k3s unistall script
This commit is contained in:
0
ansible-5/roles/prod.k3s/tasks/cert_manager.yml
Normal file
0
ansible-5/roles/prod.k3s/tasks/cert_manager.yml
Normal file
@@ -13,52 +13,52 @@
|
||||
with_items: "{{fstab.gluster}}"
|
||||
become: true
|
||||
|
||||
# provision docker image registry
|
||||
# add helm repositories
|
||||
- include_tasks: add_repos.yml
|
||||
|
||||
# https://artifacthub.io/packages/helm/twuni/docker-registry
|
||||
- name: Deploy latest version of docker-registry in dev-tools namespace
|
||||
local_action:
|
||||
module: kubernetes.core.helm
|
||||
name: dkregistry
|
||||
chart_ref: twuni/docker-registry
|
||||
release_namespace: dev-tools
|
||||
create_namespace: True
|
||||
values:
|
||||
replicaCount: 1
|
||||
ingress:
|
||||
enabled: true
|
||||
hosts:
|
||||
- dkregistry.xai-corp.net
|
||||
className: traefik
|
||||
secrets.htpassword: me1
|
||||
extraVolumeMounts:
|
||||
- name: registry-data
|
||||
mountPath: /var/lib/registry-data
|
||||
- name: registry-auth
|
||||
mountPath: /auth
|
||||
- name: registry-auth
|
||||
mountPath: /etc/docker/registry/
|
||||
- name: letsencrypt-data
|
||||
mountPath: /certs
|
||||
- name: letsencrypt-config
|
||||
mountPath: /etc/letsencrypt
|
||||
extraVolumes:
|
||||
- name: registry-data
|
||||
hostPath:
|
||||
path: /opt/shared/dkregistry/data
|
||||
- name: registry-auth
|
||||
hostPath:
|
||||
path: /opt/shared/dkregistry/auth
|
||||
- name: registry-config
|
||||
hostPath:
|
||||
path: /opt/shared/dkregistry/config/
|
||||
- name: letsencrypt-data
|
||||
hostPath:
|
||||
path: /opt/shared/letsencrypt-2
|
||||
- name: letsencrypt-config
|
||||
hostPath:
|
||||
path: /opt/shared/letsencrypt-2
|
||||
#- name: Deploy latest version of docker-registry in dev-tools namespace
|
||||
# local_action:
|
||||
# module: kubernetes.core.helm
|
||||
# name: dkregistry
|
||||
# chart_ref: twuni/docker-registry
|
||||
# release_namespace: dev-tools
|
||||
# create_namespace: True
|
||||
# values:
|
||||
# replicaCount: 1
|
||||
# ingress:
|
||||
# enabled: true
|
||||
# hosts:
|
||||
# - dkregistry.xai-corp.net
|
||||
# className: traefik
|
||||
# secrets.htpassword: me1
|
||||
# extraVolumeMounts:
|
||||
# - name: registry-data
|
||||
# mountPath: /var/lib/registry-data
|
||||
# - name: registry-auth
|
||||
# mountPath: /auth
|
||||
# - name: registry-auth
|
||||
# mountPath: /etc/docker/registry/
|
||||
# - name: letsencrypt-data
|
||||
# mountPath: /certs
|
||||
# - name: letsencrypt-config
|
||||
# mountPath: /etc/letsencrypt
|
||||
# extraVolumes:
|
||||
# - name: registry-data
|
||||
# hostPath:
|
||||
# path: /opt/shared/dkregistry/data
|
||||
# - name: registry-auth
|
||||
# hostPath:
|
||||
# path: /opt/shared/dkregistry/auth
|
||||
# - name: registry-config
|
||||
# hostPath:
|
||||
# path: /opt/shared/dkregistry/config/
|
||||
# - name: letsencrypt-data
|
||||
# hostPath:
|
||||
# path: /opt/shared/letsencrypt-2
|
||||
# - name: letsencrypt-config
|
||||
# hostPath:
|
||||
# path: /opt/shared/letsencrypt-2
|
||||
# extraEnvVars:
|
||||
# - name: REGISTRY_HTTP_SECRET
|
||||
# value: aabuioqlwlcpp2
|
||||
@@ -80,30 +80,30 @@
|
||||
# provision argoCD
|
||||
|
||||
# provision graphana
|
||||
- name: Copy manifest for graphana
|
||||
ansible.builtin.copy:
|
||||
src: manifests/graphana.helm.yaml
|
||||
dest: /var/lib/rancher/k3s/server/manifests/graphana.helm.yaml
|
||||
become: true
|
||||
|
||||
- name: Copy manifest for docker registry
|
||||
ansible.builtin.copy:
|
||||
src: manifests/registry.helm.yaml
|
||||
dest: /var/lib/rancher/k3s/server/manifests/dkregistry.helm.yaml
|
||||
become: true
|
||||
|
||||
- name: Copy manifest for mariadb
|
||||
ansible.builtin.copy:
|
||||
src: manifests/mariadb.helm.yaml
|
||||
dest: /var/lib/rancher/k3s/server/manifests/mariadb.helm.yaml
|
||||
become: true
|
||||
|
||||
- name: remove manifests
|
||||
ansible.builtin.file:
|
||||
state: absent
|
||||
path: "{{ item }}"
|
||||
loop:
|
||||
- /var/lib/rancher/k3s/server/manifests/graphana.helm.yaml
|
||||
- /var/lib/rancher/k3s/server/manifests/dkregistry.helm.yaml
|
||||
- /var/lib/rancher/k3s/server/manifests/mariadb.helm.yaml
|
||||
become: true
|
||||
#- name: Copy manifest for graphana
|
||||
# ansible.builtin.copy:
|
||||
# src: manifests/graphana.helm.yaml
|
||||
# dest: /var/lib/rancher/k3s/server/manifests/graphana.helm.yaml
|
||||
# become: true
|
||||
#
|
||||
#- name: Copy manifest for docker registry
|
||||
# ansible.builtin.copy:
|
||||
# src: manifests/registry.helm.yaml
|
||||
# dest: /var/lib/rancher/k3s/server/manifests/dkregistry.helm.yaml
|
||||
# become: true
|
||||
#
|
||||
#- name: Copy manifest for mariadb
|
||||
# ansible.builtin.copy:
|
||||
# src: manifests/mariadb.helm.yaml
|
||||
# dest: /var/lib/rancher/k3s/server/manifests/mariadb.helm.yaml
|
||||
# become: true
|
||||
#
|
||||
#- name: remove manifests
|
||||
# ansible.builtin.file:
|
||||
# state: absent
|
||||
# path: "{{ item }}"
|
||||
# loop:
|
||||
# - /var/lib/rancher/k3s/server/manifests/graphana.helm.yaml
|
||||
# - /var/lib/rancher/k3s/server/manifests/dkregistry.helm.yaml
|
||||
# - /var/lib/rancher/k3s/server/manifests/mariadb.helm.yaml
|
||||
# become: true
|
||||
|
||||
Reference in New Issue
Block a user