DEV-341: tried to implement review critics

4 years ago · c732ab8eb3
parent f3e8b12f82
commit c732ab8eb3
38 changed files with 1741 additions and 1624 deletions
--- a/group_vars/all/plain.yml
+++ b/group_vars/all/plain.yml
@ -304,3 +304,61 @@ hetzner_authentication_csi: "{{ hetzner_authentication_csi_vault }}"
 k8s_basic_services:
  - kubelet
  - containerd
+
+hcloud_firewall_objects_awx:
+   -
+     name: "{{ stage }}-awx-ssh-access-for-k8s-nodes"
+     state: present
+     rules:
+     -
+        direction: in
+        protocol: tcp
+        port: '22'
+        source_ips: "{{ src_ips }}"
+        destination_ips: []
+        description: null
+     apply_to:
+     -
+       type: label_selector
+       label_selector:
+         selector: 'stage={{ stage }}'
+   -
+     name: "{{ stage }}-awx-access-SMA-mgmt-instance"
+     state: present
+     rules:
+     -
+        direction: in
+        protocol: tcp
+        port: '443'
+        source_ips: "{{ src_ips }}"
+        destination_ips: []
+        description: null
+     apply_to:
+     -
+       type: label_selector
+       label_selector:
+         selector: 'service=connect,tenant=management'
+   -
+     name: "{{ stage }}-awx-access-443-SMA-peripheral-instances"
+     state: present
+     rules:
+     -
+        direction: in
+        protocol: tcp
+        port: '443'
+        source_ips: "{{ src_ips }}"
+        destination_ips: []
+        description: null
+     apply_to:
+     -
+       type: label_selector
+       label_selector:
+         selector: 'service=gitea'
+     -
+       type: label_selector
+       label_selector:
+         selector: 'service=keycloak'
+     -
+       type: label_selector
+       label_selector:
+         selector: 'service=kibana'
--- a/group_vars/stage_dev/vault.yml
+++ b/group_vars/stage_dev/vault.yml
--- a/group_vars/stage_prodnso/vault.yml
+++ b/group_vars/stage_prodnso/vault.yml
@ -1,276 +1,276 @@
 $ANSIBLE_VAULT;1.1;AES256
-35613439643036366262653161636232346233336339346132326466613161343263393632323037
-3765626461663264316537306566383338636230613236370a393239616432343131353237646261
-39633237333735313464613064373763326266313139366238656637386362376539643438336264
-3063633030643630370a643761373766363036363165666139396362323135383332323833393865
-34353530353261323338303863313131333362336466356638366635623865366564346164633334
-32393830363935336232313466646535623233313939313235656532373239386262323363636337
-34643032316666326630373561613865643834623737333263303965613733366430303230303536
-32653839666433626363313035646266616362383366656666636137643635313331306431396335
-61633238303136363665646533353065373238643863303337663437616666346265326331633038
-32613630656264643261616535616534303339646333316537353262366463663663393434333330
-61316134353536336266613939353932613532643135383536343539353535393663653139373164
-32356237316237646638373863313665306365316361336536653730653631313839633030343735
-37633661336432333037656636633530643631396131643364343938316336346665636530366662
-36653137353062326434623033383639356630623764653336356139343038313934316436396332
-32653633613335333937663233316639623438373633313837646463636363623439666330383232
-38313535663832383564363236376664303534393335666562373563376564346233306230613635
-66623639323561353831383631363863616233336234666132613939316264303231636537633161
-37323064313664393161663339656466616333363533353230646131636139633838366537373637
-31303637623462326236303335323562666462616239383239306636356663636337313135376332
-30363036306164656433353735333131383336633335323833393966306130613164323931316237
-36313362373535616535303161623166323134613662383862656265303632613261356563366630
-64303436303038346238666430626335313830396635393631383661323265663966626635356337
-33623361333066393232303061313361386634353733386238383266323836373564623239356566
-31653834386530353066636233653039663339303432303364313630323231623533313839393666
-32626364636538393734623133346430626265346536643431306639386639373036306234623065
-65353338303739643561386266356432303362326436373864646330313039643763356634353462
-37643764386563393736383633323431323765666562663965366531333735393931653032653730
-37353536653832376237303765393862316335656534336466396461626530646163613431376534
-36333536373062346662666664646563316162313835343431373165633766386663666464333564
-30303136646131313430666330383964623837656534323939666631656234386564626562353232
-37616439303761613434623361323534393737653439353565646365616231306565353066656430
-38346332363461383864303163656335323237376461353934363930353032343163316661396532
-37346430336564323237366261313330316131363166626366643463373830303935333339303239
-31353332383361643563623765646236396335656236323131346362373332376438376362656435
-64623735333330323930366462306631386466643537363063623865323161313262316235333835
-36396636666263616330626565373732323238336465333934396432653661653031333835303939
-36333636363564363638353734643439626632623962333037656131613937643062336338316163
-33373131653338343835343930613263353035666137393065613061613931303533366435643638
-38663431323034383933303166323635656465333935383066353538316332653436393234336433
-65376331306365363762643164316439326135393865643438653565616266616534373162376661
-32346431333130323533333831613538373533353738306238623064396235343234346531623862
-30623162373035363734316130393230646439353461323062303461393232373037373736353337
-30656463653837363139636536633735663030333465306565303636323036383566636537633033
-62373365643262363661383936353136613032323632323161396161303336333263613735313938
-38653733633535646637653337386363316331326135346535333838323331373738333366333738
-35343965616236333231646631353536633062323533663134623531303736323864353334373766
-63376635346137323632373034656339663530663637323230633361366164366361653735373963
-61306633373330376663613236346636323837366161633032336634646239326561643430633334
-61643839363530663139623332383832623561633836333264386264626432306333323935663561
-32303463663838366434646264623230383239353639613335653261383161383730646334613162
-65363430356338343462653131333666346536353264333237303363643737393230646236626363
-37346261636165656166313464323931643561323863663064323435363064393866393564393632
-32356439316333653230333431383764336565306362326339393332653734383533356633326366
-31363237666330363734303261376536336632613664333630386137383830646539666137336664
-34653231346639313833623530613531376165343035326539326530386338366138363462613430
-63656539626637303932313339323566623332396465343233353261393234393537633631396665
-34363964353261303734343530353930326230333166633135653437626666376238613062666339
-62386663646231663563323861616564633862326164323638383637333739636434633038653235
-33313564393965646333343336343762643362326165323166393066626334646537306438656164
-63373834366438326433366236333836386236623937303434643762333532613764663039383235
-36323034353064623338663239346431393965646462636633646163623337383865373063333737
-30646237366635326532626238313864623732336664323061646435653466643765323064303134
-36386266313865366266396166366134383130663536313334383631356132353335303130366366
-38363865646337383330316464353439386232393033393034303732373466336237613038356236
-31386263643031303265366661306163393161643634353638633535656530333633613363646635
-65333439613030393235366437653361303066613035333966313635316234386266366430376664
-62343664646661376435633334396261616230303466373934633766343132333966383033306337
-32366431653032643531616365663839623432623132643362376538663462656536653530323832
-34373936643038616266373932323734396338306364626637366131353861616433656135303963
-33626538336438383233646635383164386365616638663565336232376133306434343538663563
-64326366626631636231623636653662306365626432326665353037616239616630306137633538
-31316133643964366666326465303337343466663064616431376161623133356465366263613337
-34643334393534313235363531663066336137306533323630653533353834313466323332363735
-62336134373031666135663966646630326431663534386435383536306133353931346361383834
-65313339396461643164353639373135333733623334366664396236336531383637646336643935
-66353934353063663935313937373230353135363766656134346463623032373733336465303635
-35643965653539336230323435396462626437353238393064363934643866306264306231373266
-61623537326531383664323830386265613034313632303664633461333137353936363664636264
-61336433393134326237636136613766333938323736323831613863313538623137363330353037
-63363437393736623261396165373233316163386364613733386632306362376535343937323937
-32656431396435393663383063356162646534353831643161373130633135366365313965376131
-38323830303133346139636338313837303030376364333034643466336436396432343136303862
-33363333346139613636316662353363376433373931356264643734316138323835323430343831
-32343438336266323763333432653865366333626533393034376665393032623331316139366464
-35636562383962363131356130386139323364346662393434323861633136393534643534663434
-39343833616438343233656365646331363863336366396431346161623662646465623363633036
-64653439396232616164383538333763636366623463666561636262666562393831373036663333
-61336163353133316233353134383830633032386534303533393437333136616563613131643261
-36356538633733656631363637656362343732626461383237303664323130646634666562303465
-65313337383265316636333837623263643138626237373563383765356563316466383165343435
-38316432373433323036363230396231383565616632663737333965313034613136656562383966
