Big update af the role
All checks were successful
continuous-integration/drone/push Build is passing

This commit is contained in:
Adrien Reslinger 2022-03-03 12:06:46 +01:00
parent 10f4eb6ef0
commit d97acb68b0
Signed by: adrien
GPG key ID: DA7B27055C66D6DE
14 changed files with 156 additions and 246 deletions

View file

@ -1,18 +1,6 @@
---
- name: Secrets Store
- name: Install Secrets Store
block:
- name: Defined secrets-storage state to present
set_fact:
storage_secrets_store_state: present
when:
- storage_secrets_store|bool
- name: find state of secrets-storage
set_fact:
storage_secrets_store_state: absent
when:
- not storage_secrets_store|bool
# https://github.com/kubernetes-sigs/secrets-store-csi-driver/tree/master/charts/secrets-store-csi-driver
- name: Defined Secrets Store repository
kubernetes.core.helm_repository:
@ -22,16 +10,15 @@
- name: Deploy Secrets Store chart
kubernetes.core.helm:
context: "{{ my_context }}"
state: "{{ storage_secrets_store_state }}"
name: csi-secrets-store
namespace: "kube-system"
chart_version: "{{ storage_secrets_store_version }}"
release_namespace: "kube-system"
chart_version: "{{ storage_secrets_store.version }}"
chart_ref: secrets-store-csi-driver/secrets-store-csi-driver
# https://github.com/camptocamp/secrets-store-csi-driver-provider-gopass
- name: Deploy Secrets Store CSI driver provider gopass
kubernetes.core.k8s:
state: "{{ storage_secrets_store_state }}"
state: "present"
context: "{{ my_context }}"
namespace: "kube-system"
apply: true
@ -45,16 +32,43 @@
- name: Deploy Secrets Store chart
kubernetes.core.helm:
context: "{{ my_context }}"
state: "{{ storage_secrets_store_state }}"
name: csi-secrets-store-provider-azure
namespace: "kube-system"
release_namespace: "kube-system"
chart_version: "{{ storage_secrets_store_azure.version }}"
chart_ref: csi-secrets-store-provider-azure/csi-secrets-store-provider-azure
values:
secrets-store-csi-driver:
install: false
when:
- storage_secrets_store.enabled
tags:
- storage
- secrets-store
# https://github.com/hashicorp/vault-csi-provider
- name: Secret Store need to be absent
block:
- name: Uninstall Secrets Store
kubernetes.core.helm:
context: "{{ my_context }}"
name: "{{ item }}"
state: absent
release_namespace: "kube-system"
with_items:
- "csi-secrets-store"
- "csi-secrets-store-provider-azure"
- name: Remove Ingress for longhorn UI
kubernetes.core.k8s:
state: absent
context: "{{ my_context }}"
namespace: "kube-system"
resource_definition: "{{ lookup('file', item) | from_yaml }}"
with_items:
- "secrets-provider-gopass/provider-gopass-installer.yaml"
when:
- not storage_secrets_store.enabled
tags:
- secrets-store
- storage