mrwho
45a7ea0d93
Introduce cert-manager role and a dedicated playbook for automated certificate management setup, complementing the newly restructured uyuni role for comprehensive infrastructure automation.
65 lines
1.6 KiB
YAML
65 lines
1.6 KiB
YAML
---
|
|
- name: Create namespace
|
|
kubernetes.core.k8s:
|
|
api_version: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: "{{ uyuni_namespace }}"
|
|
state: present
|
|
|
|
- name: Create uyuni TLS certificate secret
|
|
kubernetes.core.k8s:
|
|
api_version: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: uyuni-cert
|
|
namespace: "{{ uyuni_namespace }}"
|
|
type: kubernetes.io/tls
|
|
data:
|
|
tls.crt: "{{ uyuni_tls_cert | b64encode }}"
|
|
tls.key: "{{ uyuni_tls_key | b64encode }}"
|
|
state: present
|
|
when: uyuni_tls_cert is defined and uyuni_tls_key is defined
|
|
|
|
- name: Create database TLS certificate secret
|
|
kubernetes.core.k8s:
|
|
api_version: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: db-cert
|
|
namespace: "{{ uyuni_namespace }}"
|
|
type: kubernetes.io/tls
|
|
data:
|
|
tls.crt: "{{ db_tls_cert | b64encode }}"
|
|
tls.key: "{{ db_tls_key | b64encode }}"
|
|
state: present
|
|
when: db_tls_cert is defined and db_tls_key is defined
|
|
|
|
- name: Create uyuni CA ConfigMap
|
|
kubernetes.core.k8s:
|
|
api_version: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: uyuni-ca
|
|
namespace: "{{ uyuni_namespace }}"
|
|
data:
|
|
ca.crt: "{{ uyuni_ca_cert | string }}"
|
|
state: present
|
|
when: uyuni_ca_cert is defined
|
|
|
|
- name: Create database CA ConfigMap
|
|
kubernetes.core.k8s:
|
|
api_version: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: db-ca
|
|
namespace: "{{ uyuni_namespace }}"
|
|
data:
|
|
ca.crt: "{{ db_ca_cert | string }}"
|
|
state: present
|
|
when: db_ca_cert is defined
|
|
|
|
- name: Include Helm installation
|
|
ansible.builtin.include_tasks: helm.yml
|
|
run_once: true
|