Add identity_allocation_mode support for Cilium (#8430)

Co-authored-by: Emin Aktaş <eminaktas34@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
Signed-off-by: necatican <necaticanyildirim@gmail.com>

Co-authored-by: Emin Aktaş <eminaktas34@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
This commit is contained in:
Necatican Yıldırım
2022-01-16 20:29:28 +03:00
committed by GitHub
parent c0d1bb1a5c
commit caff539ccd
8 changed files with 42 additions and 2 deletions

View File

@@ -6,4 +6,9 @@
msg: "cilium_ipsec_key should be defined to use cilium_ipsec_enabled"
when:
- cilium_ipsec_enabled
- cilium_tunnel_mode in ['vxlan']
- cilium_tunnel_mode in ['vxlan']
- name: Stop if bad Cilium identity allocation mode
assert:
that: identity_allocation_mode in ['crd', 'kvstore']
msg: "identity_allocation_mode must be either 'crd' or 'kvstore'"

View File

@@ -13,6 +13,8 @@
mode: 0750
owner: root
group: root
when:
- identity_allocation_mode == "kvstore"
- name: Cilium | Link etcd certificates for cilium
file:
@@ -25,6 +27,8 @@
- {s: "{{ kube_etcd_cacert_file }}", d: "ca_cert.crt"}
- {s: "{{ kube_etcd_cert_file }}", d: "cert.crt"}
- {s: "{{ kube_etcd_key_file }}", d: "key.pem"}
when:
- identity_allocation_mode == "kvstore"
- name: Cilium | Create hubble dir
file: