mirror of
https://github.com/ansible/awx-operator.git
synced 2026-03-26 21:33:14 +00:00
94d68bf382
With the previous approach, not all associated (mounted) CM/Secrets changes caused the Deployment to be rolled out, but also the Deployment could have been rolled out unnecessary during e.g. Ingress or Service changes (which do not require Pod restarts). Previously existing Pod removal (state: absent) was not complete as other pods continued to exist, but also is not needed with this commit change due to added Pods annotations. The added Deployment Pod annotations now cause the new ReplicaSet version to be rolled out, effectively causing replacement of the previously existing Pods in accordance with the deployment `strategy` (https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#deploymentstrategy-v1-apps, `RollingUpdate`) whenever there is a change in the associated CMs or Secrets referenced in annotations. This implementation is quite standard and widely used for Helm workflows - https://helm.sh/docs/howto/charts_tips_and_tricks/#automatically-roll-deployments
50 lines
1.6 KiB
YAML
50 lines
1.6 KiB
YAML
---
|
|
- name: Check for specified secret key configuration
|
|
k8s_info:
|
|
kind: Secret
|
|
namespace: '{{ ansible_operator_meta.namespace }}'
|
|
name: '{{ secret_key_secret }}'
|
|
register: _custom_secret_key
|
|
no_log: "{{ no_log }}"
|
|
when: secret_key_secret | length
|
|
|
|
- name: Check for default secret key configuration
|
|
k8s_info:
|
|
kind: Secret
|
|
namespace: '{{ ansible_operator_meta.namespace }}'
|
|
name: '{{ ansible_operator_meta.name }}-secret-key'
|
|
register: _default_secret_key
|
|
no_log: "{{ no_log }}"
|
|
|
|
- name: Set secret key secret
|
|
set_fact:
|
|
_secret_key_secret: '{{ _custom_secret_key["resources"] | default([]) | length | ternary(_custom_secret_key, _default_secret_key) }}'
|
|
no_log: "{{ no_log }}"
|
|
|
|
- block:
|
|
- name: Create secret key secret
|
|
k8s:
|
|
apply: true
|
|
definition: "{{ lookup('template', 'secrets/secret_key.yaml.j2') }}"
|
|
no_log: "{{ no_log }}"
|
|
|
|
- name: Read secret key secret
|
|
k8s_info:
|
|
kind: Secret
|
|
namespace: '{{ ansible_operator_meta.namespace }}'
|
|
name: '{{ ansible_operator_meta.name }}-secret-key'
|
|
register: _generated_secret_key
|
|
no_log: "{{ no_log }}"
|
|
|
|
when: not _secret_key_secret['resources'] | default([]) | length
|
|
|
|
- name: Set secret key secret
|
|
set_fact:
|
|
secret_key: '{{ _generated_secret_key["resources"] | default([]) | length | ternary(_generated_secret_key, _secret_key_secret) }}'
|
|
no_log: "{{ no_log }}"
|
|
|
|
- name: Store secret key secret name
|
|
set_fact:
|
|
secret_key_secret_name: "{{ secret_key['resources'][0]['metadata']['name'] }}"
|
|
no_log: "{{ no_log }}"
|