Adrien Reslinger
10f4eb6ef0
All checks were successful
continuous-integration/drone/push Build is passing
60 lines
2.1 KiB
YAML
60 lines
2.1 KiB
YAML
---
|
|
- name: Secrets Store
|
|
block:
|
|
- name: Defined secrets-storage state to present
|
|
set_fact:
|
|
storage_secrets_store_state: present
|
|
when:
|
|
- storage_secrets_store|bool
|
|
|
|
- name: find state of secrets-storage
|
|
set_fact:
|
|
storage_secrets_store_state: absent
|
|
when:
|
|
- not storage_secrets_store|bool
|
|
|
|
# https://github.com/kubernetes-sigs/secrets-store-csi-driver/tree/master/charts/secrets-store-csi-driver
|
|
- name: Defined Secrets Store repository
|
|
kubernetes.core.helm_repository:
|
|
name: secrets-store-csi-driver
|
|
repo_url: "https://kubernetes-sigs.github.io/secrets-store-csi-driver/charts"
|
|
|
|
- name: Deploy Secrets Store chart
|
|
kubernetes.core.helm:
|
|
context: "{{ my_context }}"
|
|
state: "{{ storage_secrets_store_state }}"
|
|
name: csi-secrets-store
|
|
namespace: "kube-system"
|
|
chart_version: "{{ storage_secrets_store_version }}"
|
|
chart_ref: secrets-store-csi-driver/secrets-store-csi-driver
|
|
|
|
# https://github.com/camptocamp/secrets-store-csi-driver-provider-gopass
|
|
- name: Deploy Secrets Store CSI driver provider gopass
|
|
kubernetes.core.k8s:
|
|
state: "{{ storage_secrets_store_state }}"
|
|
context: "{{ my_context }}"
|
|
namespace: "kube-system"
|
|
apply: true
|
|
resource_definition: "{{ lookup('file', 'secrets-provider-gopass/provider-gopass-installer.yaml') | from_yaml }}"
|
|
|
|
# https://github.com/Azure/secrets-store-csi-driver-provider-azure
|
|
- name: Deploy Secrets Store CSI driver provider azure
|
|
kubernetes.core.helm_repository:
|
|
name: csi-secrets-store-provider-azure
|
|
repo_url: "https://raw.githubusercontent.com/Azure/secrets-store-csi-driver-provider-azure/master/charts"
|
|
- name: Deploy Secrets Store chart
|
|
kubernetes.core.helm:
|
|
context: "{{ my_context }}"
|
|
state: "{{ storage_secrets_store_state }}"
|
|
name: csi-secrets-store-provider-azure
|
|
namespace: "kube-system"
|
|
chart_ref: csi-secrets-store-provider-azure/csi-secrets-store-provider-azure
|
|
values:
|
|
secrets-store-csi-driver:
|
|
install: false
|
|
|
|
tags:
|
|
- storage
|
|
- secrets-store
|
|
|
|
# https://github.com/hashicorp/vault-csi-provider
|