collection of ansible roles
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
|
|
- name: apply hetzner cloud secret
|
|
|
kubernetes.core.k8s:
|
|
|
apply: yes
|
|
|
template: hcloud-secret.yml
|
|
|
|
|
|
- name: apply volume encryption secret
|
|
|
kubernetes.core.k8s:
|
|
|
apply: yes
|
|
|
template: encryption-secret.yml
|
|
|
|
|
|
- name: Create directory for manifest storage
|
|
|
ansible.builtin.file:
|
|
|
path: "{{ hetzner_csi_working_dir }}"
|
|
|
state: directory
|
|
|
mode: '0755'
|
|
|
|
|
|
- name: download hetzner_csi manifest
|
|
|
get_url:
|
|
|
url: "https://raw.githubusercontent.com/hetznercloud/csi-driver/v{{ hetzner_csi_version }}/deploy/kubernetes/hcloud-csi.yml"
|
|
|
dest: "{{ hetzner_csi_manifest_path }}"
|
|
|
mode: '0664'
|
|
|
|
|
|
- name: apply hetzner_csi manifest
|
|
|
kubernetes.core.k8s:
|
|
|
apply: yes
|
|
|
src: "{{ hetzner_csi_manifest_path }}"
|
|
|
|
|
|
- name: apply manifest for encrypted storageclass
|
|
|
kubernetes.core.k8s:
|
|
|
apply: yes
|
|
|
template: 'hcloud-volumes-encrypted.yml'
|
|
|
|
|
|
- name: mark local storage and unencrypted hetzner volumes as non default
|
|
|
kubernetes.core.k8s:
|
|
|
state: patched
|
|
|
kind: StorageClass
|
|
|
name: "{{ storage_class_name }}"
|
|
|
definition:
|
|
|
metadata:
|
|
|
annotations:
|
|
|
storageclass.kubernetes.io/is-default-class: "false"
|
|
|
loop:
|
|
|
- local-path
|
|
|
- hcloud-volumes
|
|
|
loop_control:
|
|
|
loop_var: storage_class_name
|
|
|
|
