From 5f7acc3d202f720e3381b83828b242481323148d Mon Sep 17 00:00:00 2001 From: Christian Pointner Date: Sun, 3 Jan 2021 20:21:33 +0100 Subject: kubernetes: upgrade kubeguard network plugin --- roles/kubernetes/kubeadm/base/tasks/net_kubeguard.yml | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) (limited to 'roles/kubernetes/kubeadm/base/tasks/net_kubeguard.yml') diff --git a/roles/kubernetes/kubeadm/base/tasks/net_kubeguard.yml b/roles/kubernetes/kubeadm/base/tasks/net_kubeguard.yml index 2d706a03..ed5403d3 100644 --- a/roles/kubernetes/kubeadm/base/tasks/net_kubeguard.yml +++ b/roles/kubernetes/kubeadm/base/tasks/net_kubeguard.yml @@ -1,12 +1,17 @@ --- +- name: fail if kubernetes_network_plugin_variant is set to with-kube-router + run_once: yes + assert: + msg: Unfortunately using kube-router together with kubeguard does not work at the moment! + that: "kubernetes_network_plugin_variant != 'with-kube-router'" + - name: make sure kubernetes_network_plugin_replaces_kube_proxy is not set when: - - kubernetes_network_plugin_variant != 'with-kube-router' + - "kubernetes_network_plugin_variant != 'with-kube-router'" run_once: yes assert: - msg: "kubeguard variant '{{ kubernetes_network_plugin_variant }}' can not replace kube-proxy please set kubernetes_network_plugin_replaces_kube_proxy to false or configure a differnt kubernetes_network_plugin_variant." - that: - - not kubernetes_network_plugin_replaces_kube_proxy + msg: "kubeguard variant '{{ kubernetes_network_plugin_variant }}' can not replace kube-proxy, please set kubernetes_network_plugin_replaces_kube_proxy to false or configure a differnt kubernetes_network_plugin_variant." + that: not kubernetes_network_plugin_replaces_kube_proxy - name: install wireguard -- cgit v1.2.3