-65363639346161333738373038323065313638383261626161323738326431643131323064376664
-65353964326434313438666536393431393034333537623366656364343534616439396430316562
-66313465306563373236396539623931373166306662616565653636303632393435663638626664
-37326566353863383230323733313164646561326666353837356235393130363337626361323833
-33393639393930653666393862636235353035306238643463643231366434366232396366383665
-61323234336534363534306431613331613232626533663736633063313462306666336236666365
-36613737623534353162376264626266313730663962663961393061346163656531643362373864
-61373032613861656330303964623330376332353463663066613865623931336138306336643437
-36616361663461653639616463623462376433303433656361356565356135376362366563373039
-64333633653563323039343932353136633664633735613363613834353131386239393133653932
-35396437396566656138363339613230353263623330343430346530313330646632613834656233
-33646531333536336436343234343235363064386363643837333062623331336439616330333461
-35383335396365643037356362346231313737663632306436303136623763346666613735656439
-32626261303635653165356236366631616637626165343135336238633164376364303861313033
-31646435613639313464323338336237633435393130353466366265306462326632316466643462
-64646438353064326161353538626239646463623139626130326438623265623935313035313338
-62656431636135636535393133636563353266373336656335373337386435303338326666383862
-61353930633632306564373239656330373566363935303663633530616238316139373865616339
-39346431383238356434316231633033343937323031656665653738636465643436323335386434
-64376165653537383633356237313965646237363435666238336664303139303933363865333630
-63636434656661336432643639386664356437653131383830353236313239623965356139633166
-63306364663831646365383964663263626265303331373733626466306335333264373438316333
-31613963623562336131666537336665306662343331336164623037326633663532656333303235
-66366134393431303062356135376339363035333762333965643336363130313433393530393462
-64366266363264626161613830643966613461666565306362623033303432323532366438326639
-36656461613165383733363761376662313261613632333336323232333932316534613234653230
-39646265376364396361376630623763626337386236646463393030356161373163306333386630
-63616433306130313065613065366339373863386638363338323337303138626338663861343530
-65663631316563306666396335353164343830613635646465663037366238373666303537303338
-33333931353362363834303666343932333965646363643061393434646635623637353936343931
-35393035623331366230316564353433316463366165643864633334626439643265323432313131
-37316161613036333963636538623739666463353466316463653430313938353438613533663464
-66616535316437316130613931323332386666306530396361616235343963333065353436633461
-32363839336435313639346265663762383530383335313066633865323366393734343638316238
-61623038613966613330356132663330376636613837313264613030393832646339373630353637
-61326266303733393531383966333765336637333866636433636436653836643334343963383364
-39343931663534336363663363313262666264643839326334343261343834663938363038373132
-35346564393366383562653862393938343537333162656131623762353830636330323336626363
-32376536633539306262386530313464313834303964643230613162393335656565346638373933
-61376666343039623965656335663066623136623061306234666664333335306465383834303764
-37656164373164653261333236323530653865373831303932323532623234613039623532653963
-39363630336262626433313862386464363138643937353433656634323762383336323662333266
-62306435316531633962333736376532356435353935356635353665303762393138646261383363
-33353062303739363231396232343830623666376462663564346432343439653764386234656337
-33373038363462613234356131666165383837396661396461353163383435366133313062623138
-39316664376363303335653138656638383133383364336661316166376564346363356462626463
-66343135306166323064653562663737656635376639636334393863643432646233376466386238
-39333233646231633633623033323139313461366436373362343731376466346664366439316132
-32323866383138356261313533666535373038376632303139396266333537336135663064303331
-38663731366366313965313362366532383232336333336139646431373739386361626333376464
-65353139653661313365396237343233363865333030326361373336326532366334343832373764
-37316266356536653862383862646539316436336163623537663163373032633931336566643166
-35363134663634383735626135663664303764633338326133613036353830393134323439306565
-34333531356335656639393737663366616166313430303637306464353138356437333133626234
-63613637656463333437396363376638356530636665646262386637613030613637613534396138
-30306364386266616566616565306533343233333663383836613332366136623735623134623338
-61316137333761373130383230663039623434316637613161383465346264393762643038646638
-62643439323339656265353063343334613462346434306462313339393965336563656662373961
-62623163626335626363626562653437616330616130393637353033323865343533386337343933
-39636438376266333233343265623330303164666566363666363736326236373231363662613632
-63626566396566303839623637303931373139356638633161396239633431333863396639616231
-33383161366363356139656463616532383233653763303836636365306436633735353932363861
-31633730626461313733393964653433356330323262366434323833383732653065326232393962
-61396634616138623135626138623566313531346562663830356635306663363163333537333766
-36303264386235653034313934333736383239666431623730323432666432313834633264653631
-37646461306462623664303134316633303632636162333938373634636331353336643033623938
-66646266393262623062636365366261386565656136323432336636613838656531353964666563
-36316262393564313034373261623132333234646164323235316531663638373337613130376364
-62616662333365376565383837626566356438653631313235356536643034373434393463303935
-31363231626431363465333964323139323830663363653431366334303036373833386333363264
-37613134353732313061623734616161316537366162343938313963323735313864663166326237
-38663436646535323166643130393966386332323062366333613862613939353733653862616665
-65346332363962636536313937313938613335366132613464646162653361323361643766646439
-66373137336531306363353532383865613064613333373435616264323635373631363734343166
-31623363646566396139313966353539656265353636316133663635633839336333313232313639
-33336131623865663764653638663237623831363034396661303534373838376166623836326538
-64646236376337313039663335366163353437386333373161383164613666343233373731326164
-37316464316139316166663132393466396237366632343263363962613235393137666365303961
-64633735646335323438623835353564313334313464306462616436343765333335306365663733
-65393530643633373662663762663563376163316562376435396661383739363331663062373166
-64663030636561366562363437663438353031393931303563326338643361336338393630316534
-35316335646465326464386630663262616335343766633930346466623465366238356365663063
-32653931386630336166383431626664343538663565396536646136633935356338386665393230
-38333933623237366337336365353935623030623666393837353232616433666632396636316133
-33316237393531643131333261313630373338336437306335353932663462353133333235353435
-35653432626239633565666365623139636230323263663435343165623634633938376133323039
-35663231323563343366306564363830623934646334386461623134623532393534346237323538
-35333936333166373037613036346233666239633236393265663065313265636534376561666436
-35343035376430663466663535393962313739313763303230653961346566356134633361636532
-65353839653435376261626161343531396636333361633431363236616137323863646232376465
-31666137653534313439313737376162393765326537643632363338366139313763356363613838
-38633932363063643662383930663833346432313135666134633933363466633965316431623539
-65626261636666623866633930386537666338313664636264666363333736636437346463323539
-65383464346634306230626139303739646566356131333830333865343661666564366131646230
-37306665656562653138316333396530393263386166623534393333363565646664656162633161
-66303863373236353738383034656531363532666132356166383139666561383464396163353334
-66316566383136343230393437323731663761636533643738616463613432656663636430323932
-33366432663337316537383735663735316232376335393563306330653535623138346166363763
-37326632363162383463353462336663363333613831353466313433366339343635356437653532
-31363065393066303433313264656339316265663533316434363233326131326431376263643432
-33626133393735313466323465363534376338343162636632656334623964316236613432343066
-37663331653935663930623738383131353363393462396130623131326133623934326535656532
-33643839626233663361643337393131343438333538396431303766336634303466353037646335
-36343536393138303135346662636233313766373961386239393636313838356334643432303935
-38333662396333643861396233313332386662376464653337623935663337393762363331303833
-31663765633533613561386233356532363031366462333663376139323665336231653533613737
-66633765633361323732336330613634643064363731366661303231393631636435616633323538
-34393037373064373062643466616561656661356365663336623364366531366234613865336530
-31666534636263343761353364306638636230353734346334396435653866613764366362613661
-64373962373335356166373165386230323734386133373238306635646637353765633434653538
-62333339613132663634656430656564633465353339333063633466376534636339333930616162
-32623337393666626334313037336163633332633330643766633031653331646631343566363865
-39643537323563366239626130376263623631333935623565316232623335663234636262323761
-62323637623064323663393163383562363262303332353738363133623665303535316165383238
-62653338316232336663386463396633666663663363653333663239616332656438613664396463
