Change gitea config;Remove image compression logic;Switch to template;Reenable/Move workaround

ansible/roles/firstboot/files/ansible_payload/roles/metacluster/tasks/assets.yml

@@ -1,12 +1,5 @@
-- name: Extract container images
-  ansible.builtin.unarchive:
-    src: /opt/metacluster/container-images/image-tarballs.tgz
-    dest: /opt/metacluster/container-images
-    list_files: yes
-  register: imagetarballs
-
 - name: Import container images
   ansible.builtin.command:
     cmd: k3s ctr image import {{ item }}
     chdir: /opt/metacluster/container-images
-  loop: "{{ imagetarballs.files }}"
+  with_fileglob: /opt/metacluster/container-images/*.tar

ansible/roles/firstboot/files/ansible_payload/roles/metacluster/tasks/certauthority.yml

@@ -29,20 +29,19 @@
 - name: Store root certificate in namespaced secrets
   kubernetes.core.k8s:
     state: present
-    definition:
+    template: secret.j2
-      apiVersion: v1
+  vars:
-      kind: Secret
+    _template:
-      metadata:
+      name: step-certificates-certs
-        name: step-certificates-certs
+      namespace: "{{ item.namespace }}"
-        namespace: "{{ item.namespace }}"
+      key: "{{ item.filename }}"
-      data:
+      value: "{{ stepca_cm_certs.resources[0].data['root_ca.crt'] | b64encode }}"
-        "{{ item.key }}": "{{ stepca_cm_certs.resources[0].data['root_ca.crt'] | b64encode }}"
     kubeconfig: "{{ kubeconfig.path }}"
   loop:
     - namespace: argo-cd
-      key: custom-ca-certificates.crt
+      filename: custom-ca-certificates.crt
     - namespace: kube-system
-      key: root_ca.crt
+      filename: root_ca.crt
 
 - name: Configure step-ca passthrough ingress
   ansible.builtin.template:

ansible/roles/firstboot/files/ansible_payload/roles/metacluster/tasks/cleanup.yml

@@ -1,21 +1,9 @@
-# - name: Create component entries in /etc/hosts
+- name: Compress tarballs
-#   ansible.builtin.lineinfile:
+  community.general.archive:
-#     path: /etc/hosts
+    dest: /opt/metacluster/container-images/image-tarballs.tgz
-#     line: "{{ vapp['guestinfo.ipaddress'] }}  {{ item + '.' + vapp['metacluster.fqdn'] }}"
+    path: /opt/metacluster/container-images/*
-#     state: present
+    format: gz
-#   loop:
+    remove: yes
-#     # TODO: Make this list dynamic
-#     - git
-#     - gitops
-#     - ingress
-#     - registry
-#     - storage
-
-- name: Delete container image tarballs/archives
-  ansible.builtin.file:
-    path: "{{ item }}"
-    state: absent
-  with_fileglob: /opt/metacluster/container-images/*.tar
 
 - name: Cleanup tempfile
   ansible.builtin.file:

ansible/roles/firstboot/files/ansible_payload/roles/metacluster/tasks/init.yml

@@ -0,0 +1,12 @@
+- name: Create component entries in /etc/hosts
+  ansible.builtin.lineinfile:
+    path: /etc/hosts
+    line: "{{ vapp['guestinfo.ipaddress'] }}  {{ item + '.' + vapp['metacluster.fqdn'] }}"
+    state: present
+  loop:
+    # TODO: Make this list dynamic
+    - git
+    - gitops
+    - ingress
+    - registry
+    - storage

ansible/roles/firstboot/files/ansible_payload/roles/metacluster/tasks/main.yml

@@ -7,6 +7,4 @@
 - import_tasks: git.yml
 - import_tasks: gitops.yml
 
-# - include_tasks: certauthority.yml
-#   tags: final
 - import_tasks: cleanup.yml

ansible/roles/firstboot/files/ansible_payload/templates/secret.j2

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ _template.name }}
+  namespace: {{ _template.namespace }}
+data:
+  "{{ _template.key }}": {{ _template.value }}

ansible/roles/metacluster/tasks/cleanup.yml

@@ -1,4 +0,0 @@
-- name: Zero-out disk
-  ansible.builtin.shell:
-    cmd: nice -n 10 dd bs=1M count=$(df -m . | awk '/[0-9]%/{print $(NF-2)}') if=/dev/zero of=./zero; sync; sync; rm -f ./zero
-    chdir: /opt/metacluster

ansible/roles/metacluster/tasks/components.yml

@@ -66,10 +66,3 @@
 #   loop: "{{ lookup('ansible.builtin.dict', components) | map(attribute='value.manifests') | list | select('defined') | flatten }}"
 #   loop_control:
 #     label: "{{ item.type + '/' + item.name }}"
-
-- name: Compress tarballs
-  community.general.archive:
-    dest: /opt/metacluster/container-images/image-tarballs.tgz
-    path: /opt/metacluster/container-images/*
-    format: xz
-    remove: yes

ansible/roles/metacluster/tasks/main.yml

@@ -6,6 +6,3 @@
 
 - name: Pre-stage meta-cluster configuration and workload-cluster components
   import_tasks: staging.yml
-
-- name: Cleanup
-  import_tasks: cleanup.yml

ansible/vars/metacluster.yml

@@ -119,7 +119,7 @@ components:
         config:
           offlineMode: true
           server:
-            ROOT_URL: https://git.{{ vapp['metacluster.fqdn'] }}/
+            PROTOCOL: https
         gitea:
           admin:
             username: administrator