[add] k8s role ansible

Ansible/roles/k8s/defaults/main.yml

+---
+
+# Chemin du dossier k8s_vapormap
+K8S_VAPORMAP_DIR: '{{HOME_DIR}}/k8s_vapormap'

Ansible/roles/k8s/tasks/destroy.yml

+---
+- name: Suppression des déploiements
+  become: true
+  ansible.builtin.command: sudo kubectl delete deployment {{item}}
+  loop:
+    - mariadb
+    - api
+    - front
+- name: Suppression des services
+  become: true
+  ansible.builtin.command: sudo kubectl delete service {{item}}
+  loop:
+    - mariadb
+    - api
+    - front
+- name: Suppression de l'ingress
+  become: true
+  ansible.builtin.command: sudo kubectl delete ingress vapormap
+- name: Suppression du dossier k8s_vapormap
+  become: true
+  ansible.builtin.file:
+    path: "{{K8S_VAPORMAP_DIR}}"
+    state: absent

Ansible/roles/k8s/tasks/main.yml

+---
+- name: Git clone
+  become: true
+  ansible.builtin.git:
+    repo: "https://gitlab.imt-atlantique.fr/f21munie/projet_k8s_vapormap.git"
+    dest: "{{K8S_VAPORMAP_DIR}}"
+  ignore_errors: true
+- name: Copy file with owner and permissions
+  become: true
+  ansible.builtin.copy:
+    remote_src: true
+    src: ./.kube
+    dest: "{{HOME_DIR}}"
+    owner: "{{VAPORMAP_USER}}"
+    group: "{{VAPORMAP_GROUP}}"
+    mode: "600"
+- name: Configuration du manifeste front.yml
+  become: true
+  ansible.builtin.template:
+    src: front.yml.j2
+    dest: "{{K8S_VAPORMAP_DIR}}/front.yml"
+    owner: "{{VAPORMAP_USER}}"
+    group: "{{VAPORMAP_GROUP}}"
+    mode: "664"
+- name: Configuration du traefik-conf.yml
+  become: true
+  ansible.builtin.template:
+    src: traefik-conf.yml.j2
+    dest: "/var/lib/rancher/k3s/server/manifests/traefik-conf.yml"
+    owner: "{{VAPORMAP_USER}}"
+    group: "{{VAPORMAP_GROUP}}"
+    mode: "664"
+- name: Application d'un label au node bastion
+  become: true
+  ansible.builtin.shell: sudo kubectl label nodes bastion disktype=master
+- name: Application des manifestes
+  become: true
+  ansible.builtin.command: sudo kubectl apply -f {{K8S_VAPORMAP_DIR}}/{{item}}
+  loop:
+    - registry-credentials.yml
+    - mariadb.yml
+    - api.yml
+    - front.yml
+    - ingress.yml
+- name: Ajout de l'IP API à la variable no_proxy
+  become: true
+  ansible.builtin.shell: export no_proxy=$no_proxy,"{{PUB_API_IP}}"
+  # /env/environment

Ansible/roles/k8s/templates/front.yml.j2

+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  creationTimestamp: null
+  labels:
+    app: front
+  name: front
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: front
+  strategy: {}
+  template:
+    metadata:
+      creationTimestamp: null
+      labels:
+        app: front
+    spec:
+      containers:
+      - image: gitlab-registry.imt-atlantique.fr/f21munie/vapormap/app_front:latest
+        name: app-front-hb7xl
+        # ports: 
+        #   - containerPort: 8000
+        env:
+        - name: VAPORMAP_BACKEND
+          value: "{{PUB_API_IP}}"
+        - name: VAPORMAP_BACKEND_PORT 
+          value: "80"
+        - name: VAPORMAP_URL_SERVERNAME
+          value: "0.0.0.0"
+        - name: VAPORMAP_URL_PORT
+          value: "8000"
+        - name: VAPORMAP_FRONTEND_ROOT
+          value: "/app_fe"
+        resources: {}
+      imagePullSecrets: 
+      - name: registry-credentials
+status: {}
+
+---
+
+apiVersion: v1
+kind: Service
+metadata:
+  creationTimestamp: null
+  labels:
+    app: front
+  name: front
+spec:
+  ports:
+  - port: 8000
+    protocol: TCP
+    targetPort: 8000
+  selector:
+    app: front
+status:
+  loadBalancer: {}

Ansible/roles/k8s/templates/traefik-conf.yml.j2

+apiVersion: helm.cattle.io/v1
+kind: HelmChartConfig
+metadata:
+  name: traefik
+  namespace: kube-system
+spec:
+  valuesContent: |-
+    image:
+      name: traefik
+      tag: v2.8.5
+    forwardedHeaders:
+      enabled: true
+      trustedIPs:
+        - 10.0.0.0/8
+    ssl:
+      enabled: true
+      permanentRedirect: false