diff options
| author | Christian Pointner <equinox@spreadspace.org> | 2023-04-23 00:01:44 +0200 |
|---|---|---|
| committer | Christian Pointner <equinox@spreadspace.org> | 2023-04-23 00:01:44 +0200 |
| commit | 6424e5079fd29f377350df26f7768ef2bcd5f5a4 (patch) | |
| tree | 84b52a45492fb6a43916767a5f3f5cb61fb92ea9 /roles/kubernetes/standalone/base/tasks/main.yml | |
| parent | ch-equinox-* add k9s and kubeletctl (diff) | |
kubernetes/standalone: install kubeletctl and enable x509 based auth
Diffstat (limited to 'roles/kubernetes/standalone/base/tasks/main.yml')
| -rw-r--r-- | roles/kubernetes/standalone/base/tasks/main.yml | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/roles/kubernetes/standalone/base/tasks/main.yml b/roles/kubernetes/standalone/base/tasks/main.yml index d7f47ff4..495fd4ff 100644 --- a/roles/kubernetes/standalone/base/tasks/main.yml +++ b/roles/kubernetes/standalone/base/tasks/main.yml @@ -16,6 +16,9 @@ dest: /etc/kubernetes/kubelet.yml notify: restart kubelet +- name: create TLS certificates and keys + import_tasks: tls.yml + - name: make sure kubelet is enabled and running systemd: name: kubelet.service @@ -52,3 +55,19 @@ name: kube-standalone-local-services.service state: started enabled: yes + +- name: install kubeletctl + apt: + name: kubeletctl + state: present + +- name: add kubeletctl config for shells + loop: + - zsh + - bash + blockinfile: + path: "/root/.{{ item }}rc" + create: yes + marker: "### {mark} ANSIBLE MANAGED BLOCK for kubeletctl ###" + content: | + alias kubeletctl="kubeletctl --server 127.0.0.1 --cacert /etc/ssl/standalone-kubelet/ca-crt.pem --cert /etc/ssl/standalone-kubelet/client/crt.pem --key /etc/ssl/standalone-kubelet/client/key.pem --ignoreconfig" |