-38323762313435346263636437323833656531333765663636363833633636303837396166393539
-36303832623436323637373064316535313734643034643033356135303663383264303730313936
-32363362386131656536316363663535333133653137373564633939386435633631663032336662
-66316565636639343030326263643930326631343033333564636562623532363639653366333139
-32333064636666313663643638663765326263666538373765636131346232336637323938656364
-30303735613466333434386330626435353833636139613035356639373939633265313833356162
-31363764633937653936643136303136343039383830666334623461373335326638346236303536
-34643836633032663539613635323433363565326138393930646434653064653339626332396139
-30353936316263396461376530333061626635363765373036646265356366343266323961393236
-31623334643233623062323633653864343531396461643637333561386534633066393435383766
-33633465646530393333656264383639366637623139386361666535323334373866383836303035
-65333833333838346363333531643134343865383061333865646435326631653130633333383663
-39623634623335363537646531386566666434303533663437643637633466363035663566393665
-31643065303263356533343335613161666533303536383762313663323463313332343564623231
-39373536336363343938386237633334616533323835363031373436383631356331626238373662
-39313564656634663836313936636237643831376433663861366535383364333365623134323662
-64363964656137313365333165393935643465326535653537363237643034356535333866646231
-33393965393761396336653437623037643833653162626335653832376238363336633430623032
-33636335626662663663323034333035373939373665613138323939663766363962303233393636
-36306564383961653833626561383361346662313936663336656666326366313530613637613438
-31636332656134386531663730326162666436333133653766353861646434633433306138396365
-65623032656435663233633239663835323938613533366666393634393831623233613363386536
-32623637363363363237383465396430396462343135346135396465303439303033356331353863
-63636463343062333437643330373462346466356334366565323466313531343666383338366138
-65373838653261316364316664616464626466343937613339363735626531326136376134313362
-31666666303139313433353335333263633033363437356563653334366330366632663535363861
-31623934666430646663303636323434383263653632396666646532383138346430396332633337
-33613862393533313337383931353130313135303833633935376664643265353536366638613561
-33626637376639313661643732336662633134353536313432333232333762336165326263323934
-30316362613730633730393832663365633164653035326536343163346333653432653663633134
-65613832356535376337356331343037373933383232626133373538666538653363313838333065
-34356464353662313136316331333034343738323934326638613230336233613637313162633166
-66343336383331316335386166323930326565303766376539353462336236353638656133353632
-62363432323863306163353866343663353839373935396339373861363831373166376262653934
-34376166663262303166303437383937366230366538643666303663303032376666393737623166
-38323731346665303536663333656331336662386639346661376462633864656632383338376335
-39623964376361396338643037636464313032626363386662303234616437373965303532643639
-39396135326239633031386331383463306438666362336636616161623933626233316131353730
-33393461386666656565633731303530343338636238666531306263383030653533613931343534
-30393032623333666465616330623932383232653033663939636239383566316362353963663763
-37633134316164613730316630633864303664626465306566353934636364323539663339636632
-64623839313932323239353264643130363764376234656639373366323730313833396561336132
-39386462313037376466343031653535343965653631343030323138363535653537336464616264
-38346535656365373734363232656530653832383961376530653734336666653339383661613031
-31633039393664373931323061636533363433356535623732396339356630353537373362313337
-31333935363739303035613038373563303061643863343831663166336635663832356265373239
-39653938366434656234613863313533643665336131613735333732323233353431333934353938
-37323430623730313239376565373766383662316133646638633830346334353732616366326662
-65323363613234376364393838356637643664333563393663656537323162303362323933663666
-31333831616631646561363438653534656532326638656364333334306633656665626433343137
-65663132373434313432303139393961356237323765656661336462613439356331393032353035
-39303231303635353634333937633038626633616634633965623666646232333137623261636139
-30646537633933373261633739633333346362346430616161663362343066306161313464343635
-31616561643261356633393931626137613034646161336634313435346364373131316234333838
-34616637316462346131333439343434646331336637313362346661373835396135333530643337
-38393232663734353235363230626262653930393664383362613937396430353130653235383631
-34663963663733306333663361653332363036333365646665643165353864643766393930653234
-36666462333364363063393831373435363631336565653132366561386137343034666632313162
-30646566313133313438396233313532326439366331363432376461366534663062383835373839
-65626430306430303039623063353530306262666565373163366236616339353764633639323235
-37346336636134326132613836383562323164316666373032363733383063356262376165373637
-63626130663335343237303138313261356235323065303637623464613737303533656339313031
-66373362353764313834386437306533653665363731623635633665376232656462653361643064
-62616363393936643061393039636564356437356136613337653532656337666337316134376333
-30336162303833393036623266346161653665356534636634396335663562626231613336313537
-33323735636235326362373239643537346630343938366665633837663266393861353030353737
-34666436393039663730346638363935316163393562333532666331646130376236666139366333
-35363531366665353134303031343632643034363836306135336262306630353763393165303764
-323530613234336162356635353634373264
+64353039353738343666343737313663343239663838326661356632386563316638323332363061
+3462303032663535626633623839616663316366623163660a393531626332386337373430356262
+32326531346630373938663862616438323764633230323234623639643164323564363030383838
+3663643237346562340a313330613937313364633339393961343162306263323163333430633835
+63343738636338636637623764336437343165323564623630323531353362383139383935313532
+66613564623061646531326436613238643432373535323634646362346432383965333761663730
+36633739336437613433326232616663663238393437383639623663396665313730396539636135
+30376261323733313233353566626365656236313062623339653466363962336363373634396439
+33393463393761373032303365343035343438633161306163393931363239616230636536643339
+33623162383734646432313532316233616464653932353562343033663931366436343431616232
+64346530306466613730653334313962333264336363363763646639383133356239316235313964
+63616565346461396138626439356231623734313233363137626231396532613237623065623834
+36613763666263306463613938633363343263653361353338353438373566366434643436303033
+65336634336664353966646634313165353835663035633233383533313334343366383932376436
+38353635333735666164616333656664646534333562336262336265656636346539363531363936
+36323034643535616333393734643732343031623232343035646462326362666237333333353939
+31303335636532636234323364343065306362353532353532363337386238383364376132313336
+32656232623135323963623432316265643165333431303437316334316633353664396266303639
+64626434363163366238343164643462393931376361663465383165663037396563343762386165
+37643930616330653066363965653033303739326138643233626361663837643832396461633532
+37306462656664633035303238356136616561656465633136383732636266383037323538333339
+37633135363037366636373835396332626239313032333433616239333439363939396661306364
+39383732386337306666616236633338353534616466653331303166313533356462363634663832
+38386339663963393632636162343863633832306231663262316162333530353262306635323531
+66396332666236633535616338383066383661346363626465346465336334363236323364613831
+61396336313539626566386632646237323733373963393165396465636432386537376434633662
+34326335366538363262313535636365326164643463653161666233646164396234366262383433
+66393261333839343262613766373264316664343433613466366336663466373661323463363535
+32366161386133333561326561343935323263303565633531646135393639363861303931396131
+66316534396361663437386261363938383739393839613462333234393138373333623635643530
+63656531623730303734623566623338623263336134616666333939323965316232366338343064
+39313539376330343463336361313964613431626562396533306365633934623539656234643264
+30386232303266346637663063373831666162313935666634643563386238663061373934666636
+36373331616239633135666232633066336537306666376161373438313633363731353934316164
+63353765643533396262353334663661313733363266633165656130663738393238383733646336
+64303438616132306338336162313837613530336432653438373034316539636531613135643765
+39333632666631373965653630366166663530626335636361633166356362323965336135396132
+37623638656438323133313764636134333663386331383731363861333233626266363263313361
+39323661643836383637323439313566353262643731616138306562326262326234653831323330
+34316338383136613131373139383864343162666131616337643864373433353433626462353033
+35663431363163343837646561373736303439313061616336303839333430626139333263353563
+30383833653033336434356634616361303431633038343036653430306231393961353733643135
+32646139623238333165363038393834663238303835666561326265303565393434383831343165
+33373465656265316665326163626161383362326437633765626136316364666666383937616531
+30373536366263653465376165313166626436316566376562646232353131613562316533636335
+34343061393833653263383335623539626331613236353534313133346562653965313739333737
+36613831336434363364303962343839393830643738666361363637666666623232306430633732
