f80fd24a55
When running ansible-lint directly, we can see a lot of warning message like risky-file-permissions File permissions unset or incorrect This fixes the warning messages.
76 lines
2.5 KiB
YAML
76 lines
2.5 KiB
YAML
---
|
|
- name: Kubernetes Apps | set up necessary nodelocaldns parameters
|
|
set_fact:
|
|
primaryClusterIP: >-
|
|
{%- if dns_mode in ['coredns', 'coredns_dual'] -%}
|
|
{{ skydns_server }}
|
|
{%- elif dns_mode == 'manual' -%}
|
|
{{ manual_dns_server }}
|
|
{%- endif -%}
|
|
secondaryclusterIP: "{{ skydns_server_secondary }}"
|
|
when:
|
|
- enable_nodelocaldns
|
|
- inventory_hostname == groups['kube_control_plane'] | first
|
|
tags:
|
|
- nodelocaldns
|
|
- coredns
|
|
|
|
- name: Kubernetes Apps | Lay Down nodelocaldns Template
|
|
template:
|
|
src: "{{ item.file }}.j2"
|
|
dest: "{{ kube_config_dir }}/{{ item.file }}"
|
|
mode: 0644
|
|
with_items:
|
|
- { name: nodelocaldns, file: nodelocaldns-config.yml, type: configmap }
|
|
- { name: nodelocaldns, file: nodelocaldns-sa.yml, type: sa }
|
|
- { name: nodelocaldns, file: nodelocaldns-daemonset.yml, type: daemonset }
|
|
register: nodelocaldns_manifests
|
|
vars:
|
|
forwardTarget: >-
|
|
{%- if secondaryclusterIP is defined and dns_mode == 'coredns_dual' -%}
|
|
{{ primaryClusterIP }} {{ secondaryclusterIP }}
|
|
{%- else -%}
|
|
{{ primaryClusterIP }}
|
|
{%- endif -%}
|
|
upstreamForwardTarget: >-
|
|
{%- if resolvconf_mode == 'host_resolvconf' and upstream_dns_servers is defined and upstream_dns_servers|length > 0 -%}
|
|
{{ upstream_dns_servers|join(' ') }}
|
|
{%- else -%}
|
|
/etc/resolv.conf
|
|
{%- endif -%}
|
|
when:
|
|
- enable_nodelocaldns
|
|
- inventory_hostname == groups['kube_control_plane'] | first
|
|
tags:
|
|
- nodelocaldns
|
|
- coredns
|
|
|
|
- name: Kubernetes Apps | Lay Down nodelocaldns-secondary Template
|
|
template:
|
|
src: "{{ item.file }}.j2"
|
|
dest: "{{ kube_config_dir }}/{{ item.file }}"
|
|
mode: 0644
|
|
with_items:
|
|
- { name: nodelocaldns, file: nodelocaldns-second-daemonset.yml, type: daemonset }
|
|
register: nodelocaldns_second_manifests
|
|
vars:
|
|
forwardTarget: >-
|
|
{%- if secondaryclusterIP is defined and dns_mode == 'coredns_dual' -%}
|
|
{{ primaryClusterIP }} {{ secondaryclusterIP }}
|
|
{%- else -%}
|
|
{{ primaryClusterIP }}
|
|
{%- endif -%}
|
|
upstreamForwardTarget: >-
|
|
{%- if resolvconf_mode == 'host_resolvconf' and upstream_dns_servers is defined and upstream_dns_servers|length > 0 -%}
|
|
{{ upstream_dns_servers|join(' ') }}
|
|
{%- else -%}
|
|
/etc/resolv.conf
|
|
{%- endif -%}
|
|
when:
|
|
- enable_nodelocaldns
|
|
- enable_nodelocaldns_secondary
|
|
- inventory_hostname == groups['kube_control_plane'] | first
|
|
tags:
|
|
- nodelocaldns
|
|
- coredns
|