32 lines
1.2 KiB
YAML
32 lines
1.2 KiB
YAML
---
|
|
- name: Helm | Add Sealed Secrets chart repository
|
|
ansible.builtin.command: >
|
|
helm repo add sealed-secrets https://bitnami.github.io/sealed-secrets
|
|
environment:
|
|
KUBECONFIG: "{{ sealed_secrets_kubeconfig }}"
|
|
PATH: "/usr/local/bin:/usr/bin:/bin"
|
|
register: _helm_repo_add
|
|
changed_when: "'already exists' not in _helm_repo_add.stdout"
|
|
failed_when: _helm_repo_add.rc != 0 and 'already exists' not in _helm_repo_add.stdout
|
|
|
|
- name: Helm | Update chart repositories
|
|
ansible.builtin.command: helm repo update
|
|
environment:
|
|
KUBECONFIG: "{{ sealed_secrets_kubeconfig }}"
|
|
PATH: "/usr/local/bin:/usr/bin:/bin"
|
|
changed_when: false
|
|
|
|
- name: Helm | Install or upgrade Sealed Secrets controller
|
|
ansible.builtin.command: >
|
|
helm upgrade --install sealed-secrets sealed-secrets/sealed-secrets
|
|
--namespace {{ sealed_secrets_namespace }}
|
|
--version {{ sealed_secrets_chart_version }}
|
|
--set fullnameOverride=sealed-secrets-controller
|
|
--timeout 5m0s
|
|
--wait
|
|
environment:
|
|
KUBECONFIG: "{{ sealed_secrets_kubeconfig }}"
|
|
PATH: "/usr/local/bin:/usr/bin:/bin"
|
|
register: _helm_install
|
|
changed_when: "'STATUS: deployed' in _helm_install.stdout or 'has been upgraded' in _helm_install.stdout"
|