Files
swaphb 664c3c8236
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 56s
add Ansible Flatcar and platform bootstrap
2026-08-15 16:40:37 -04:00

33 lines
1.2 KiB
YAML

---
- name: Create ArgoCD namespace
ansible.builtin.raw: >-
{{ k3d_tool_dir }}/kubectl create namespace {{ argocd_namespace }}
--dry-run=client -o yaml | {{ k3d_tool_dir }}/kubectl apply -f -
become_user: "{{ k3d_user }}"
changed_when: false
- name: Install pinned ArgoCD manifest
ansible.builtin.raw: >-
{{ k3d_tool_dir }}/kubectl apply --server-side --force-conflicts
-n {{ argocd_namespace }} -f {{ argocd_install_manifest_url }}
become_user: "{{ k3d_user }}"
- name: Wait for ArgoCD server
ansible.builtin.raw: >-
{{ k3d_tool_dir }}/kubectl -n {{ argocd_namespace }} rollout status
deployment/argocd-server --timeout={{ argocd_rollout_timeout }}
become_user: "{{ k3d_user }}"
- name: Apply the GitOps root Application
ansible.builtin.raw: "{{ k3d_tool_dir }}/kubectl apply -f {{ argocd_root_application_manifest }}"
become_user: "{{ k3d_user }}"
- name: Verify root Application source path
ansible.builtin.raw: >-
{{ k3d_tool_dir }}/kubectl get application security-baseline-root
-n {{ argocd_namespace }} -o jsonpath={.spec.source.path}
become_user: "{{ k3d_user }}"
register: argocd_root_path
changed_when: false
failed_when: argocd_root_path.stdout | trim != 'deployments/argocd/apps'