+36393730313236653230373664643931326566353035653161663664366233616363653363323861
+39653836666537323864383130636431326236333961663736623563646238333938386336643831
+64663434333930363636376234623436333234313466326238393666346430336537316334353966
+62386331373534353036323539626663373937336139666537323430643431616465383534343231
+62666430326230393161623062383632373737393765323365313530336434323939346239306239
+61323064623365343932333233613433353963366631643965373632646533663634653637383035
+39376566633331343432346335383933396638613466623463323763323837323835323464306336
+65623936613666616238393963313035313863323832616137623763613333396430306237386637
+37636366643430316330663538653731326139633031386539396365306430623235653733616365
+36643736396533623166303932323538343431343836363139306432313339643361643231333466
+34336666353361303139343138623839396663326534353634643837373866373338366637363635
+39633338393237626239336439666431396561393063643162633931613932396135656365643130
+35326461346330396239373330653962383237626662353462633734356163383331373863323062
+65636161656364653530636336323035363235663030663839333161326236326434636564663961
+66663666386536643363336232313938343066373861323263353535316132346435333936383762
+31326434616439363230663037363330626137333437653062663934343634343236373837393531
+62376435626233656537353466343932323832613462393830373939616132633233633035613535
+63626530313563316536316233343932663830303130303833326432336638623730316661353465
+37663864386437646432666166353430653465623164353436636230386361666530396462313937
+38623237373064383565613563613532326263336131303739316233363636623062383730373034
+35323238383564333265333762666462303664313735383837616532666563313261386138336635
+62623039326338343734643431656162653530663239376264323162336434343663633531313564
+61663036346538396332333063333362613734643261316465306266663262626239616430643938
+30306130353264343839333431393431643565356362376634353962313262363337643034653936
+31333532643636393635626337613465333834376264363539383632363263396339623662306562
+31663262303338393431313133356238303637383762353634303466373566643666326238663466
+30636139336566616261323562383262663439633165393633613162313766653163316139333735
+30396465663233663038663865656362356165323138663738646534383134383634646164636465
+65636530356234386464363630353837666363323164343239623933333330323864366432393536
+66633439303234656339636165613034336265363134363730393632623139353961313438306635
+63363662616330633866653439626431306532393038333134353833303063353632643238333930
+35326635323134623630316638663533653138653136383739376234333863356534346464623630
+35646663313136393638653035653263326464626633323735663433383836336361363861616130
+61396636383737646435643235376637353961633062386337633565643161613964383362653961
+38613637623332613535313034343838373530383635643432656537333462333966313831356632
+65313261343763353638653665353831363037353364366335316463343937623633386237646261
+34326663653261356463383938373336656364393462313439646635383432353865636362316333
+65633830376164316133353935616531366163383434656234353038336265376632356439633365
+31373939346231623735633232326566303964633634363762323463373839336234356161376331
+66386432336465313663393261343535316231653336303738343739306361326136393564346365
+30373436393631303761323762373231353861396662376137323733623561313839326538336237
+31653734666433313034316636376363366364623361313335316531626335643161613533643037
+62613861323337643866313032303535346532616531393664316338323965396464636261343231
+31383135353964353165663563303266353963663565316630666131666239363639383261636263
+36393638363162393562633336386263643365356561303339353665386537313937343762393038
+66316539613064636636383866303362363863316563663761633165373263373061306138616335
+36326165623437316163396664366330383932633732616639636538356533633161623933383939
+37303935366532316565323834383436313137346337333461626633316366663666373832323965
+66303434643964306336303937326331376263333336333934393336653835396561633330353831
+64653765356161386234616463326363626639613838393938616134336331303863353733306430
+63623464643538396236653166636262316632353062363430393333613030616563613266313263
+61306337616539653839613132393537633837383239643938363737313863666161383138353063
+64393464636264383830333962393638363035643865343261323731623462356237333333626136
+36643561343564633337316162343634313438323533343632623135333936363331353361366435
+33646632366262336638386165336136303166323539396630313163363961343033323735363264
+32646264643366326539393532633237646365326362653632633835636534383930613830343436
+64616661346265323037366564356235666132353536656264363939313262346133363838653539
+65333263363361363333666636363131326635346332346438353435653839306337393835343462
+35323062383138326234333365306139323232323039316130313564306633623934656534643061
+65643535636666353962333162383039353866373433636464353032613438333262613134646536
+64633037346639366461333031363266633131313533303030643366643964326138323330353332
+33393964646537363462336430303636333430363433393632613730363133633435386430333033
+36336432356235336161393062346665346163653266303830306236663361646562313037353033
+37316233373635313036666536633263373961323666343262663439313438663765663335323964
+35313833353531616334336364386665623931383966386331386235376535653231656364396133
+65643537643364376134623664343531326362333239353336373032363436343333653865666338
+35613732623564343464346432333763356637383864666538646637653030306632363962323762
+33346363643232343231313266363163613861303737643930653135626334343430333864346163
+33386566363531336435653833366232313239323638316239336664323565653837623765656232
+61353066656436636233626366646563303462633932373463626165373635653238393933656139
+38356364376563613934653836613334643865623063656632643436363362363935646561323561
+34353936333639623330393363393835303234343636663332663033336633316266656330373732
+31396630313032633761386464306262613161666131366235333266353334303933316362646131
+35643837356261343634383362336139383633386636356165626636353234326532303466626661
+62316336336133623561393630656136356233653537313162336161646435393663653636333962
+35366538353838303638633639393139343538636363393836363834376531363764373039626138
+39376166346364306135626435363164646332613635633432383663343030653763356637633639
+66333266653334626365636161653061373637646566343632623335613565323465653835313763
+34666133643136396531663562663836393038666364633238333631633631646463316461613639
+33383864303166383731626137363439356132643033323137626463306531323761373131363161
+36383663346136323565393966376361326432363135613030363234336663313732303931326637
+31326433656566386233323832623630323763323465633033613036636262306130633238383532
+33663463313463383864306431313235663766613937653733373835353232356366613663656162
+66613362303431663436363132366135303035383435623733666235373732323363383731663662
+62666363363031393634633764373766633035326631336131383738653862626530343535333335
+62323762313338613366646434613434633966663538386137626433383136613536663734613639
+37626564363966343430653135353239653262643134366236656138383034623039666631636161
+63646364643561353236383132396331643037643330646337643133386136343832383834383361
+36336433323164343439303937373161343633653731356230393562303834326533653338356339
+63383230373339346135313764336438623264623162646638616365643631623238666463633136
+34653533383030393734626137313632343962393034633231623266646237636630333239613032
+66303630326330646636343932636530313338326630663361653363373734376166323436326662
+62306538306537396365663663343938343631623338313032656538666331623461323931643366
+35356363623965366336646263313434326562393631313436613861313264643164616566313762
+30373966323964363065343733383634346566316431663261303661363732393365643764306138
+66343764373061383664643830643964316239336439646534646430303838653465643632336562
+61336662313938333464663062313465323633653162366338363935636636393437633133366237
+31626566383535643532323235393964343461343034336530363339393430356337666638373361
+36376334633461383938396362333662626436323531366264663430366135633232666334656563
+62353836613763386437353539326666323438646536623164386230633461326331386365373862
+62613638666363363165633035353734643436313366393632633733373466613565623236663933
+32626365373139333238636634316662386262623936306562393731636439316134353964656264
+33623666643531663934626564353232306333323538633363633061373738643833353665623436
+39626664323063303433333430306536363962383365306164613837356561356533386662313939
+34396231363838343635656632363565666433323361336462363039313461636330373734653738
+61323834373365626230366138623533333634356337346561343930393832623165353630623265
+33306339383366616166356336666564313564666331663561333738323162636531613534343461
+37373832346633346437313532366137386335396234613464356537633463656534613764656362
+63323337366361393264623138393132323964373635663635353032313437353565396139393462
+64346535313436646633646439336333306432353734376562316432653937666234303764383139
+32636238663362666338306436343736343435366237643764323638633033333266306134393033
+37626532343366383964656439393236643866356438306464646532613465653434353632336362
+31326138326234373063336134336132383861366632643130313939656631373261343338643530
+31383937366134393161623132313039383962336463333135373532326461393533623834373536
+66343764383166336261313937303464326438363834393635336234336464393937343633303432
