bloomberg/kubernetes-cluster-cookbook

#
# Cookbook: kubernetes-cluster
# License: Apache 2.0
#
# Copyright 2015-2016, Bloomberg Finance L.P.
#

node.tag('kubernetes.master')

include_recipe 'kubernetes-cluster::default'

case node['platform']
when 'redhat', 'centos', 'fedora'
  yum_package "cockpit #{node['kubernetes_cluster']['package']['cockpit']['version']}" do
    only_if { node['kubernetes_cluster']['package']['cockpit']['enabled'] }
  end
  yum_package "etcd #{node['kubernetes_cluster']['package']['etcd']['version']}"
  yum_package "kubernetes-master #{node['kubernetes_cluster']['package']['kubernetes_master']['version']}"
end

group 'kube-services' do
  members %w(etcd kube)
  action :modify
end

directory '/etc/kubernetes/inactive-manifests' do
  owner 'root'
  group 'kube-services'
  mode '0770'
end

directory '/etc/kubernetes/manifests' do
  owner 'root'
  group 'kube-services'
  mode '0770'
end

if node['kubernetes']['secure']['enabled'] == 'true'
  file 'kubernetes::master[client.ca.crt]' do
    path "#{node['kubernetes']['secure']['directory']}/client.ca.crt"
    content node['kubernetes']['etcd']['client']['ca']
    owner 'root'
    group 'kube-services'
    mode '0770'
    sensitive true
  end
  file "#{node['kubernetes']['secure']['directory']}/client.srv.crt" do
    content node['kubernetes']['etcd']['peer']['cert']
    owner 'root'
    group 'kube-services'
    mode '0770'
    sensitive true
  end
  file "#{node['kubernetes']['secure']['directory']}/client.srv.key" do
    content node['kubernetes']['etcd']['peer']['key']
    owner 'root'
    group 'kube-services'
    mode '0770'
    sensitive true
  end
  file "#{node['kubernetes']['secure']['directory']}/peer.ca.crt" do
    content node['kubernetes']['etcd']['peer']['ca']
    owner 'root'
    group 'kube-services'
    mode '0770'
    sensitive true
  end
  file "#{node['kubernetes']['secure']['directory']}/peer.srv.crt" do
    content node['kubernetes']['etcd']['peer']['cert']
    owner 'root'
    group 'kube-services'
    mode '0770'
    sensitive true
  end
  file "#{node['kubernetes']['secure']['directory']}/peer.srv.key" do
    content node['kubernetes']['etcd']['peer']['key']
    owner 'root'
    group 'kube-services'
    mode '0770'
    sensitive true
  end
end

include_recipe 'kubernetes-cluster::etcd'
include_recipe 'kubernetes-cluster::kubernetes'
include_recipe 'kubernetes-cluster::kube-apiserver'
include_recipe 'kubernetes-cluster::network'
include_recipe 'kubernetes-cluster::docker'
include_recipe 'kubernetes-cluster::flanneld'
include_recipe 'kubernetes-cluster::kubelet'
include_recipe 'kubernetes-cluster::kube-controller'
include_recipe 'kubernetes-cluster::kube-scheduler'
include_recipe 'kubernetes-cluster::podmaster'