Improving yamllint configuration (#11389)

Signed-off-by: Bas Meijer <bas.meijer@enexis.nl>

roles/kubernetes/node/tasks/install.yml

@@ -3,7 +3,7 @@
   copy:
     src: "{{ downloads.kubeadm.dest }}"
     dest: "{{ bin_dir }}/kubeadm"
-    mode: 0755
+    mode: "0755"
     remote_src: true
   tags:
     - kubeadm
@@ -14,7 +14,7 @@
   copy:
     src: "{{ downloads.kubelet.dest }}"
     dest: "{{ bin_dir }}/kubelet"
-    mode: 0755
+    mode: "0755"
     remote_src: true
   tags:
     - kubelet

roles/kubernetes/node/tasks/kubelet.yml

@@ -12,7 +12,7 @@
     dest: "{{ kube_config_dir }}/kubelet.env"
     setype: "{{ (preinstall_selinux_state != 'disabled') | ternary('etc_t', omit) }}"
     backup: yes
-    mode: 0600
+    mode: "0600"
   notify: Node | restart kubelet
   tags:
     - kubelet
@@ -22,7 +22,7 @@
   template:
     src: "kubelet-config.{{ kubeletConfig_api_version }}.yaml.j2"
     dest: "{{ kube_config_dir }}/kubelet-config.yaml"
-    mode: 0600
+    mode: "0600"
   notify: Kubelet | restart kubelet
   tags:
     - kubelet
@@ -33,7 +33,7 @@
     src: "kubelet.service.j2"
     dest: "/etc/systemd/system/kubelet.service"
     backup: "yes"
-    mode: 0600
+    mode: "0600"
     validate: "sh -c '[ -f /usr/bin/systemd/system/factory-reset.target ] || exit 0 && systemd-analyze verify %s:kubelet.service'"
     # FIXME: check that systemd version >= 250 (factory-reset.target was introduced in that release)
     # Remove once we drop support for systemd < 250

roles/kubernetes/node/tasks/loadbalancer/haproxy.yml

@@ -8,7 +8,7 @@
   file:
     path: "{{ haproxy_config_dir }}"
     state: directory
-    mode: 0755
+    mode: "0755"
     owner: root
 
 - name: Haproxy | Write haproxy configuration
@@ -16,7 +16,7 @@
     src: "loadbalancer/haproxy.cfg.j2"
     dest: "{{ haproxy_config_dir }}/haproxy.cfg"
     owner: root
-    mode: 0755
+    mode: "0755"
     backup: yes
 
 - name: Haproxy | Get checksum from config
@@ -31,4 +31,4 @@
   template:
     src: manifests/haproxy.manifest.j2
     dest: "{{ kube_manifest_dir }}/haproxy.yml"
-    mode: 0640
+    mode: "0640"

roles/kubernetes/node/tasks/loadbalancer/kube-vip.yml

@@ -10,4 +10,4 @@
   template:
     src: manifests/kube-vip.manifest.j2
     dest: "{{ kube_manifest_dir }}/kube-vip.yml"
-    mode: 0640
+    mode: "0640"

roles/kubernetes/node/tasks/loadbalancer/nginx-proxy.yml

@@ -8,7 +8,7 @@
   file:
     path: "{{ nginx_config_dir }}"
     state: directory
-    mode: 0700
+    mode: "0700"
     owner: root
 
 - name: Nginx-proxy | Write nginx-proxy configuration
@@ -16,7 +16,7 @@
     src: "loadbalancer/nginx.conf.j2"
     dest: "{{ nginx_config_dir }}/nginx.conf"
     owner: root
-    mode: 0755
+    mode: "0755"
     backup: yes
 
 - name: Nginx-proxy | Get checksum from config
@@ -31,4 +31,4 @@
   template:
     src: manifests/nginx-proxy.manifest.j2
     dest: "{{ kube_manifest_dir }}/nginx-proxy.yml"
-    mode: 0640
+    mode: "0640"

roles/kubernetes/node/tasks/main.yml

@@ -14,7 +14,7 @@
   file:
     path: /var/lib/cni
     state: directory
-    mode: 0755
+    mode: "0755"
 
 - name: Install kubelet binary
   import_tasks: install.yml
@@ -74,7 +74,7 @@
   file:
     path: "{{ item }}"
     state: directory
-    mode: 0755
+    mode: "0755"
   loop:
     - /etc/modules-load.d
     - /etc/modprobe.d
@@ -89,7 +89,7 @@
   copy:
     dest: /etc/modules-load.d/kubespray-br_netfilter.conf
     content: br_netfilter
-    mode: 0644
+    mode: "0644"
   when: modinfo_br_netfilter.rc == 0
 
 # kube-proxy needs net.bridge.bridge-nf-call-iptables enabled when found if br_netfilter is not a module
@@ -162,7 +162,7 @@
     content: "{{ openstack_cacert | b64decode if openstack_cacert_is_base64 else omit }}"
     dest: "{{ kube_config_dir }}/openstack-cacert.pem"
     group: "{{ kube_cert_group }}"
-    mode: 0640
+    mode: "0640"
   when:
     - cloud_provider is defined
     - cloud_provider == 'openstack'
@@ -176,7 +176,7 @@
     src: "cloud-configs/{{ cloud_provider }}-cloud-config.j2"
     dest: "{{ kube_config_dir }}/cloud_config"
     group: "{{ kube_cert_group }}"
-    mode: 0640
+    mode: "0640"
   when:
     - cloud_provider is defined
     - cloud_provider in [ 'openstack', 'azure', 'vsphere', 'aws', 'gce' ]