+35306430653134323132396530626137386532633735343931356366663638633735303439633234
+34396534336362343262363538363036346138333263323335336564303331353966343036646138
+39396331623034373162313664323734386261336462386265623639656533396235336134323531
+36383462313533326633326634373734363661663164663236613165376139613365356665346530
+39396464316263643431663737623536666530663931336161316439376165353564323930623434
+39663265383162353363383363663661376530663461323166386335393739636231396665326161
+36646561333634613961623034326534356166356533353030393965616563636566343761336435
+38313531306132666663646234656265333030616361623364356461383965376662316637333732
+65366162396635313739363836346338303537376132656132393634373038643835363434386663
+38313935303231356335393163616462613932356262663064656164396364643430396630353163
+33343763336436346134643864623066336134383134636637363130623665396335366139643936
+36303764343534396539386232643064616466643566383762356336333738316236363265386432
+61356564633632306539386435613464336563323164363837323466383838353437653231373530
+36663630653639323663343935616132633535323730356466626230383461653465326361376536
+30623339666264633036336461333161373336393933633237393364346133396431353563636664
+35663030643935636131633538656266306231663265373930326537393134326161323137373036
+66333932646630386636306362363532313231313336306334643337663533653335626134373233
+39323339323136383639386565376461653237326236326535326334666237646230646232616463
+63616362386434303838636564613338386437336634393264623131393935353739343132386132
+35393632353131666233666164613735346632313066353335313333363230316463616530336333
+61633237616236396265633035643839623836353165373830333835306261633132636636316565
+35396530656661363138636334336632393432393735666337666138373466373965313531373866
+31623433336462396662313165336463613332656263663230363537623239663636393735643864
+34373839626339313565383761313963316337393531323766666465303866323235333631393964
+30306537666534323434613965313234333836373430633938616536633163313933623633396265
+39623932333034623530393632366536393732383833346461353964323539333466376361646237
+39626466383561323266343133353134623435633263356231623666393239643764336439623036
+36653362373666646336356239373934636434323935383038326561313639313731666433336333
+36386265616364636361633733353534646538626630303535613134623635656666316161323036
+38343831633066383438393137616534623531343762646163306630633131393962383739653932
+35383136663937363062636132383935646438316563373139663563363032383235346265316337
+62366531626233373038663163636430666132643466623737663063343137616532323466636530
+36396361353935336265373863656435666531663733666130643230663831363235333561653438
+64336533306263376266386432343035626238373431623235306634643737393962616333323562
+64363833633930383534613363656661343433393336633862306465343264376539633463346138
+39376365383662633332313030333764323333623765393032306539663761666365306538366135
+34636530346535313261353831306536623761613363653634393463303035353336323037656333
+66646364366562663134306564393961346633386334326635366532336233653730636561353433
+31303539373037613961313135356139613163636232383134333261376261666130316632613535
+36303332613263376163626263376566303233626138353566653135346665303164313439353163
+31306232626538356565393537373738343839353365346565353063633465663265353030663363
+31366535343866353436366332663963313737323336633163363338353433656662666135356138
+33356537616530613733376430326566376364376230373731336631323736646332336234663865
+39373937353532346231613030306163353933666634373237363233363431353531353039373331
+31653837356365626330663461353934643231643534343034306332373736643932336135373937
+35343339346336353666666139623830656536323165383531656134333239383733383163643137
+64316434323732363533663239633530383464613365356331636236646234636263633032303865
+33356239653564346561343965373132653736656431323234343263663963363066633439663666
+30666539626265326461326661613133326135616563316437343765306232613835636331336261
+64323938623936323263323363663662313638663638393130326332393633353537383061326139
+30393861303066316166343433326335323531653063666135393133366638383365663864323262
+37353934336432343163313463393738656339323634373738303165656532313532626463373461
+34323034373834643664323337346233313766326634656562366632363638633138646362313930
+65653737366530313830333966616539373262613734346261373562643534626230393935623732
+37306636643065636438326266313164383539343261313564636433636430343731343537613561
+31343165383930616335336439356339616233356636386439636532346362623938396166393239
+30663535333661306635353635643864303432303631376437383262366131373335653464393436
+30656334646461376338373762343336613062303563386466343731653136643764323665393630
+31326264656330313764663137336363336366646639616461343465306436616233633836316539
+34646266626364333939623763333665613062396163663039326565346239353461336534376135
+62343965643732326232623732326432393238613661393166386231646436366138363535306239
+61343831643038353563376133666234633862623633656336373733663639343637643535633133
+37613538633036666561636432313839306435396534303133396231313063316238316633643036
+39656466623062376161353464306438656666623835313561343237333639353130363938383831
+65383433623139356664303638356264643138656462633037316439323932616633356131643631
+30616335303165613833356533346132343234393938633930643635653638336164666661663834
+63616266636434373635616431376362336231653036353935666630333139303634303034666164
+38316634613464663335303734643062303330316438623061393337393765373563653761353334
+39633835373433326436663337623361626664656534333538643865383732643366353534356136
+30333531633438336231323864343735613266386666316461386365623933363737383763373861
+39616239313938363133336332363033373733306533336239633434613130316261666662356331
+35616431366164633935623233306364396134626166326335613934343766666261653134306433
+36643837643862396433343261633635376464336535656336633838366439656339663938393132
+38316631636530313537363833336433646330646132333139633661656139313230306234386533
+31353234613035653839383034643337323163383935316665323461376434306366376238663735
+66626164646433613338333964663933353639326261636663303536336133373831313531376462
+64346433663635353636653738393134316535363964336265623536393537663039376635373066
+30346365333131333537306631626164313533323531613061663461623963353236333439653262
+31316563333861393062643062343432653338393165306638373131663366383437653239346664
+63623531623130656536353466323831343338373734613863373534366165623738633731366333
+34343432636238616361663039653230363638306366306166383438363763653939373866326365
+35633466346537663961333761333234366333383234373930616336303731393765643937313234
+36363931393535303730366163383563316333663638373133336236613132363835353637326139
+64343966363435313138646265666537616432636165633435396165336537383937633133306236
+36653233656635353936653832656462613437646364303330306238356664366337323862656435
+38336161396162636163366234626534623463373237613461346135623938663566303263396663
+62313232376133663130623963633565396661613039323339613439333033356430366230306336
+64363663633031643239626165663432383432326463623634313939613566623738396532663931
+33336232306163636431616234356237313138646362626233306531613437356566346333643038
+62353836623862333535373531383338303563373832353236306366383563623763386134633032
+34383930396635653035653531613661663763613832303133363737613935666535613765356231
+31663635303036663466663830316532376134326537363764306263633831653262313337336639
+31366639653364353239336266323135363436393332653933663264393334343133353139656662
+32663134613066393061313934356535386661353834383939636566316338383234313832623564
+32326137323033386138316536313533313532643235386336633235313361303261313934333233
+38303061636663396164653033343735373264323262646639656264663534326138313336316530
+30373236336565663838316261666164643032613062636138323966346137356130343036363865
+37653036346665323636323833666666656536386261366636373365633237626339323866306163
+32633964306463653637383936623135346639396633353533653432643764343430333334643962
+62636331393265656234653930643335343336613938326635656265326633653563663834373439
+39643437396136313866613836333436316430383831356462613931656132343633323665373936
+31316138313261333564656631663434356363623565633864306136336433656164663564613430
+33383334393463383536393631336662653263323734633461303265343535366331623532653262
+62653863616338336436623535323439386333366430326561326430303564393230306562663864
+31306437663866333836303930386666643132333862623162396139643138383736616639303465
+66393036383139323161353436616630373264653864346261313965383361386261356462393138
+31303333376138646239336330323639366165656636306663373964343861366265363266633332
+34323131326332633539326631646232363937383262333533376438613364646631363264626162
+66656263363364653734333037613632313964613436643432663432346435636162656235356166
+36393536326666386335396337373135356330323661363531373738623935366630643530666562
+33636137663361356133666335653531323463383761313937373130323035366434356635663861
+33633661373937383138333962643064363966393939346135326466333834376231393534323737
+306432613765633339356133373438636332
--- a/group_vars/stage_qa/vault.yml
+++ b/group_vars/stage_qa/vault.yml
--- a/hcloud_firewall.yml
+++ b/hcloud_firewall.yml
@ -40,10 +40,45 @@
  connection: local

