07cc981971
* Move front-proxy-client certs back to kube mount We want the same CA for all k8s certs * Refactor vault to use a third party module The module adds idempotency and reduces some of the repetitive logic in the vault role Requires ansible-modules-hashivault on ansible node and hvac on the vault hosts themselves Add upgrade test scenario Remove bootstrap-os tags from tasks * fix upgrade issues * improve unseal logic * specify ca and fix etcd check * Fix initialization check bump machine size
28 lines
636 B
YAML
28 lines
636 B
YAML
---
|
|
# raw: cat /etc/issue.net | grep '{{ bootstrap_versions }}'
|
|
|
|
- name: Bootstrap | Check if bootstrap is needed
|
|
raw: which "{{ item }}"
|
|
register: need_bootstrap
|
|
failed_when: false
|
|
changed_when: false
|
|
with_items:
|
|
- python
|
|
- python-apt
|
|
- pip
|
|
- dbus-daemon
|
|
tags:
|
|
- facts
|
|
|
|
- name: Bootstrap | Install python 2.x and pip
|
|
raw:
|
|
apt-get update && \
|
|
DEBIAN_FRONTEND=noninteractive apt-get install -y python-minimal python-pip dbus
|
|
when:
|
|
"{{ need_bootstrap.results | map(attribute='rc') | sort | last | bool }}"
|
|
|
|
- set_fact:
|
|
ansible_python_interpreter: "/usr/bin/python"
|
|
tags:
|
|
- facts
|