okd/roles/openshift_node/tasks/upgrade.yml

---
# input variables:
# - l_docker_upgrade
# - openshift_is_atomic
# - node_config_hook
# - openshift_pkg_version
# - openshift_release

# tasks file for openshift_node_upgrade

- name: stop services for upgrade
  import_tasks: upgrade/stop_services.yml

# Ensure actually install latest package.
- name: install docker upgrade rpm
  command: "{{ ansible_pkg_mgr }} install -y docker{{ '-' + docker_version }}"
  register: result
  until: result is succeeded
  when:
  - l_docker_upgrade is defined
  - l_docker_upgrade | bool

- name: Ensure cri-o is updated
  package:
    name: "{{ crio_pkgs | join (',') }}"
    state: latest
  when:
  - openshift_use_crio | bool
  register: crio_update
  vars:
    crio_pkgs:
    - "cri-o"
    - "cri-tools"

- name: Remove CRI-O default configuration files
  file:
    path: "{{ item }}"
    state: absent
  with_items:
  - "/etc/cni/net.d/200-loopback.conf"
  - "/etc/cni/net.d/100-crio-bridge.conf"
  when: crio_update is changed

- name: Ensure crictl.yaml runtime-endpoint is updated
  yedit:
    src: /etc/crictl.yaml
    key: runtime-endpoint
    value: "{{ openshift_crio_var_sock }}"
  when:
  - openshift_use_crio | default(False) | bool

- name: install pre-pulled rpms.
  import_tasks: upgrade/rpm_upgrade_install.yml
  when: not openshift_is_atomic | bool

- include_tasks: "{{ node_config_hook }}"
  when: node_config_hook is defined

- import_tasks: upgrade/config_changes.yml

- import_tasks: dnsmasq_install.yml
- import_tasks: dnsmasq.yml

# Restart all services
- import_tasks: upgrade/restart.yml

- name: Approve node certificates when bootstrapping
  oc_adm_csr:
    nodes: "{{ openshift.node.nodename | lower }}"
    timeout: 180
    fail_on_timeout: true
  delegate_to: "{{ groups.oo_first_master.0 }}"
  ignore_errors: true

- name: Wait for node to be ready
  oc_obj:
    state: list
    kind: node
    name: "{{ openshift.node.nodename | lower }}"
  register: node_output
  delegate_to: "{{ groups.oo_first_master.0 }}"
  until:
  - node_output.results is defined
  - node_output.results.returncode is defined
  - node_output.results.returncode == 0
  - node_output.results.results is defined
  - node_output.results.results | length  > 0
  - node_output.results.results[0].status is defined
  - node_output.results.results[0].status.conditions is defined
  - node_output.results.results[0].status.conditions | selectattr('type', 'match', '^Ready$') | map(attribute='status') | join | bool == True
  # Give the node three minutes to come back online.
  retries: 36
  delay: 5

- import_tasks: journald.yml

- meta: flush_handlers