55 lines
1.7 KiB
YAML
55 lines
1.7 KiB
YAML
---
|
|
- name: DevAccess | Render token Secret manifest
|
|
ansible.builtin.template:
|
|
src: dev-token-secret.yml.j2
|
|
dest: /tmp/dev-token-secret.yml
|
|
mode: "0600"
|
|
|
|
- name: DevAccess | Apply token Secret
|
|
ansible.builtin.command:
|
|
cmd: kubectl apply -f /tmp/dev-token-secret.yml
|
|
environment:
|
|
KUBECONFIG: "{{ dev_access_kubeconfig }}"
|
|
PATH: "/usr/local/bin:/usr/bin:/bin"
|
|
register: _dev_secret
|
|
changed_when: "'created' in _dev_secret.stdout or 'configured' in _dev_secret.stdout"
|
|
|
|
- name: DevAccess | Wait for token to be populated
|
|
ansible.builtin.command: >
|
|
kubectl get secret {{ dev_access_token_secret_name }}
|
|
-n {{ dev_access_namespace }}
|
|
-o jsonpath='{.data.token}'
|
|
environment:
|
|
KUBECONFIG: "{{ dev_access_kubeconfig }}"
|
|
PATH: "/usr/local/bin:/usr/bin:/bin"
|
|
register: _token_raw
|
|
retries: 10
|
|
delay: 3
|
|
until: _token_raw.stdout | length > 0
|
|
changed_when: false
|
|
|
|
- name: DevAccess | Decode token
|
|
ansible.builtin.set_fact:
|
|
_dev_token: "{{ _token_raw.stdout | b64decode }}"
|
|
|
|
- name: DevAccess | Save token to file
|
|
ansible.builtin.copy:
|
|
content: "{{ _dev_token }}\n"
|
|
dest: "{{ dev_access_token_file }}"
|
|
owner: "{{ ansible_user }}"
|
|
group: "{{ ansible_user }}"
|
|
mode: "0600"
|
|
|
|
- name: DevAccess | Show token info
|
|
ansible.builtin.debug:
|
|
msg: |
|
|
============================================================
|
|
Developer token for namespace: {{ dev_access_namespace }}
|
|
ServiceAccount: {{ dev_access_sa_name }}
|
|
Token saved to: {{ dev_access_token_file }}
|
|
View token: cat {{ dev_access_token_file }}
|
|
|
|
Dashboard URL: http://10.203.0.96:10001
|
|
Login: paste token from the file above
|
|
============================================================
|