kubespray/roles/etcd/tasks/main.yml

---
- include: pre_upgrade.yml
  when: etcd_cluster_setup
  tags: etcd-pre-upgrade

- include: check_certs.yml
  when: cert_management == "script"
  tags: [etcd-secrets, facts]

- include: gen_certs_script.yml
  when: cert_management == "script"
  tags: etcd-secrets

- include: sync_etcd_master_certs.yml
  when: cert_management == "vault" and inventory_hostname in groups.etcd
  tags: etcd-secrets

- include: sync_etcd_node_certs.yml
  when: cert_management == "vault" and inventory_hostname in etcd_node_cert_hosts 
  tags: etcd-secrets

- include: gen_certs_vault.yml
  when: cert_management == "vault" and (etcd_master_certs_needed|d() or etcd_node_certs_needed|d())
  tags: etcd-secrets

- include: "install_{{ etcd_deployment_type }}.yml"
  when: is_etcd_master
  tags: upgrade

- include: set_cluster_health.yml
  when: is_etcd_master and etcd_cluster_setup

- include: configure.yml
  when: is_etcd_master and etcd_cluster_setup

- include: refresh_config.yml
  when: is_etcd_master and etcd_cluster_setup

- name: Restart etcd if certs changed
  command: /bin/true
  notify: restart etcd
  when: is_etcd_master and etcd_secret_changed|default(false)

# reload-systemd
- meta: flush_handlers

- name: Ensure etcd is running
  service:
    name: etcd
    state: started
    enabled: yes
  when: is_etcd_master and etcd_cluster_setup

# After etcd cluster is assembled, make sure that
# initial state of the cluster is in `existing`
# state insted of `new`.
- include: set_cluster_health.yml
  when: is_etcd_master and etcd_cluster_setup

- include: refresh_config.yml
  when: is_etcd_master and etcd_cluster_setup