--- - name: tokens | copy the token gen script copy: src=kube-gen-token.sh dest={{ kube_script_dir }} mode=u+x - name: tokens | generate tokens for master components command: "{{ kube_script_dir }}/kube-gen-token.sh {{ item[0] }}-{{ item[1] }}" environment: TOKEN_DIR: "{{ kube_token_dir }}" with_nested: - [ "system:controller_manager", "system:scheduler", "system:kubectl", 'system:proxy' ] - "{{ groups['kube-master'][0] }}" register: gentoken changed_when: "'Added' in gentoken.stdout" notify: - restart daemons - name: tokens | generate tokens for node components command: "{{ kube_script_dir }}/kube-gen-token.sh {{ item[0] }}-{{ item[1] }}" environment: TOKEN_DIR: "{{ kube_token_dir }}" with_nested: - [ 'system:kubelet', 'system:proxy' ] - "{{ groups['kube-node'] }}" register: gentoken changed_when: "'Added' in gentoken.stdout" notify: - restart daemons