build: Rebase pinniped to bitnami helm chart
Some checks failed
continuous-integration/drone/push Build is failing

This commit is contained in:
2023-08-22 12:02:13 +02:00
parent b17501ee1d
commit 1a1440f751
15 changed files with 216 additions and 80 deletions

View File

@ -14,15 +14,6 @@
loop_control:
label: "{{ item.dest | basename }}"
- name: Parse pinniped manifests for container images
ansible.builtin.shell:
# The pinniped manifest specify container images with *both* tag and digest; which is not supported by skopeo
cmd: cat {{ item.dest }} | yq --no-doc eval '.. | .image? | select(.) | sub("@.*", "")' | awk '!/ /'
register: pinniped_parsedmanifests
loop: "{{ pinniped_manifests.results }}"
loop_control:
label: "{{ item.dest | basename }}"
- name: Parse metacluster helm charts for container images
ansible.builtin.shell:
cmd: "{{ item.value.helm.parse_logic }}"
@ -52,8 +43,6 @@
results: "{{ kubeadmimages.stdout_lines }}"
- source: clusterapi
results: "{{ clusterapi_parsedmanifests | json_query('results[*].stdout_lines') | select() | flatten | list }}"
- source: pinniped
results: "{{ pinniped_parsedmanifests | json_query('results[*].stdout_lines') | select() | flatten | list }}"
loop_control:
label: "{{ item.source }}"
@ -75,4 +64,4 @@
docker://{{ item }} \
docker-archive:./{{ ( item | regex_findall('[^/:]+'))[-2] }}_{{ lookup('ansible.builtin.password', '/dev/null length=5 chars=ascii_lowercase,digits seed={{ item }}') }}.tar:{{ item }}
chdir: /opt/metacluster/container-images
loop: "{{ (containerimages_charts + containerimages_kubeadm + containerimages_clusterapi + containerimages_pinniped + dependencies.container_images) | flatten | unique | sort }}"
loop: "{{ (containerimages_charts + containerimages_kubeadm + containerimages_clusterapi + dependencies.container_images) | flatten | unique | sort }}"

View File

@ -16,7 +16,6 @@
- /opt/metacluster/helm-charts
- /opt/metacluster/k3s
- /opt/metacluster/kube-vip
- /opt/metacluster/pinniped
- /opt/workloadcluster/git-repositories/gitops/charts
- /opt/workloadcluster/git-repositories/gitops/values
- /opt/workloadcluster/helm-charts

View File

@ -16,8 +16,7 @@
{ 'components': (
metacluster_chartvalues |
combine({ 'clusterapi': components.clusterapi }) |
combine({ 'kubevip' : components.kubevip }) |
combine({ 'pinniped' : components.pinniped }) ),
combine({ 'kubevip' : components.kubevip }) ),
'appliance': {
'version': (applianceversion)
}
@ -100,29 +99,6 @@
delay: 5
until: kubevip_manifest is not failed
- name: Download pinniped manifests
ansible.builtin.get_url:
url: "{{ item.url }}"
dest: /opt/metacluster/pinniped/{{ item.dest }}
register: pinniped_manifests
loop:
# The 'supervisor' runs in the metacluster and handles authentication
- url: https://github.com/vmware-tanzu/pinniped/releases/download/{{ components.pinniped.version }}/install-pinniped-supervisor.yaml
dest: pinniped-supervisor.yaml
# The 'local-user-authenticator' can be used to run a simple OIDC provider based on useraccounts defined in secrets.
- url: https://github.com/vmware-tanzu/pinniped/releases/download/{{ components.pinniped.version }}/install-local-user-authenticator.yaml
dest: local-user-authenticator.yaml
# The 'concierge' runs in downstream clusters and forwards authentication requests
- url: https://github.com/vmware-tanzu/pinniped/releases/download/{{ components.pinniped.version }}/install-pinniped-concierge-crds.yaml
dest: pinniped-concierge-crds.yaml
- url: https://github.com/vmware-tanzu/pinniped/releases/download/{{ components.pinniped.version }}/install-pinniped-concierge-resources.yaml
dest: pinniped-concierge-resources.yaml
loop_control:
label: "{{ item.dest }}"
retries: 5
delay: 5
until: pinniped_manifests is not failed
# - name: Inject manifests
# ansible.builtin.template:
# src: "{{ item.type }}.j2"