|
|
@ -18,46 +18,47 @@ |
|
|
|
proxy_token: "{{ tokens.results[3].content|b64decode }}" |
|
|
|
|
|
|
|
- name: write the config files for api server |
|
|
|
template: src=apiserver.j2 dest={{ kube_config_dir }}/apiserver |
|
|
|
template: src=apiserver.j2 dest={{ kube_config_dir }}/apiserver backup=yes |
|
|
|
notify: |
|
|
|
- restart daemons |
|
|
|
|
|
|
|
- name: write config file for controller-manager |
|
|
|
template: src=controller-manager.j2 dest={{ kube_config_dir }}/controller-manager |
|
|
|
template: src=controller-manager.j2 dest={{ kube_config_dir }}/controller-manager backup=yes |
|
|
|
notify: |
|
|
|
- restart controller-manager |
|
|
|
|
|
|
|
- name: write the kubecfg (auth) file for controller-manager |
|
|
|
template: src=controller-manager.kubeconfig.j2 dest={{ kube_config_dir }}/controller-manager.kubeconfig |
|
|
|
template: src=controller-manager.kubeconfig.j2 dest={{ kube_config_dir }}/controller-manager.kubeconfig backup=yes |
|
|
|
notify: |
|
|
|
- restart controller-manager |
|
|
|
|
|
|
|
- name: write the config file for scheduler |
|
|
|
template: src=scheduler.j2 dest={{ kube_config_dir }}/scheduler |
|
|
|
template: src=scheduler.j2 dest={{ kube_config_dir }}/scheduler backup=yes |
|
|
|
notify: |
|
|
|
- restart scheduler |
|
|
|
|
|
|
|
- name: write the kubecfg (auth) file for scheduler |
|
|
|
template: src=scheduler.kubeconfig.j2 dest={{ kube_config_dir }}/scheduler.kubeconfig |
|
|
|
template: src=scheduler.kubeconfig.j2 dest={{ kube_config_dir }}/scheduler.kubeconfig backup=yes |
|
|
|
notify: |
|
|
|
- restart scheduler |
|
|
|
|
|
|
|
- name: write the kubecfg (auth) file for kubectl |
|
|
|
template: src=kubectl.kubeconfig.j2 dest={{ kube_config_dir }}/kubectl.kubeconfig |
|
|
|
template: src=kubectl.kubeconfig.j2 dest={{ kube_config_dir }}/kubectl.kubeconfig backup=yes |
|
|
|
|
|
|
|
- name: write the config files for proxy |
|
|
|
template: src=proxy.j2 dest={{ kube_config_dir }}/proxy |
|
|
|
template: src=proxy.j2 dest={{ kube_config_dir }}/proxy backup=yes |
|
|
|
notify: |
|
|
|
- restart daemons |
|
|
|
|
|
|
|
- name: write the kubecfg (auth) file for proxy |
|
|
|
template: src=proxy.kubeconfig.j2 dest={{ kube_config_dir }}/proxy.kubeconfig |
|
|
|
template: src=proxy.kubeconfig.j2 dest={{ kube_config_dir }}/proxy.kubeconfig backup=yes |
|
|
|
|
|
|
|
- name: populate users for basic auth in API |
|
|
|
lineinfile: |
|
|
|
dest: "{{ kube_users_dir }}/known_users.csv" |
|
|
|
create: yes |
|
|
|
line: '{{ item.value.pass }},{{ item.key }},{{ item.value.role }}' |
|
|
|
backup: yes |
|
|
|
with_dict: "{{ kube_users }}" |
|
|
|
notify: |
|
|
|
- restart apiserver |
|
|
|