homeserver/roles/mgrote.sealed-secrets/tasks/import.yml
mg 135bd53414 k3s - Basics (#423)
Co-authored-by: Michael Grote <michael.grote@posteo.de>
Reviewed-on: #423
2022-11-04 20:58:37 +01:00

29 lines
807 B
YAML

---
- name: check if private key exists
ansible.builtin.command: kubectl get secrets sealed-secrets-key9mpfq -n kube-system
register: key
ignore_errors: yes
changed_when: false
- name: Template private key file
ansible.builtin.template:
src: private.key.j2
dest: /root/private.key
owner: root
group: root
mode: '0400'
when: key.rc not in [ 0 ]
no_log: True
- name: apply private key
ansible.builtin.command: kubectl apply -f /root/private.key
when: key.rc not in [ 0 ]
- name: remove old pod
ansible.builtin.command: kubectl delete pod -n kube-system -l name=sealed-secrets-controller
when: key.rc not in [ 0 ]
- name: remove private key file
ansible.builtin.file:
path: /root/private.key
state: absent