blob: 4ccbf4430dad6f0669a280fd494cefefa4dbeb8a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
|
---
- fail:
msg: "Both 'certfile' and 'keyfile' keys must be specified when supplying the openshift_hosted_router_certificate variable."
when: openshift_hosted_router_certificate is defined and ('certfile' not in openshift_hosted_router_certificate or 'keyfile' not in openshift_hosted_router_certificate)
- name: Read router certificate and key
slurp:
src: "{{ item }}"
register: openshift_router_certificate_output
with_items:
- "{{ openshift_hosted_router_certificate.certfile }}"
- "{{ openshift_hosted_router_certificate.keyfile }}"
delegate_to: localhost
when: openshift_hosted_router_certificate is defined
- name: Persist certificate contents
openshift_facts:
role: hosted
openshift_env:
openshift_hosted_router_certificate_contents: "{% for certificate in openshift_router_certificate_output.results -%}{{ certificate.content | b64decode }}{% endfor -%}"
when: openshift_hosted_router_certificate is defined
- name: Create PEM certificate
copy:
content: "{{ openshift.hosted.router.certificate.contents }}"
dest: "{{ openshift_master_config_dir }}/openshift-router.pem"
mode: 0600
when: openshift.hosted.router.certificate | default(None) != None
- name: Retrieve list of openshift nodes
command: >
{{ openshift.common.client_binary }} --api-version='v1' -o json
get nodes -n default --config={{ openshift.common.config_base }}/master/admin.kubeconfig
register: openshift_hosted_router_nodes_json
changed_when: false
when: openshift.hosted.router.replicas | default(None) == None
- name: Collect nodes matching router selector
set_fact:
openshift_hosted_router_nodes: >
{{ (openshift_hosted_router_nodes_json.stdout|from_json)['items']
| oo_oc_nodes_matching_selector(openshift.hosted.router.selector) }}
when: openshift.hosted.router.replicas | default(None) == None
- name: Create OpenShift router
command: >
{{ openshift.common.admin_binary }} router --create
{% if openshift.hosted.router.replicas | default(None) != None -%}
--replicas={{ openshift.hosted.router.replicas }}
{% else -%}
--replicas={{ openshift_hosted_router_nodes | length }}
{% endif %}
{% if openshift.hosted.router.certificate | default(None) != None -%}
--default-cert={{ openshift_master_config_dir }}/openshift-router.pem
{% endif -%}
--namespace=default
--service-account=router
--selector='{{ openshift.hosted.router.selector }}'
--credentials={{ openshift_master_config_dir }}/openshift-router.kubeconfig
{% if openshift.hosted.router.registryurl | default(None)!= None -%}
--images='{{ openshift.hosted.router.registryurl }}'
{% endif -%}
register: openshift_hosted_router_results
changed_when: "'service exists' not in openshift_hosted_router_results.stdout"
when: openshift.hosted.router.replicas | default(None) != None or (openshift_hosted_router_nodes is defined and openshift_hosted_router_nodes | length > 0)
|
