- name: Remover o diretório /tmp/stolon/kubernetes-files ansible.builtin.file: path: /tmp/stolon/kubernetes-files state: absent - name: Criar diretório temporário no remoto file: path: /tmp/stolon/kubernetes-files state: directory mode: '0755' - name: Copy file with owner and permissions ansible.builtin.copy: src: ../files dest: /tmp/stolon/kubernetes-files owner: fenix group: root mode: '0644' - name: Listar conteúdo do diretório remoto shell: ls -l /tmp/stolon/kubernetes-files/files register: resultado_ls - name: Buscar values.yaml do Bitwarden e aplicar remotamente hosts: localhost gather_facts: no tasks: - name: Criar diretório temporário no remoto file: path: /tmp/stolon/kubernetes-files state: directory mode: '0755' - name: Buscar values.yaml do Bitwarden shell: | bw get item "iac.ansible.dockersecrets" --session $BW_SESSION | jq -r '.notes' > /tmp/stolon/kubernetes-files/files/docker-secrets.yaml bw get item "iac.ansible.stolon.repl.secret" --session $BW_SESSION | jq -r '.notes' > /tmp/stolon/kubernetes-files/files/stolon-repl-secret.yaml bw get item "iac.ansible.stolon.keeper.secret" --session $BW_SESSION | jq -r '.notes' > /tmp/stolon/kubernetes-files/files/stolon-secret.yaml args: executable: /bin/bash environment: BW_SESSION: "{{ lookup('env', 'BW_SESSION') }}" - name: Copiar ficheiros para o nó remoto hosts: localhost gather_facts: no vars: remote_host: "k8s-node-01" files_to_copy: - { src: "/tmp/stolon/kubernetes-files/files/docker-secrets.yaml", dest: "/tmp/stolon/kubernetes-files/files/docker-secrets.yaml" } - { src: "/tmp/stolon/kubernetes-files/files/stolon-repl-secret.yaml", dest: "/tmp/stolon/kubernetes-files/files/stolon-repl-secret.yaml" } - { src: "/tmp/stolon/kubernetes-files/files/stolon-secret.yaml", dest: "/tmp/stolon/kubernetes-files/files/stolon-secret.yaml" } tasks: - name: Copiar ficheiros para o nó remoto copy: src: "{{ item.src }}" dest: "{{ item.dest }}" mode: '0600' loop: "{{ files_to_copy }}" delegate_to: "{{ groups['master'][0] }}" #- name: Buscar values.yaml do Bitwarden # shell: | # bw get item "iac.ansible.dockersecrets" --session {{ lookup('env', 'BW_SESSION') }} | jq -r '.notes' > /tmp/stolon/kubernetes-files/files/docker-secrets.yaml # bw get item "iac.ansible.stolon.repl.secret" --session {{ lookup('env', 'BW_SESSION') }} | jq -r '.notes' > /tmp/stolon/kubernetes-files/files/stolon-repl-secret.yaml # bw get item "iac.ansible.stolon.keeper.secret" --session {{ lookup('env', 'BW_SESSION') }} | jq -r '.notes' > /tmp/stolon/kubernetes-files/files/stolon-secret.yaml # args: # executable: /bin/bash - name: Mostrar resultado do ls debug: var: resultado_ls.stdout_lines - name: Aplicar o stolon become: yes become_user: fenix shell: | kubectl apply -f /tmp/stolon/kubernetes-files/files/stolon-namespace.yaml kubectl apply -f /tmp/stolon/kubernetes-files/files/ environment: KUBECONFIG: /home/fenix/.kube/config