  tasks:
-    - name: "Setup hcloud firewall via include_role"
+    - name: "Setup base hcloud firewall rules"
      include_role:
        name: hcloud
        tasks_from: configure-firewall2
      loop: "{{ hcloud_firewall_objects }}"
      loop_control:
        loop_var: firewall_object
+
+# set ENVvar awx_related=True to trigger playbook part
+#
+# needs to be implemented via switch due to potentially missing nodes at first time
+# when playbook was executed
+#
+    - name: "Generate awx-related hcloud firewall rules"
+      block:
+      - name: "Lookup hetzner servers - smaradigo k8s worker nodes"
+        delegate_to: localhost
+        hcloud_server_info:
+          api_token: "{{ hetzner_authentication_ansible_vault }}"
+          label_selector: 'service=kube_node'
+        register: found_servers
+
+      - name: "Initial VAR(s)"
+        set_fact:
+          k8s_worker_node_ips: []
+
+      - name: "Get IPs from k8s worker nodes"
+        set_fact:
+          k8s_worker_node_ips: '{{ k8s_worker_node_ips + [ item + "/32" ] }}'
+        loop: '{{ found_servers.hcloud_server_info | selectattr("ipv4_address","defined") | map(attribute="ipv4_address") }}'
+
+      - name: "Setup hcloud firewalls for AWX stuff..."
+        include_role:
+          name: hcloud
+          tasks_from: configure-firewall2
+        vars:
+          src_ips: '{{ k8s_worker_node_ips }}'
+        loop: "{{ hcloud_firewall_objects_awx }}"
+        loop_control:
+          loop_var: firewall_object
+      when:
+        - awx_related
--- a/kubernetes.yml
+++ b/kubernetes.yml
@ -22,10 +22,11 @@
  roles:
    - { role: kubernetes/base }
    - { role: kubernetes/namespace }
-    - { role: kubernetes/cloud-controller-manager }
-    - { role: kubernetes/container-storage-interface }
+    - { role: kubernetes/cloud_controller_manager }
+    - { role: kubernetes/container_storage_interface }
    - { role: kubernetes/prometheus }
-    - { role: kubernetes/cert-manager }
-    - { role: kubernetes/external-dns }
-    - { role: kubernetes/ingress-controller }
-    - { role: kubernetes/apps }
+    - { role: kubernetes/cert_manager }
+    - { role: kubernetes/external_dns }
+    - { role: kubernetes/ingress_controller }
+    - { role: kubernetes/argocd }
+    - { role: kubernetes/awx }
--- a/roles/kubernetes/apps/tasks/main.yml
+++ b/roles/kubernetes/apps/tasks/main.yml
@ -1,26 +0,0 @@
---
-
-### tags:
-###   argo-cd
-
- name: "Deploy argo-cd"
-  include_tasks: argocd.yml
-  tags:
-    - argo-cd
-  args:
-    apply:
-      tags:
-        - argo-cd
-  when:
-  - inventory_hostname == groups['kube_control_plane'][0]
-
- name: "Configure AWX"
-  include_tasks: awx.yml
-  tags:
-    - awx
-  args:
-    apply:
-      tags:
-        - awx
-  when:
-  - inventory_hostname == groups['kube_control_plane'][0]
--- a/roles/kubernetes/argocd/defaults/main.yml
+++ b/roles/kubernetes/argocd/defaults/main.yml
@ -1,8 +1,4 @@
 ---
-
-k8s_prometheus_helm__name: "prometheus"
-k8s_prometheus_helm__release_namespace: "monitoring"
-
 k8s_argocd_helm__name: "argo-cd"
 k8s_argocd_helm__release_namespace: "argo-cd"

