4 files changed, 153 insertions, 0 deletions
diff --git a/roles/kubernetes/decorations/tasks/annotations.yml b/roles/kubernetes/decorations/tasks/annotations.yml
new file mode 100644
index 00000000..9b47ecbf
--- /dev/null
+++ b/roles/kubernetes/decorations/tasks/annotations.yml
@@ -0,0 +1,44 @@
+---
+- name: get list of current annotations
+  delegate_to: "{{ groups['_kubernetes_primary_controlplane_node_'] | first }}"
+  check_mode: no
+  command: kubectl --kubeconfig /etc/kubernetes/admin.conf get node '{{ kubernetes_node_name }}' -o jsonpath='{.metadata.annotations}'
+  changed_when: false
+  register: kubectl_list_annotations
+
+- set_fact:
+    current_annotations: "{{ kubectl_list_annotations.stdout | from_json }}"
+
+- name: add annotations to node
+  delegate_to: "{{ groups['_kubernetes_primary_controlplane_node_'] | first }}"
+  loop: "{{ kubernetes_node_annotations | dict2items }}"
+  loop_control:
+    label: "{{ item.key }}={{ item.value }}"
+  when: "item.key not in current_annotations or current_annotations[item.key] != item.value"
+  command: kubectl --kubeconfig /etc/kubernetes/admin.conf annotate --overwrite node '{{ kubernetes_node_name }}' '{{ item.key }}={{ item.value }}'
+
+- name: add stamp files for managed annotations
+  loop: "{{ kubernetes_node_annotations | dict2items }}"
+  loop_control:
+    label: "{{ item.key }}={{ item.value }}"
+  copy:
+    dest: "/etc/kubernetes/decorations/annotations/{{ item.key }}"
+    content: "{{ item.value }}"
+
+- name: get list of managed labels
+  find:
+    path: /etc/kubernetes/decorations/annotations
+  register: managed_annotations
+
+- name: remove superflous annotations from node
+  delegate_to: "{{ groups['_kubernetes_primary_controlplane_node_'] | first }}"
+  loop: "{{ managed_annotations.files | map(attribute='path') | map('basename') }}"
+  when: "item not in kubernetes_node_annotations"
+  command: kubectl --kubeconfig /etc/kubernetes/admin.conf annotate --overwrite node '{{ kubernetes_node_name }}' '{{ item }}-'
+
+- name: remove stamp files for superflous annotations
+  loop: "{{ managed_annotations.files | map(attribute='path') | map('basename') }}"
+  when: "item not in kubernetes_node_annotations"
+  file:
+    path: "/etc/kubernetes/decorations/annotations/{{ item }}"
+    state: absent
diff --git a/roles/kubernetes/decorations/tasks/labels.yml b/roles/kubernetes/decorations/tasks/labels.yml
new file mode 100644
index 00000000..1517616e
--- /dev/null
+++ b/roles/kubernetes/decorations/tasks/labels.yml
@@ -0,0 +1,44 @@
+---
+- name: get list of current labels
+  delegate_to: "{{ groups['_kubernetes_primary_controlplane_node_'] | first }}"
+  check_mode: no
+  command: kubectl --kubeconfig /etc/kubernetes/admin.conf get node '{{ kubernetes_node_name }}' -o jsonpath='{.metadata.labels}'
+  changed_when: false
+  register: kubectl_list_labels
+
+- set_fact:
+    current_labels: "{{ kubectl_list_labels.stdout | from_json }}"
+
+- name: add labels to node
+  delegate_to: "{{ groups['_kubernetes_primary_controlplane_node_'] | first }}"
+  loop: "{{ kubernetes_node_labels | dict2items }}"
+  loop_control:
+    label: "{{ item.key }}={{ item.value }}"
+  when: "item.key not in current_labels or current_labels[item.key] != item.value"
+  command: kubectl --kubeconfig /etc/kubernetes/admin.conf label --overwrite node '{{ kubernetes_node_name }}' '{{ item.key }}={{ item.value }}'
+
+- name: add stamp files for managed labels
+  loop: "{{ kubernetes_node_labels | dict2items }}"
+  loop_control:
+    label: "{{ item.key }}={{ item.value }}"
+  copy:
+    dest: "/etc/kubernetes/decorations/labels/{{ item.key }}"
+    content: "{{ item.value }}"
+
