kubespray/roles/kubernetes/node/tasks/config.yml

---
- name: Get the node token values
  slurp:
    src: "{{ kube_token_dir }}/{{ item }}-{{ inventory_hostname }}.token"
  with_items:
    - "system:kubelet"
    - "system:proxy"
  register: tokens
  run_once: true
  delegate_to: "{{ groups['kube-master'][0] }}"

- name: Set token facts
  set_fact:
    kubelet_token: "{{ tokens.results[0].content|b64decode }}"
    proxy_token: "{{ tokens.results[1].content|b64decode }}"

- name: Create kubelet environment vars dir
  file: path=/etc/systemd/system/kubelet.service.d state=directory

- name: Write kubelet config file
  template: src=kubelet.j2 dest=/etc/systemd/system/kubelet.service.d/10-kubelet.conf backup=yes
  notify:
    - restart kubelet

- name: write the kubecfg (auth) file for kubelet
  template: src=kubelet.kubeconfig.j2 dest={{ kube_config_dir }}/kubelet.kubeconfig backup=yes
  notify:
    - restart kubelet

- name: Create proxy environment vars dir
  file: path=/etc/systemd/system/kube-proxy.service.d state=directory

- name: Write proxy config file
  template: src=proxy.j2 dest=/etc/systemd/system/kube-proxy.service.d/10-proxy-cluster.conf backup=yes
  notify:
    - restart proxy

- name: write the kubecfg (auth) file for kube-proxy
  template: src=proxy.kubeconfig.j2 dest={{ kube_config_dir }}/proxy.kubeconfig backup=yes
  notify:
    - restart proxy

- name: Enable kubelet
  service:
    name: kubelet
    enabled: yes
    state: started

- name: Enable proxy
  service:
    name: kube-proxy
    enabled: yes
    state: started