Change Secrets Store deployment
All checks were successful
continuous-integration/drone/push Build is passing

This commit is contained in:
Adrien Reslinger 2021-04-03 14:32:31 +02:00
parent 838b0de25f
commit cf4bab4db7
Signed by: adrien
GPG key ID: DA7B27055C66D6DE
12 changed files with 24 additions and 444 deletions

View file

@ -29,6 +29,10 @@
tags:
- nfs
- storage
- include_tasks: "secrets-store.yml"
tags:
- secrets-store
- storage
# https://medium.com/asl19-developers/create-readwritemany-persistentvolumeclaims-on-your-kubernetes-cluster-3a8db51f98e3
# https://github.com/ctrox/csi-s3
@ -38,7 +42,6 @@
# - include_tasks: "digital_ocean.yml"
# - include_tasks: "linode.yml"
# - include_tasks: "secrets-store.yml"
- name: Select the default StorageClass
k8s:

View file

@ -1,4 +1,6 @@
---
- name: Secrets Store
block:
- name: Defined secrets-storage state to present
set_fact:
storage_secrets_store_state: present
@ -11,11 +13,19 @@
when:
- not storage_secrets_store|bool
- name: secrets-storage need to be {{ storage_secrets_store_state }}
k8s:
state: "{{ storage_secrets_store_state }}"
# https://github.com/kubernetes-sigs/secrets-store-csi-driver/tree/master/charts/secrets-store-csi-driver
- name: Defined Secrets Store repository
community.kubernetes.helm_repository:
name: secrets-store-csi-driver
repo_url: "https://raw.githubusercontent.com/kubernetes-sigs/secrets-store-csi-driver/master/charts"
- name: Deploy Secrets Store chart
community.kubernetes.helm:
context: "{{ my_context }}"
merge_type: merge
resource_definition: "{{ lookup('file', item) | from_yaml }}"
with_items:
- '{{ secrets_store_files }}'
state: "{{ storage_secrets_store_state }}"
name: csi-secrets-store
chart_ref: secrets-store-csi-driver/secrets-store-csi-driver
tags:
- storage
- secrets-store