storage class parameters can't be patched, duplicate instead

linux/k3s/hetzner_csi_driver/files/hcloud-volumes-encrypted.yml

@@ -0,0 +1,11 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: hcloud-volumes-encrypted
+provisioner: csi.hetzner.cloud
+reclaimPolicy: Delete
+volumeBindingMode: WaitForFirstConsumer
+allowVolumeExpansion: true
+parameters:
+  csi.storage.k8s.io/node-publish-secret-name: encryption
+  csi.storage.k8s.io/node-publish-secret-namespace: default

linux/k3s/hetzner_csi_driver/tasks/main.yml

@@ -25,22 +25,22 @@
     apply: yes
     src: "{{ hetzner_csi_manifest_path }}"
 
-- name: patch hetzner storageclass to use encrypted volumes
+- name: apply manifest for encrypted storageclass
   kubernetes.core.k8s:
-    state: patched
+    apply: yes
-    kind: StorageClass
+    src: hcloud-volumes-encrypted.yml
-    name: hcloud-volumes
-    definition:
-      parameters:
-        csi.storage.k8s.io/node-publish-secret-name: encryption
-        csi.storage.k8s.io/node-publish-secret-namespace: default
 
-- name: mark local storage as non default
+- name: mark local storage and unencrypted hetzner volumes as non default
   kubernetes.core.k8s:
     state: patched
     kind: StorageClass
-    name: local-path
+    name: "{{ storage_class_name }}"
     definition:
       metadata:
         annotations:
           storageclass.kubernetes.io/is-default-class: "false"
+  loop:
+  - local-path
+  - hcloud-volumes
+  loop_control:
+    loop_var: storage_class_name