Update to 1.23.4 release of kubernetes

[bryfry]

https://twitter.com/puerco/status/1392619505092808704
May 2021 will be the last Kubernetes 1.18 patch

Assigning to @sfeeser for priority and re-assignment

[sgriffith3]

I started working on this today. I made changes to the versions required: 6db7663 and now am in the testing phase.

The playbook got to here:

TASK [rbac : Copy rbac cluster-role to masters] *****************************************************************************************************************************************************************************
changed: [localhost]                                                                                                                                                                                                         
                                                                                                                                                                                                                             
TASK [rbac : Apply the RBAC rules] ******************************************************************************************************************************************************************************************
fatal: [localhost]: FAILED! => {"changed": true, "cmd": "kubectl apply -f /home/student/k8s-config/rbac-clusterrole.yaml", "delta": "0:00:10.108401", "end": "2021-06-29 17:00:21.049750", "msg": "non-zero return code", "rc
": 1, "start": "2021-06-29 17:00:10.941349", "stderr": "Error from server (InternalError): an error on the server (\"\") has prevented the request from succeeding", "stderr_lines": ["Error from server (InternalError): an 
error on the server (\"\") has prevented the request from succeeding"], "stdout": "", "stdout_lines": []}         

This then led me to look at the master services. SSH-ing to master 1 and looking at the kube-apiserver I saw:

● kube-apiserver.service - Kubernetes API Server
   Loaded: loaded (/etc/systemd/system/kube-apiserver.service; enabled; vendor preset: enabled)
   Active: activating (auto-restart) (Result: exit-code) since Tue 2021-06-29 18:27:29 UTC; 2s ago
     Docs: https://github.com/kubernetes/kubernetes
  Process: 24846 ExecStart=/usr/local/bin/kube-apiserver --advertise-address=10.11.105.45 --allow-privileged=true --apiserver-count=3 --audit-log-maxage=30 --audit-log-maxbackup=3 --audit-log-maxsize=100 --audit-log-path=
 Main PID: 24846 (code=exited, status=1/FAILURE)

Jun 29 18:27:29 master-1 kube-apiserver[24846]: I0629 18:27:29.736103   24846 flags.go:59] FLAG: --tls-private-key-file="/var/lib/kubernetes/kubernetes-key.pem"
Jun 29 18:27:29 master-1 kube-apiserver[24846]: I0629 18:27:29.736110   24846 flags.go:59] FLAG: --tls-sni-cert-key="[]"
Jun 29 18:27:29 master-1 kube-apiserver[24846]: I0629 18:27:29.736120   24846 flags.go:59] FLAG: --token-auth-file=""
Jun 29 18:27:29 master-1 kube-apiserver[24846]: I0629 18:27:29.736127   24846 flags.go:59] FLAG: --v="2"
Jun 29 18:27:29 master-1 kube-apiserver[24846]: I0629 18:27:29.736134   24846 flags.go:59] FLAG: --version="false"
Jun 29 18:27:29 master-1 kube-apiserver[24846]: I0629 18:27:29.736144   24846 flags.go:59] FLAG: --vmodule=""
Jun 29 18:27:29 master-1 kube-apiserver[24846]: I0629 18:27:29.736157   24846 flags.go:59] FLAG: --watch-cache="true"
Jun 29 18:27:29 master-1 kube-apiserver[24846]: I0629 18:27:29.736165   24846 flags.go:59] FLAG: --watch-cache-sizes="[]"
Jun 29 18:27:29 master-1 kube-apiserver[24846]: I0629 18:27:29.736204   24846 server.go:629] external host was not specified, using 10.11.105.45
Jun 29 18:27:29 master-1 kube-apiserver[24846]: Error: [service-account-issuer is a required flag, --service-account-signing-key-file and --service-account-issuer are required flags]

I will attempt to figure out those three flags and see what needs done with those next.

[bryfry]

These versions also need updated:

• calico v3.19.1
• cfssl 1.6.0

[bryfry]

@seaneon 1.23.4 branch is ready for testing

[seaneon]

up through lab 12 works so far on branch

[seaneon]

Up to lab 18 is working with these changes.