snel.kubernetes-cluster/roles/local_path_storage/tasks/main.yml

---
# https://github.com/rancher/local-path-provisioner

- name: Local-Path storage Namespace
  delegate_to: "{{ kubectl_host }}"
  kubernetes.core.k8s:
    kubeconfig: "{{ kubeconfig }}"
    resource_definition:
      apiVersion: v1
      kind: Namespace
      metadata:
        name: local-path-storage
        labels:
          pod-security.kubernetes.io/audit: privileged
          pod-security.kubernetes.io/enforce: privileged
          pod-security.kubernetes.io/warn: privileged

- name: Local-Path storage ServiceAccount
  delegate_to: "{{ kubectl_host }}"
  kubernetes.core.k8s:
    kubeconfig: "{{ kubeconfig }}"
    resource_definition:
      apiVersion: v1
      kind: ServiceAccount
      metadata:
        name: local-path-provisioner-service-account
        namespace: local-path-storage

- name: Local-Path storage ClusterRole
  delegate_to: "{{ kubectl_host }}"
  kubernetes.core.k8s:
    kubeconfig: "{{ kubeconfig }}"
    resource_definition:
      apiVersion: rbac.authorization.k8s.io/v1
      kind: ClusterRole
      metadata:
        name: local-path-provisioner-role
      rules:
        - apiGroups: [ "" ]
          resources: [ "nodes", "persistentvolumeclaims", "configmaps" ]
          verbs: [ "get", "list", "watch" ]
        - apiGroups: [ "" ]
          resources: [ "endpoints", "persistentvolumes", "pods" ]
          verbs: [ "*" ]
        - apiGroups: [ "" ]
          resources: [ "events" ]
          verbs: [ "create", "patch" ]
        - apiGroups: [ "storage.k8s.io" ]
          resources: [ "storageclasses" ]
          verbs: [ "get", "list", "watch" ]

- name: Local-Path storage ClusterRoleBinding
  delegate_to: "{{ kubectl_host }}"
  kubernetes.core.k8s:
    kubeconfig: "{{ kubeconfig }}"
    resource_definition:
      apiVersion: rbac.authorization.k8s.io/v1
      kind: ClusterRoleBinding
      metadata:
        name: local-path-provisioner-bind
      roleRef:
        apiGroup: rbac.authorization.k8s.io
        kind: ClusterRole
        name: local-path-provisioner-role
      subjects:
        - kind: ServiceAccount
          name: local-path-provisioner-service-account
          namespace: local-path-storage

- name: Local-Path storage ConfigMap
  delegate_to: "{{ kubectl_host }}"
  kubernetes.core.k8s:
    kubeconfig: "{{ kubeconfig }}"
    resource_definition:
      kind: ConfigMap
      apiVersion: v1
      metadata:
        name: local-path-config
        namespace: local-path-storage
      data:
        config.json: |-
          {
            "nodePathMap": [
              {
                "node": "DEFAULT_PATH_FOR_NON_LISTED_NODES",
                "paths": [ "/var/local" ]
              }
            ]
          }          
        setup: |-
          #!/bin/sh
          set -eu
          mkdir -m 0777 -p "$VOL_DIR"          
        teardown: |-
          #!/bin/sh
          set -eu
          rm -rf "$VOL_DIR"          
        helperPod.yaml: |-
          apiVersion: v1
          kind: Pod
          metadata:
            name: helper-pod
          spec:
            containers:
            - name: helper-pod
              image: busybox
              imagePullPolicy: IfNotPresent          

- name: Local-Path storage Deployment
  delegate_to: "{{ kubectl_host }}"
  kubernetes.core.k8s:
    kubeconfig: "{{ kubeconfig }}"
    resource_definition:
      apiVersion: apps/v1
      kind: Deployment
      metadata:
        name: local-path-provisioner
        namespace: local-path-storage
      spec:
        replicas: 1
        selector:
          matchLabels:
            app: local-path-provisioner
        template:
          metadata:
            labels:
              app: local-path-provisioner
          spec:
            serviceAccountName: local-path-provisioner-service-account
            containers:
              - name: local-path-provisioner
                image: rancher/local-path-provisioner:v0.0.24
                imagePullPolicy: IfNotPresent
                command:
                  - local-path-provisioner
                  - --debug
                  - start
                  - --config
                  - /etc/config/config.json
                volumeMounts:
                  - name: config-volume
                    mountPath: /etc/config/
                env:
                  - name: POD_NAMESPACE
                    valueFrom:
                      fieldRef:
                        fieldPath: metadata.namespace
            volumes:
              - name: config-volume
                configMap:
                  name: local-path-config

- name: Local-Path storage StorageClass
  delegate_to: "{{ kubectl_host }}"
  kubernetes.core.k8s:
    kubeconfig: "{{ kubeconfig }}"
    resource_definition:
      apiVersion: storage.k8s.io/v1
      kind: StorageClass
      metadata:
        name: local-path
        annotations:
          storageclass.beta.kubernetes.io/is-default-class: 'true'
          storageclass.kubernetes.io/is-default-class: 'true'
      provisioner: rancher.io/local-path
      parameters:
        nodePath: /var/local
      volumeBindingMode: WaitForFirstConsumer
      reclaimPolicy: Delete