Packer.Images/ansible/roles/firstboot/files/ansible_payload/roles/workloadcluster/tasks/clusterapi.yml

- name: Configure clusterctl
  ansible.builtin.template:
    src: clusterctl.j2
    dest: /opt/metacluster/cluster-api/clusterctl.yaml
  vars:
    _template:
      version:
        base: "{{ components.clusterapi.management.version.base }}"
        cert_manager: "{{ components.clusterapi.management.version.cert_manager }}"
        infrastructure_vsphere: "{{ components.clusterapi.management.version.infrastructure_vsphere }}"
        ipam_incluster: "{{ components.clusterapi.management.version.ipam_incluster }}"
      hv:
        fqdn: "{{ vapp['hv.fqdn'] }}"
        tlsthumbprint: "{{ tls_thumbprint.stdout }}"
        username: "{{ vapp['hv.username'] }}"
        password: "{{ vapp['hv.password'] }}"
        datacenter: "{{ vcenter_info.datacenter }}"
        datastore: "{{ vcenter_info.datastore }}"
        network: "{{ vcenter_info.network }}"
        resourcepool: "{{ vcenter_info.resourcepool }}"
        folder: "{{ vcenter_info.folder }}"
      cluster:
        nodetemplate: "{{ (components.clusterapi.workload.node_template.name | split('.'))[:-1] | join('.') }}"
        publickey: "{{ vapp['guestinfo.rootsshkey'] }}"
        version: "{{ components.clusterapi.workload.version.k8s }}"
        vip: "{{ vapp['workloadcluster.vip'] }}"

- name: Update image references to use local registry
  ansible.builtin.replace:
    dest: "{{ item.root + '/' + item.path }}"
    regexp: '([ ]+image:[ "]+)(?!({{ _template.pattern }}|"{{ _template.pattern }}))'
    replace: '\1{{ _template.pattern }}'
  vars:
    _template:
      pattern: registry.{{ vapp['metacluster.fqdn'] }}/library/
  loop: "{{ lookup('community.general.filetree', '/opt/metacluster/cluster-api') }}"
  loop_control:
    label: "{{ item.path }}"
  when:
    - item.path is search('.yaml')
    - item.path is not search("clusterctl.yaml|metadata.yaml")

- name: Generate kustomization template
  ansible.builtin.template:
    src: kustomization.cluster-template.j2
    dest: /opt/metacluster/cluster-api/infrastructure-vsphere/{{ components.clusterapi.management.version.infrastructure_vsphere }}/kustomization.yaml
  vars:
    _template:
      fqdn: "{{ vapp['metacluster.fqdn'] }}"
      rootca: "{{ stepca_cm_certs.resources[0].data['root_ca.crt'] }}"
      script:
        # Base64 encoded; to avoid variable substitution when clusterctl parses the cluster-template.yml
        encoded: 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
      runcmds:
        - update-ca-certificates
        - bash /root/network.sh

- name: Initialize Cluster API management cluster
  ansible.builtin.shell:
    cmd: >-
      clusterctl init \
        -v5 \
        --infrastructure vsphere:{{ components.clusterapi.management.version.infrastructure_vsphere }} \
        --ipam in-cluster:{{ components.clusterapi.management.version.ipam_incluster }} \
        --config ./clusterctl.yaml \
        --kubeconfig {{ kubeconfig.path }}
    chdir: /opt/metacluster/cluster-api