@ -168,16 +164,16 @@ k8s_argocd_helm__release_values:
        warn: false
    additionalApplications:
    -
-      name: awx
+      name: awx-operator
      namespace: '{{ k8s_argocd_helm__release_namespace }}'
      destination:
        namespace: awx
        server: https://kubernetes.default.svc
      project: infrastructure
      source:
-        path: apps/{{ stage }}/awx
+        path: apps/{{ stage }}/awx-operator
        repoURL: https://{{ shared_service_gitea_hostname }}/gitea-admin/argocd.git
-        targetRevision: HEAD
+        targetRevision: master
      syncPolicy:
        automated:
          prune: true
@ -185,16 +181,16 @@ k8s_argocd_helm__release_values:
        syncOptions:
        - CreateNamespace=true
    -
-      name: guestbook
+      name: awx-smardigo
      namespace: '{{ k8s_argocd_helm__release_namespace }}'
      destination:
-        namespace: guestbook
+        namespace: awx
        server: https://kubernetes.default.svc
      project: infrastructure
      source:
-        path: apps/{{ stage }}/guestbook
+        path: apps/{{ stage }}/awx
        repoURL: https://{{ shared_service_gitea_hostname }}/gitea-admin/argocd.git
-        targetRevision: HEAD
+        targetRevision: master
      syncPolicy:
        automated:
          prune: true
@ -216,27 +212,3 @@ k8s_argocd_helm__release_values:
      argocdServerAdminPassword: '{{ argocd_server_admin_password | password_hash("bcrypt") }}'

