mirror of
https://github.com/ansible-collections/community.general.git
synced 2024-09-14 20:13:21 +02:00
k8s_auth: use group module defaults in example (#52712)
The yaml anchor thing was just a stopgap until all the module defaults group stuff got merged. Which it did.
This commit is contained in:
parent
d901ba18d1
commit
4ea51fd7ee
1 changed files with 26 additions and 31 deletions
|
@ -74,42 +74,37 @@ requirements:
|
||||||
'''
|
'''
|
||||||
|
|
||||||
EXAMPLES = '''
|
EXAMPLES = '''
|
||||||
- block:
|
- hosts: localhost
|
||||||
|
module_defaults:
|
||||||
|
group/k8s:
|
||||||
|
host: https://k8s.example.com/
|
||||||
|
ssl_ca_cert: ca.pem
|
||||||
|
tasks:
|
||||||
|
- block:
|
||||||
# It's good practice to store login credentials in a secure vault and not
|
# It's good practice to store login credentials in a secure vault and not
|
||||||
# directly in playbooks.
|
# directly in playbooks.
|
||||||
- include_vars: k8s_passwords.yml
|
- include_vars: k8s_passwords.yml
|
||||||
|
|
||||||
- name: Log in (obtain access token)
|
- name: Log in (obtain access token)
|
||||||
k8s_auth:
|
k8s_auth:
|
||||||
host: https://k8s.example.com/
|
|
||||||
ssl_ca_cert: ca.pem
|
|
||||||
username: admin
|
username: admin
|
||||||
password: "{{ k8s_admin_password }}"
|
password: "{{ k8s_admin_password }}"
|
||||||
register: k8s_auth_results
|
register: k8s_auth_results
|
||||||
|
|
||||||
- name: Preserve auth info as both a fact and a yaml anchor for easy access later
|
# Previous task provides the token/api_key, while all other parameters
|
||||||
# Both the fact and the anchor are called 'k8s_auth_params'
|
# are taken from module_defaults
|
||||||
set_fact:
|
|
||||||
k8s_auth_params: &k8s_auth_params
|
|
||||||
host: "{{ k8s_auth_results.k8s_auth.host }}"
|
|
||||||
ssl_ca_cert: "{{ k8s_auth_results.k8s_auth.ssl_ca_cert }}"
|
|
||||||
verify_ssl: "{{ k8s_auth_results.k8s_auth.verify_ssl }}"
|
|
||||||
api_key: "{{ k8s_auth_results.k8s_auth.api_key }}"
|
|
||||||
|
|
||||||
# Previous task generated I(k8s_auth) fact, which you can then use
|
|
||||||
# in k8s modules like this:
|
|
||||||
- name: Get a list of all pods from any namespace
|
- name: Get a list of all pods from any namespace
|
||||||
k8s_facts:
|
k8s_facts:
|
||||||
<<: *k8s_auth_params
|
api_key: "{{ k8s_auth_results.k8s_auth.api_key }}"
|
||||||
kind: Pod
|
kind: Pod
|
||||||
register: pod_list
|
register: pod_list
|
||||||
|
|
||||||
always:
|
always:
|
||||||
- name: If login succeeded, try to log out (revoke access token)
|
- name: If login succeeded, try to log out (revoke access token)
|
||||||
when: k8s_auth_params is defined
|
when: k8s_auth_results.k8s_auth.api_key is defined
|
||||||
k8s_auth:
|
k8s_auth:
|
||||||
state: absent
|
state: absent
|
||||||
<<: *k8s_auth_params
|
api_key: "{{ k8s_auth_results.k8s_auth.api_key }}"
|
||||||
'''
|
'''
|
||||||
|
|
||||||
# Returned value names need to match k8s modules parameter names, to make it
|
# Returned value names need to match k8s modules parameter names, to make it
|
||||||
|
|
Loading…
Reference in a new issue