matrix/matrixtest-IaC-ansible
3
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Futureproof securitygroup logic.

Browse source
This commit is contained in:
Magnus Andersson 2024-01-16 07:40:38 +01:00
parent d5cad0d824
commit 01c8936db7
Signed by: mandersson
GPG key ID: 19CB2C58E1F19B16
2 changed files with 11 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
iac_vars.yaml
View file

@ -1 +1,5 @@
numnodes: 3
kubesecgroups:
- allegress
- kubenode
- ssh-from-jumphost

11
kubenodes.yaml
View file

@ -25,10 +25,12 @@
name: kube{{ item }}-matrix-test-sunet-se-port
network: public
security_groups: |-
{%- set secgroupallegress=secgroups.security_groups|selectattr('name', 'equalto', 'allegress')| first -%}
{% set secgroupkubenode=secgroups.security_groups|selectattr('name', 'equalto', 'kubenode')| first -%}
{% set secgroupssh=secgroups.security_groups|selectattr('name', 'equalto', 'ssh-from-jumphost')| first -%}
{{ secgroupallegress['id'] }},{{secgroupkubenode['id']}},{{secgroupssh['id'] -}}
{%- set secgrlist = [] -%}
{%- for sg in kubesecgroups -%}
{% set sgdict=secgroups.security_groups|selectattr('name', 'equalto', sg )| first -%}
{{- secgrlist.append(sgdict['id']) -}}
{%- endfor -%}
{{ secgrlist | join(',') }}
loop: "{{ range(1, numnodes + 1 )|list }}"
- name: Launch kubernetes instances
@ -42,6 +44,7 @@
- "kube{{ item }}-matrix-test-sunet-se-snapvol"
nics:
- port-name: "kube{{ item }}-matrix-test-sunet-se-port"
security_groups: "{{ kubesecgroups | join(',') }}"
userdata: |
{{ lookup('ansible.builtin.template', 'kubenodes-user.yaml.j2') | indent(4, False ) }}
loop: "{{ range(1, numnodes + 1 )|list }}"