---
- name: install kube-router variant
  when: "kubernetes_network_plugin_variant == 'with-kube-router'"
  block:
  - name: generate kubeguard (kube-router) configuration
    template:
      src: "net_kubeguard/kube-router.{{ kubernetes_network_plugin_version }}.yml.j2"
      dest: /etc/kubernetes/network-plugin.yml

  - name: check if kubeguard (kube-router) is already installed
    check_mode: no
    command: kubectl --kubeconfig /etc/kubernetes/admin.conf diff -f /etc/kubernetes/network-plugin.yml
    failed_when: false
    changed_when: false
    register: kubeguard_diff_result

  - name: install kubeguard (kube-router) on to the cluster
    when: kubeguard_diff_result.rc != 0
    command: kubectl --kubeconfig /etc/kubernetes/admin.conf apply -f /etc/kubernetes/network-plugin.yml