+- name: get list of managed labels
+  find:
+    path: /etc/kubernetes/decorations/labels
+  register: managed_labels
+
+- name: remove superflous labels from node
+  delegate_to: "{{ groups['_kubernetes_primary_controlplane_node_'] | first }}"
+  loop: "{{ managed_labels.files | map(attribute='path') | map('basename') }}"
+  when: "item not in kubernetes_node_labels"
+  command: kubectl --kubeconfig /etc/kubernetes/admin.conf label --overwrite node '{{ kubernetes_node_name }}' '{{ item }}-'
+
+- name: remove stamp files for superflous labels
+  loop: "{{ managed_labels.files | map(attribute='path') | map('basename') }}"
+  when: "item not in kubernetes_node_labels"
+  file:
+    path: "/etc/kubernetes/decorations/labels/{{ item }}"
+    state: absent
diff --git a/roles/kubernetes/decorations/tasks/main.yml b/roles/kubernetes/decorations/tasks/main.yml
new file mode 100644
index 00000000..7d25c9de
--- /dev/null
+++ b/roles/kubernetes/decorations/tasks/main.yml
@@ -0,0 +1,21 @@
+---
+- name: generate directories for node decorations
+  loop:
+  - annotations
+  - labels
+  - taints
+  file:
+    path: "/etc/kubernetes/decorations/{{ item }}"
+    state: directory
+
+- name: manage node annotations
+  when: kubernetes_node_annotations is defined
+  include_tasks: annotations.yml
+
+- name: manage node labels
+  when: kubernetes_node_labels is defined
+  include_tasks: labels.yml
+
+- name: manage node taints
+  when: kubernetes_node_taints is defined
+  include_tasks: taints.yml
diff --git a/roles/kubernetes/decorations/tasks/taints.yml b/roles/kubernetes/decorations/tasks/taints.yml
new file mode 100644
index 00000000..fd60ef88
--- /dev/null
+++ b/roles/kubernetes/decorations/tasks/taints.yml
@@ -0,0 +1,44 @@
+---
+- name: get list of current taints
+  delegate_to: "{{ groups['_kubernetes_primary_controlplane_node_'] | first }}"
+  check_mode: no
+  command: kubectl --kubeconfig /etc/kubernetes/admin.conf get node '{{ kubernetes_node_name }}' -o jsonpath='{.spec.taints}'
+  changed_when: false
+  register: kubectl_list_taints
+
+- set_fact:
+    current_taints: "{{ kubectl_list_taints.stdout | ternary(kubectl_list_taints.stdout, '[]') | from_json }}"
+
+- name: add taints to node
+  delegate_to: "{{ groups['_kubernetes_primary_controlplane_node_'] | first }}"
+  loop: "{{ kubernetes_node_taints | dict2items }}"
+  loop_control:
+    label: "{{ item.key }}={{ item.value }}"
+  when: "item.key not in current_taints or current_taints[item.key] != item.value"
+  command: kubectl --kubeconfig /etc/kubernetes/admin.conf taint --overwrite node '{{ kubernetes_node_name }}' '{{ item.key }}={{ item.value }}'
+
+- name: add stamp files for managed taints
+  loop: "{{ kubernetes_node_taints | dict2items }}"
+  loop_control:
+    label: "{{ item.key }}={{ item.value }}"
+  copy:
+    dest: "/etc/kubernetes/decorations/taints/{{ item.key }}"
+    content: "{{ item.value }}"
+
+- name: get list of managed taints
+  find:
+    path: /etc/kubernetes/decorations/taints
+  register: managed_taints
+
+- name: remove superflous taints from node
+  delegate_to: "{{ groups['_kubernetes_primary_controlplane_node_'] | first }}"
+  loop: "{{ managed_taints.files | map(attribute='path') | map('basename') }}"
+  when: "item not in kubernetes_node_taints"
+  command: kubectl --kubeconfig /etc/kubernetes/admin.conf taint --overwrite node '{{ kubernetes_node_name }}' '{{ item }}-'
+
+- name: remove stamp files for superflous taints
+  loop: "{{ managed_taints.files | map(attribute='path') | map('basename') }}"
+  when: "item not in kubernetes_node_taints"
+  file:
+    path: "/etc/kubernetes/decorations/taints/{{ item }}"
+    state: absent