Kubelet csr approver fixes (#10165)

* Fix upgrade-path for kubelet-csr-approver

Fixes an error when you enable kubelet-csr-approver when upgrading.
It hangs waiting for the certificate to be approved since the
kubelet-csr-approver is not installed yet.

* Add missing package when using helm role

roles/kubernetes-apps/helm/tasks/main.yml

@@ -1,4 +1,23 @@
 ---
+- name: Helm | Gather os specific variables
+  include_vars: "{{ item }}"
+  with_first_found:
+    - files:
+        - "{{ ansible_distribution|lower }}-{{ ansible_distribution_version|lower|replace('/', '_') }}.yml"
+        - "{{ ansible_distribution|lower }}-{{ ansible_distribution_release }}.yml"
+        - "{{ ansible_distribution|lower }}-{{ ansible_distribution_major_version|lower|replace('/', '_') }}.yml"
+        - "{{ ansible_distribution|lower }}.yml"
+        - "{{ ansible_os_family|lower }}.yml"
+        - defaults.yml
+      paths:
+        - ../vars
+      skip: true
+
+- name: Helm | Install PyYaml
+  package:
+    name: "{{ pyyaml_package }}"
+    state: present
+
 - name: Helm | Download helm
   include_tasks: "../../../download/tasks/download_file.yml"
   vars:

roles/kubernetes-apps/helm/vars/amazon.yml

@@ -0,0 +1,2 @@
+---
+pyyaml_package: PyYAML

roles/kubernetes-apps/helm/vars/centos-9.yml

@@ -0,0 +1,2 @@
+---
+pyyaml_package: python3-pyyaml

roles/kubernetes-apps/helm/vars/centos.yml

@@ -0,0 +1,2 @@
+---
+pyyaml_package: PyYAML

roles/kubernetes-apps/helm/vars/debian.yml

@@ -0,0 +1,2 @@
+---
+pyyaml_package: python3-yaml

roles/kubernetes-apps/helm/vars/fedora.yml

@@ -0,0 +1,2 @@
+---
+pyyaml_package: python3-pyyaml

roles/kubernetes-apps/helm/vars/redhat-9.yml

@@ -0,0 +1,2 @@
+---
+pyyaml_package: python3-pyyaml

roles/kubernetes-apps/helm/vars/redhat.yml

@@ -0,0 +1,2 @@
+---
+pyyaml_package: PyYAML

roles/kubernetes-apps/helm/vars/suse.yml

@@ -0,0 +1,2 @@
+---
+pyyaml_package: PyYAML

roles/kubernetes-apps/helm/vars/ubuntu.yml

@@ -0,0 +1,2 @@
+---
+pyyaml_package: python3-yaml