summaryrefslogtreecommitdiff
path: root/roles/kubernetes/kubeadm/base/tasks/net_kubeguard.yml
diff options
context:
space:
mode:
Diffstat (limited to 'roles/kubernetes/kubeadm/base/tasks/net_kubeguard.yml')
-rw-r--r--roles/kubernetes/kubeadm/base/tasks/net_kubeguard.yml13
1 files changed, 9 insertions, 4 deletions
diff --git a/roles/kubernetes/kubeadm/base/tasks/net_kubeguard.yml b/roles/kubernetes/kubeadm/base/tasks/net_kubeguard.yml
index 2d706a03..ed5403d3 100644
--- a/roles/kubernetes/kubeadm/base/tasks/net_kubeguard.yml
+++ b/roles/kubernetes/kubeadm/base/tasks/net_kubeguard.yml
@@ -1,12 +1,17 @@
---
+- name: fail if kubernetes_network_plugin_variant is set to with-kube-router
+ run_once: yes
+ assert:
+ msg: Unfortunately using kube-router together with kubeguard does not work at the moment!
+ that: "kubernetes_network_plugin_variant != 'with-kube-router'"
+
- name: make sure kubernetes_network_plugin_replaces_kube_proxy is not set
when:
- - kubernetes_network_plugin_variant != 'with-kube-router'
+ - "kubernetes_network_plugin_variant != 'with-kube-router'"
run_once: yes
assert:
- msg: "kubeguard variant '{{ kubernetes_network_plugin_variant }}' can not replace kube-proxy please set kubernetes_network_plugin_replaces_kube_proxy to false or configure a differnt kubernetes_network_plugin_variant."
- that:
- - not kubernetes_network_plugin_replaces_kube_proxy
+ msg: "kubeguard variant '{{ kubernetes_network_plugin_variant }}' can not replace kube-proxy, please set kubernetes_network_plugin_replaces_kube_proxy to false or configure a differnt kubernetes_network_plugin_variant."
+ that: not kubernetes_network_plugin_replaces_kube_proxy
- name: install wireguard