
||
|
|
|
||
|
|
kubectl wait pod kubezero-upgrade-v121 -n kube-system --timeout 120s --for=condition=initialized
|
||
|
|
while true; do
|
||
|
|
kubectl logs kubezero-upgrade-v121 -n kube-system -f && break
|
||
|
|
sleep 3
|
||
|
|
done
|