Fix lint errors
Some checks reported errors
continuous-integration/drone/push Build encountered an error
Some checks reported errors
continuous-integration/drone/push Build encountered an error
This commit is contained in:
parent
434adb4b76
commit
5d06225a9f
2 changed files with 61 additions and 61 deletions
|
|
@ -6,6 +6,6 @@ galaxy_info:
|
||||||
galaxy_tags: []
|
galaxy_tags: []
|
||||||
license: GPL2
|
license: GPL2
|
||||||
platforms:
|
platforms:
|
||||||
- name: kubernetes
|
- name: kubernetes
|
||||||
version:
|
version:
|
||||||
- all
|
- all
|
||||||
|
|
|
||||||
116
tasks/main.yml
116
tasks/main.yml
|
|
@ -1,64 +1,64 @@
|
||||||
- name: Dashboard setup
|
- name: Dashboard setup
|
||||||
block:
|
block:
|
||||||
- name: Include file list
|
- name: Include file list
|
||||||
include_vars: "dashboard-files.yaml"
|
ansible.builtin.include_vars: "dashboard-files.yaml"
|
||||||
|
|
||||||
- name: namespace
|
- name: namespace
|
||||||
k8s:
|
kubernetes.core.k8s:
|
||||||
state: present
|
state: present
|
||||||
context: "{{ my_context }}"
|
context: "{{ my_context }}"
|
||||||
merge_type: merge
|
merge_type: merge
|
||||||
definition:
|
definition:
|
||||||
api_version: v1
|
api_version: v1
|
||||||
kind: Namespace
|
kind: Namespace
|
||||||
metadata:
|
metadata:
|
||||||
name: kubernetes-dashboard
|
name: kubernetes-dashboard
|
||||||
labels:
|
labels:
|
||||||
namespace: 'kubernetes-dashboard'
|
namespace: 'kubernetes-dashboard'
|
||||||
- name: dashboard install
|
- name: dashboard install
|
||||||
k8s:
|
kubernetes.core.k8s:
|
||||||
state: present
|
state: present
|
||||||
context: "{{ my_context }}"
|
context: "{{ my_context }}"
|
||||||
merge_type: merge
|
merge_type: merge
|
||||||
resource_definition: "{{ lookup('file', item) | from_yaml }}"
|
resource_definition: "{{ lookup('file', item) | from_yaml }}"
|
||||||
with_items:
|
with_items:
|
||||||
- NetworkPolicies/default-deny-ingress.yaml
|
- NetworkPolicies/default-deny-ingress.yaml
|
||||||
- NetworkPolicies/allow-from-namespace.yaml
|
- NetworkPolicies/allow-from-namespace.yaml
|
||||||
- traefik/dashboard-traefik-auth-sa.yaml
|
- traefik/dashboard-traefik-auth-sa.yaml
|
||||||
- traefik/dashboard-traefik-auth-crb.yaml
|
- traefik/dashboard-traefik-auth-crb.yaml
|
||||||
- "{{ dashboard_files_list }}"
|
- "{{ dashboard_files_list }}"
|
||||||
- name: get the dashboard-token secret name
|
- name: get the dashboard-token secret name
|
||||||
command: kubectl --context {{ my_context }} get sa kubernetes-dashboard-traefik -n kubernetes-dashboard -o jsonpath='{.secrets[0].name}'
|
ansible.builtin.command: kubectl --context {{ my_context }} get sa kubernetes-dashboard-traefik -n kubernetes-dashboard -o jsonpath='{.secrets[0].name}'
|
||||||
register: secret_name
|
register: secret_name
|
||||||
|
|
||||||
- name: get the sa token
|
- name: get the sa token
|
||||||
command: kubectl --context {{ my_context }} get secret -n kubernetes-dashboard {{ secret_name.stdout }} -o jsonpath='{.data.token}'
|
ansible.builtin.command: kubectl --context {{ my_context }} get secret -n kubernetes-dashboard {{ secret_name.stdout }} -o jsonpath='{.data.token}'
|
||||||
register: token_value
|
register: token_value
|
||||||
|
|
||||||
- name: write the token to traefik v2 middleware
|
- name: write the token to traefik v2 middleware
|
||||||
k8s:
|
kubernetes.core.k8s:
|
||||||
state: present
|
state: present
|
||||||
context: "{{ my_context }}"
|
context: "{{ my_context }}"
|
||||||
merge_type: merge
|
merge_type: merge
|
||||||
definition:
|
definition:
|
||||||
apiVersion: traefik.containo.us/v1alpha1
|
apiVersion: traefik.containo.us/v1alpha1
|
||||||
kind: Middleware
|
kind: Middleware
|
||||||
metadata:
|
metadata:
|
||||||
name: kubernetes-dashboard-auth
|
name: kubernetes-dashboard-auth
|
||||||
namespace: kubernetes-dashboard
|
namespace: kubernetes-dashboard
|
||||||
spec:
|
spec:
|
||||||
headers:
|
headers:
|
||||||
customRequestHeaders:
|
customRequestHeaders:
|
||||||
Authorization: "Bearer {{ token_value.stdout | b64decode }}"
|
Authorization: "Bearer {{ token_value.stdout | b64decode }}"
|
||||||
when:
|
when:
|
||||||
- traefik_version is defined
|
- traefik_version is defined
|
||||||
- traefik_version | regex_search('(^2.)')
|
- traefik_version | regex_search('(^2.)')
|
||||||
|
|
||||||
- name: ingress dashboard install
|
- name: ingress dashboard install
|
||||||
k8s:
|
kubernetes.core.k8s:
|
||||||
state: present
|
state: present
|
||||||
context: "{{ my_context }}"
|
context: "{{ my_context }}"
|
||||||
merge_type: merge
|
merge_type: merge
|
||||||
resource_definition: "{{ lookup('template', item) | from_yaml }}"
|
resource_definition: "{{ lookup('template', item) | from_yaml }}"
|
||||||
with_items:
|
with_items:
|
||||||
- dashboard-ingress.yaml
|
- dashboard-ingress.yaml
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue