58 lines
2.1 KiB
YAML
58 lines
2.1 KiB
YAML
- name: Dashboard setup
|
|
block:
|
|
- name: dashboard install
|
|
k8s:
|
|
state: present
|
|
context: "{{ my_context }}"
|
|
resource_definition: "{{ lookup('file', item) | from_yaml }}"
|
|
with_items:
|
|
- "kubernetes-dashboard-Namespace.yaml"
|
|
- "kubernetes-dashboard-ServiceAccount.yaml"
|
|
- "kubernetes-dashboard-Service.yaml"
|
|
- "kubernetes-dashboard-certs-Secret.yaml"
|
|
- "kubernetes-dashboard-csrf-Secret.yaml"
|
|
- "kubernetes-dashboard-key-holder-Secret.yaml"
|
|
- "kubernetes-dashboard-settings-ConfigMap.yaml"
|
|
- "kubernetes-dashboard-Role.yaml"
|
|
- "kubernetes-dashboard-ClusterRole.yaml"
|
|
- "kubernetes-dashboard-RoleBinding.yaml"
|
|
- "kubernetes-dashboard-ClusterRoleBinding.yaml"
|
|
- "kubernetes-dashboard-Deployment.yaml"
|
|
- "dashboard-metrics-scraper-Service.yaml"
|
|
- "dashboard-metrics-scraper-Deployment.yaml"
|
|
- traefik/dashboard-traefik-auth-sa.yaml
|
|
- traefik/dashboard-traefik-auth-crb.yaml
|
|
|
|
- name: get the dashboard-token secret name
|
|
command: kubectl --context {{ my_context }} get sa kubernetes-dashboard-traefik -n kubernetes-dashboard -o jsonpath='{.secrets[0].name}'
|
|
register: secret_name
|
|
|
|
- name: get the sa token
|
|
command: kubectl --context {{ my_context }} get secret -n kubernetes-dashboard {{ secret_name.stdout }} -o jsonpath='{.data.token}'
|
|
register: token_value
|
|
|
|
- name: write the token to traefik v2 middleware
|
|
k8s:
|
|
state: present
|
|
context: "{{ my_context }}"
|
|
definition:
|
|
apiVersion: traefik.containo.us/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: kubernetes-dashboard-auth
|
|
namespace: kubernetes-dashboard
|
|
spec:
|
|
headers:
|
|
customRequestHeaders:
|
|
Authorization: "Bearer {{ token_value.stdout | b64decode }}"
|
|
when:
|
|
- traefik_version is defined
|
|
- traefik_version | regex_search('(^2.)')
|
|
|
|
- name: ingress dashboard install
|
|
k8s:
|
|
state: present
|
|
context: "{{ my_context }}"
|
|
resource_definition: "{{ lookup('template', item) | from_yaml }}"
|
|
with_items:
|
|
- dashboard-ingress.yaml
|