--- - name: Create docker-gc tempdir command: mktemp -d register: templates_tmpdir # NOTE: oc_adm_policy_user does not support -z (yet) - name: Add dockergc as priviledged shell: oc adm policy add-scc-to-user -z dockergc privileged # oc_adm_policy_user: # user: dockergc # resource_kind: scc # resource_name: privileged # state: present - name: Create dockergc DaemonSet become: yes template: src: dockergc-ds.yaml.j2 dest: "{{ templates_tmpdir.stdout }}/dockergc-ds.yaml" - name: Apply dockergc DaemonSet oc_obj: state: present kind: DaemonSet name: "dockergc" files: - "{{ templates_tmpdir.stdout }}/dockergc-ds.yaml"