mirror of https://github.com/easzlab/kubeasz.git
35 lines
1.1 KiB
YAML
35 lines
1.1 KiB
YAML
- hosts: harbor
|
||
roles:
|
||
- { role: chrony, when: "hostvars[groups.deploy[0]]['NTP_ENABLED'] == 'yes' and NEW_INSTALL == 'yes'" }
|
||
- { role: prepare, when: "NEW_INSTALL == 'yes'" }
|
||
- { role: docker, when: "NEW_INSTALL == 'yes'" }
|
||
- { role: harbor, when: "NEW_INSTALL == 'yes'" }
|
||
tasks:
|
||
- name: 获取harbor服务器证书
|
||
fetch:
|
||
src: "{{ ca_dir }}/ca.pem"
|
||
dest: "{{ base_dir }}/down/"
|
||
flat: yes
|
||
|
||
- hosts:
|
||
- kube-master
|
||
- new-master
|
||
- kube-node
|
||
- new-node
|
||
vars:
|
||
harbor_domain: "{{ hostvars[groups.harbor[0]]['HARBOR_DOMAIN'] }}"
|
||
tasks:
|
||
- name: harbor证书目录创建
|
||
file: name=/etc/docker/certs.d/{{ harbor_domain }} state=directory
|
||
|
||
- name: 推送harbor服务器证书
|
||
copy: src={{ base_dir }}/down/ca.pem dest=/etc/docker/certs.d/{{ harbor_domain }}/ca.crt
|
||
|
||
# 如果你的环境中有dns服务器，可以跳过hosts文件设置
|
||
- name: 增加harbor的hosts解析
|
||
lineinfile:
|
||
dest: /etc/hosts
|
||
state: present
|
||
regexp: '{{ harbor_domain }}'
|
||
line: "{{ groups['harbor'][0] }} {{ harbor_domain }}"
|