mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-01-19 05:31:26 -03:30
20df44521d
* Feat: add external OCI cloud controller manager template & variable Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com> * Feat: add external OCI cloud controller manager workflow Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com> * Feat: migrate external OCI CCM config check from OCI cloud provider Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com> * cloud_controller: oracle: simpler asserts Make the asserts check for Oracle Cloud Infrastructure external cloud controller more compact, and hence readable. Allows to put them back in the main tasks for less back and forth when reading the code. --------- Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com> Co-authored-by: Max Gautier <mg@max.gautier.name>
54 lines
2.1 KiB
YAML
54 lines
2.1 KiB
YAML
---
|
|
- name: "External OCI Cloud Controller Manager | Check credentials"
|
|
ansible.builtin.assert:
|
|
that:
|
|
- external_oracle_auth_key | length > 0
|
|
- external_oracle_auth_region | length > 0
|
|
- external_oracle_auth_tenancy | length > 0
|
|
- external_oracle_auth_user | length > 0
|
|
- external_oracle_auth_fingerprint | length > 0
|
|
when: not external_oracle_auth_use_instance_principals
|
|
|
|
- name: "External OCI Cloud Controller Manager | Check settings"
|
|
ansible.builtin.assert:
|
|
that:
|
|
- external_oracle_compartment | length > 0
|
|
- external_oracle_vcn | length > 0
|
|
- external_oracle_load_balancer_subnet1 | length > 0
|
|
- external_oracle_load_balancer_subnet2 | length > 0
|
|
- external_oracle_load_balancer_security_list_management_mode in ["All", "Frontend", "None"]
|
|
|
|
- name: External OCI Cloud Controller Manager | Get base64 cloud-config
|
|
set_fact:
|
|
external_oracle_cloud_config_secret: "{{ lookup('template', 'external-oci-cloud-config.j2') | b64encode }}"
|
|
when: inventory_hostname == groups['kube_control_plane'][0]
|
|
tags: external-oci
|
|
|
|
- name: External OCI Cloud Controller Manager | Generate Manifests
|
|
template:
|
|
src: "{{ item.file }}.j2"
|
|
dest: "{{ kube_config_dir }}/{{ item.file }}"
|
|
group: "{{ kube_cert_group }}"
|
|
mode: "0640"
|
|
with_items:
|
|
- {name: external-oci-cloud-config-secret, file: external-oci-cloud-config-secret.yml}
|
|
- {name: external-oci-cloud-controller-manager-rbac, file: external-oci-cloud-controller-manager-rbac.yml}
|
|
- {name: external-oci-cloud-controller-manager, file: external-oci-cloud-controller-manager.yml}
|
|
register: external_oracle_manifests
|
|
when: inventory_hostname == groups['kube_control_plane'][0]
|
|
tags: external-oci
|
|
|
|
- name: External OCI Cloud Controller Manager | Apply Manifests
|
|
kube:
|
|
kubectl: "{{ bin_dir }}/kubectl"
|
|
filename: "{{ kube_config_dir }}/{{ item.item.file }}"
|
|
state: "latest"
|
|
with_items:
|
|
- "{{ external_oracle_manifests.results }}"
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- not item is skipped
|
|
loop_control:
|
|
label: "{{ item.item.file }}"
|
|
tags: external-oci
|