ansible-role-k8s-storage/tasks/longhorn.yml

---
- name: longhorn need to be present
  block:
    - name: Defined longhorn repository
      kubernetes.core.helm_repository:
        name: longhorn
        repo_url: "https://charts.longhorn.io"
    - name: Deploy latest version of longhorn
      kubernetes.core.helm:
        context: "{{ my_context }}"
        name: longhorn
        chart_ref: longhorn/longhorn
        chart_version: "{{ storage_longhorn.version }}"
        create_namespace: true
        release_namespace: "{{ storage_longhorn.namespace }}"
        values:
          persistence:
            defaultClass: true
#            defaultClassReplicaCount: 3
#            reclaimPolicy: Delete
            recurringJobSelector:
              enable: true
              jobList: '[
                {
                  "name":"snapshot",
                  "isGroup":true,
                },
                {
                  "name":"backup-daily",
                  "isGroup":true,
                }
              ]'
          defaultSettings:
            defaultDataPath: "/var/lib/longhorn/"
            backupTarget: "nfs://longhorn-test-nfs-svc.default:/opt/backupstore"
            allowRecurringJobWhileVolumeDetached: true
            createDefaultDiskLabeledNodes: true
            replicaSoftAntiAffinity: false
#            defaultReplicaCount: 2
            defaultDataLocality: best-effort
#            defaultLonghornStaticStorageClass: longhorn
#            disableSchedulingOnCordonedNode: false
            replicaZoneSoftAntiAffinity: false
            guaranteed-engine-manager-cpu: 6
            guaranteed-replica-manager-cpu: 6
          ingress:
            enabled: true
            host: "longhorn.{{ cluster_domain }}"
#            tls: false
#            tlsSecret: longhorn.local-tls
            annotations:
              kubernetes.io/ingress.class: traefik
#              cert-manager.io/cluster-issuer: letsencrypt-prod
# {% if ingress_whitelist is defined %}
#              ingress.kubernetes.io/whitelist-source-range: "{% for acl_whitelist in ingress_whitelist %}{{ acl_whitelist }}{% if not loop.last %}, {% endif %}{% endfor %}"
# {% endif %}
              traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
# {% if basic_auth is defined %}
#              traefik.ingress.kubernetes.io/router.middlewares: {{ traefik_namespace }}-traefik-dashboard-basicauth@kubernetescrd
#              traefik.ingress.kubernetes.io/router.middlewares: basic-auth@file
#              #traefik.ingress.kubernetes.io/router.middlewares: tools-traefik-ipwhitelist@kubernetescrd,tools-basic-auth@kubernetescrd
# {% endif %}
#          enablePSP: true

    - name: Configure Longhorn
      kubernetes.core.k8s:
        state: present
        context: "{{ my_context }}"
        definition:
          kind: Setting
          apiVersion: longhorn.io/v1beta1
          metadata:
            name: "{{ item.name }}"
            namespace: "{{ storage_longhorn_namespace }}"
          value: "{{ item.value }}"
      with_items:
        - {
            name: "guaranteed-engine-manager-cpu",
            value: "6"
          }
        - {
            name: "guaranteed-replica-manager-cpu",
            value: "6"
          }
        - {
            name: "default-data-locality",
            value: "best-effort"
          }

    - name: Install longhorn Recurring Jobs
      kubernetes.core.k8s:
        state: present
        context: "{{ my_context }}"
        apply: true
        namespace: "{{ storage_longhorn.namespace }}"
        resource_definition: "{{ lookup('template', 'longhorn/longhorn/longhorn_recurringjob.yml.j2') | from_yaml }}"
      with_items:
        - {
            name: "snapshot",
            ansible.builtin.cron: "1 * * * *",
            task: "snapshot",
            retain: 25
          }
        - {
            name: "backup-daily",
            ansible.builtin.cron: "0 1 * * *",
            task: "backup",
            retain: 8
          }

#    - name: Install longhorn UI Ingress
#      kubernetes.core.k8s:
#        state: present
#        context: "{{ my_context }}"
#        apply: true
#        namespace: "{{ storage_longhorn.namespace }}"
#        resource_definition: "{{ lookup('template', 'longhorn/' + item) | from_yaml }}"
#      with_items:
#        - "longhorn_ingressroute.yaml.j2"
  when:
    - storage_longhorn.enabled
  tags:
    - longhorn
    - storage

- name: longhorn need to be absent
  block:
    - name: Deploy latest version of longhorn
      kubernetes.core.helm:
        context: "{{ my_context }}"
        name: longhorn
        state: absent
        release_namespace: "{{ storage_longhorn.namespace }}"

    - name: Remove Ingress for longhorn UI
      kubernetes.core.k8s:
        state: absent
        context: "{{ my_context }}"
        namespace: "{{ storage_longhorn.namespace }}"
        resource_definition: "{{ lookup('template', 'longhorn/' + item) | from_yaml }}"
      with_items:
#        - "longhorn_ingressroute.yaml.j2"
        - "longhorn-namespace.yml.j2"
  when:
    - not storage_longhorn.enabled
  tags:
    - longhorn
    - storage