Remove duplicated helm install tasks from main.yml and centralize them in helm.yml, simplifying the role structure and reducing redundancy by consolidating OCI registry and local chart installation paths into a single file.
74 lines
1.9 KiB
YAML
74 lines
1.9 KiB
YAML
---
|
|
- name: Create namespace
|
|
kubernetes.core.k8s:
|
|
api_version: v1
|
|
kind: Namespace
|
|
name: "{{ uyuni_namespace }}"
|
|
kubeconfig: "{{ uyuni_kubeconfig }}"
|
|
state: present
|
|
|
|
- name: Create uyuni-ingress-cert Certificate
|
|
kubernetes.core.k8s:
|
|
api_version: cert-manager.io/v1
|
|
kind: Certificate
|
|
name: uyuni-ingress-cert
|
|
namespace: "{{ uyuni_namespace }}"
|
|
kubeconfig: "{{ uyuni_kubeconfig }}"
|
|
definition:
|
|
spec:
|
|
secretName: uyuni-cert
|
|
dnsNames:
|
|
- uyuni.local.mrwho.ru
|
|
issuerRef:
|
|
name: letsencrypt-prod
|
|
kind: ClusterIssuer
|
|
state: present
|
|
when: uyuni_create_certificates | bool
|
|
|
|
- name: Create uyuni-db-cert Certificate
|
|
kubernetes.core.k8s:
|
|
api_version: cert-manager.io/v1
|
|
kind: Certificate
|
|
name: uyuni-db-cert
|
|
namespace: "{{ uyuni_namespace }}"
|
|
kubeconfig: "{{ uyuni_kubeconfig }}"
|
|
definition:
|
|
spec:
|
|
secretName: db-cert
|
|
dnsNames:
|
|
- uyuni.local.mrwho.ru
|
|
issuerRef:
|
|
name: letsencrypt-prod
|
|
kind: ClusterIssuer
|
|
state: present
|
|
when: uyuni_create_certificates | bool
|
|
|
|
- name: Wait for uyuni-ingress-cert secret
|
|
kubernetes.core.k8s_info:
|
|
api_version: v1
|
|
kind: Secret
|
|
name: uyuni-cert
|
|
namespace: "{{ uyuni_namespace }}"
|
|
kubeconfig: "{{ uyuni_kubeconfig }}"
|
|
register: _uyuni_cert_secret
|
|
until: _uyuni_cert_secret.resources | length > 0
|
|
retries: 60
|
|
delay: 10
|
|
when: uyuni_create_certificates | bool
|
|
|
|
- name: Wait for uyuni-db-cert secret
|
|
kubernetes.core.k8s_info:
|
|
api_version: v1
|
|
kind: Secret
|
|
name: db-cert
|
|
namespace: "{{ uyuni_namespace }}"
|
|
kubeconfig: "{{ uyuni_kubeconfig }}"
|
|
register: _db_cert_secret
|
|
until: _db_cert_secret.resources | length > 0
|
|
retries: 60
|
|
delay: 10
|
|
when: uyuni_create_certificates | bool
|
|
|
|
- name: Include Helm installation
|
|
ansible.builtin.include_tasks: helm.yml
|