mirror of
https://github.com/techno-tim/k3s-ansible.git
synced 2026-10-23 20:22:03 +02:00
Timothy Stewart
869a7ccbd3
- correct the Calico TigeraStatus resource kind\n- document tunnel as the supported Cilium routing mode\n- validate load balancer addresses across range and CIDR pools
99 lines
3.3 KiB
YAML
99 lines
3.3 KiB
YAML
---
|
|
- name: Deploy example
|
|
block:
|
|
- name: "Create namespace: {{ testing_namespace }}"
|
|
kubernetes.core.k8s:
|
|
api_version: v1
|
|
kind: Namespace
|
|
name: "{{ testing_namespace }}"
|
|
state: present
|
|
wait: true
|
|
kubeconfig: "{{ kubecfg_path }}"
|
|
|
|
- name: Apply example manifests
|
|
kubernetes.core.k8s:
|
|
src: "{{ example_manifests_path }}/{{ item }}"
|
|
namespace: "{{ testing_namespace }}"
|
|
state: present
|
|
wait: true
|
|
kubeconfig: "{{ kubecfg_path }}"
|
|
with_items:
|
|
- deployment.yml
|
|
- service.yml
|
|
|
|
- name: Get info about nginx service
|
|
kubernetes.core.k8s_info:
|
|
kind: service
|
|
name: nginx
|
|
namespace: "{{ testing_namespace }}"
|
|
kubeconfig: "{{ kubecfg_path }}"
|
|
vars:
|
|
metallb_ip: status.loadBalancer.ingress[0].ip
|
|
metallb_port: spec.ports[0].port
|
|
register: nginx_services
|
|
|
|
- name: Assert that the nginx welcome page is available
|
|
ansible.builtin.uri:
|
|
url: http://{{ ip | ansible.utils.ipwrap }}:{{ port_ }}/
|
|
return_content: true
|
|
register: result
|
|
failed_when: "'Welcome to nginx!' not in result.content"
|
|
vars:
|
|
ip: >-
|
|
{{ nginx_services.resources[0].status.loadBalancer.ingress[0].ip }}
|
|
port_: >-
|
|
{{ nginx_services.resources[0].spec.ports[0].port }}
|
|
|
|
- name: Initialize load balancer address range check
|
|
ansible.builtin.set_fact:
|
|
lb_addr_in_range: false
|
|
lb_ip_value: >-
|
|
{{ nginx_services.resources[0].status.loadBalancer.ingress[0].ip }}
|
|
|
|
- name: Check load balancer address against start-end pools
|
|
ansible.builtin.set_fact:
|
|
lb_addr_in_range: true
|
|
loop: "{{ verify_lb_ip_range }}"
|
|
loop_control:
|
|
label: "{{ item }}"
|
|
when:
|
|
- "'-' in item"
|
|
- "'/' not in item"
|
|
- >-
|
|
(lb_ip_value | ansible.utils.ipaddr('int') | int) >=
|
|
(item.split('-')[0] | ansible.utils.ipaddr('int') | int)
|
|
- >-
|
|
(lb_ip_value | ansible.utils.ipaddr('int') | int) <=
|
|
(item.split('-')[1] | ansible.utils.ipaddr('int') | int)
|
|
|
|
- name: Check load balancer address against CIDR pools
|
|
ansible.builtin.set_fact:
|
|
lb_addr_in_range: true
|
|
loop: "{{ verify_lb_ip_range }}"
|
|
loop_control:
|
|
label: "{{ item }}"
|
|
when:
|
|
- "'/' in item"
|
|
- (lb_ip_value | ansible.utils.ipaddr(item)) is string
|
|
|
|
- name: Assert that the load balancer address is within a configured pool
|
|
ansible.builtin.assert:
|
|
that: lb_addr_in_range
|
|
success_msg: "LoadBalancer address {{ lb_ip_value }} is in a configured range"
|
|
fail_msg: >-
|
|
LoadBalancer address {{ lb_ip_value }} is not in a configured
|
|
range {{ verify_lb_ip_range }}
|
|
# Deactivated linter rules:
|
|
# - jinja[invalid]: As of version 6.6.0, ansible-lint complains that the input to ipwrap
|
|
# would be undefined. This will not be the case during playbook execution.
|
|
# noqa jinja[invalid]
|
|
|
|
always:
|
|
- name: "Remove namespace: {{ testing_namespace }}"
|
|
kubernetes.core.k8s:
|
|
api_version: v1
|
|
kind: Namespace
|
|
name: "{{ testing_namespace }}"
|
|
state: absent
|
|
kubeconfig: "{{ kubecfg_path }}"
|