 k8s_argocd__crd_applicationset_version: v0.4.0
-
-awx_admin_username: admin
-awx_ansible_username: ansible
-awx_ansible_password: ansible
-
-# TODO
-# reason: IT DOES NOT SCALE!!!!
-# plz move it so separate DIR and do a lookup for all file in $DIR
-# not doing it right now due avoiding breaking change within <migrating awx to k8s>
-awx_job_templates:
-  - name: "create-database"
-  - name: "create-database-backup"
-  - name: "create-kibana-objects"
-  - name: "create-realm"
-  - name: "create-server"
-  - name: "create-service"
-  - name: "import-database"
-  - name: "remove-database"
-  - name: "remove-realm"
-  - name: "remove-server"
-  - name: "remove-service"
-  - name: "restore-database-backup"
-  - name: "update-monitoring"
-  - name: "update-service-state"
--- a/roles/kubernetes/argocd/tasks/main.yml
+++ b/roles/kubernetes/argocd/tasks/main.yml
@ -3,6 +3,12 @@
  include_role:
    name: keycloak
    tasks_from: _authenticate
+  args:
+    apply:
+      tags:
+        - argo-cd
+  tags:
+    - argo-cd

 - name: "Setup keycloak-realm for argocd"
  include_role:
@ -14,6 +20,12 @@
    create_client: False
  when:
  - inventory_hostname == groups['kube_control_plane'][0]
+  args:
+    apply:
+      tags:
+        - argo-cd
+  tags:
+    - argo-cd

 - name: "Create a Keycloak group, authentication with credentials"
  include_role:
@ -26,6 +38,12 @@
      - name: "{{ argo_realm_group }}"
  when:
  - inventory_hostname == groups['kube_control_plane'][0]
+  args:
+    apply:
+      tags:
+        - argo-cd
+  tags:
+    - argo-cd

 - name: "Create keycloak user(s)"
  include_role:
@ -36,6 +54,12 @@
    current_realm_users: '{{ argo_realm_users }}'
  when:
  - inventory_hostname == groups['kube_control_plane'][0]
+  args:
+    apply:
+      tags:
+        - argo-cd
+  tags:
+    - argo-cd

 - name: "ADD user group mapping"
  include_role:
@ -48,6 +72,12 @@
    bearer_token: '{{ access_token }}'
  when:
  - inventory_hostname == groups['kube_control_plane'][0]
+  args:
+    apply:
+      tags:
+        - argo-cd
+  tags:
+    - argo-cd

 - name: "Create keycloak clientscope"
  delegate_to: localhost
@ -73,6 +103,8 @@
        protocolMapper: oidc-group-membership-mapper
  when:
  - inventory_hostname == groups['kube_control_plane'][0]
+  tags:
+    - argo-cd

 # using template from exported keycloak client object
 # due to needed params but missing in community.general.keycloak_client
@ -91,6 +123,8 @@
    keycloak_clientscope_name: '{{ argo_keycloak_clientscope_name }}'
    keycloak_clientscope_protocol: '{{ argo_keycloak_clientscope_protocol }}'
    keycloak_client_secret: '{{ argo_keycloak_client_secret }}'
+  tags:
+    - argo-cd

 # throw needed VARs against keycloak API
 # to CRUD
@ -105,6 +139,12 @@
    bearer_token: '{{ access_token }}'
  when:
  - inventory_hostname == groups['kube_control_plane'][0]
+  args:
+    apply:
+      tags:
+        - argo-cd
+  tags:
+    - argo-cd

 - name: "GET available clients from <<{{ argo_realm_name }}>>-realm"
  delegate_to: localhost
@ -119,6 +159,8 @@
  register: argo_realm_clients
  when:
  - inventory_hostname == groups['kube_control_plane'][0]
+  tags:
+    - argo-cd

 # available clients: get needed ID
 - name: "Get ID of client by paring argo_realm_clients object"
@ -126,6 +168,8 @@
    id_of_client: '{{ ( argo_realm_clients.json | selectattr("clientId","equalto",argo_client_id ) | first ).id }}'
  when:
  - inventory_hostname == groups['kube_control_plane'][0]
+  tags:
+    - argo-cd

 - name: "GET client-secret for client <<{{ argo_client_id }}>> in realm <<{{ argo_realm_name }}>>"
  delegate_to: localhost
@ -140,6 +184,8 @@
  register: client_secret
  when:
  - inventory_hostname == groups['kube_control_plane'][0]
+  tags:
+    - argo-cd

 - name: "DEBUG"
  debug:
@ -147,15 +193,21 @@
  when:
  - debug
  - inventory_hostname == groups['kube_control_plane'][0]
+  tags:
+    - argo-cd

 - name: "Create namespace <{{ k8s_argocd_helm__release_namespace }}>"
+  become: yes
  kubernetes.core.k8s:
    name: "{{ k8s_argocd_helm__release_namespace }}"
    api_version: v1
    kind: Namespace
    state: present
+  tags:
+    - argo-cd

 - name: "Create a k8s Secret containing GPG key"
+  become: yes
  kubernetes.core.k8s:
    state: present
    definition:
@ -167,6 +219,8 @@
        name: sops-gpg
        namespace: '{{ k8s_argocd_helm__release_namespace }}'
      type: Opaque
+  tags:
+    - argo-cd

 - name: "Create VAR to overwrite specific helm value - prepare combining dicts"
  set_fact:
@ -177,12 +231,16 @@
            oidc.keycloak.clientSecret: '{{ client_secret.json.value }}'
  when:
  - inventory_hostname == groups['kube_control_plane'][0]
+  tags:
+    - argo-cd

 - name: "Combining helm release values"
  set_fact:
    combined_helm__release_values: '{{ k8s_argocd_helm__release_values | combine(additional_helm_values, recursive=True) }}'
  when:
  - inventory_hostname == groups['kube_control_plane'][0]
+  tags:
+    - argo-cd

 - name: "DEBUG"
  debug:
@ -190,8 +248,11 @@
  when:
  - debug
  - inventory_hostname == groups['kube_control_plane'][0]
+  tags:
+    - argo-cd

 - name: Deploy argo-cd inside argo-cd namespace
+  become: yes
  kubernetes.core.helm:
    name: "{{ k8s_argocd_helm__name }}"
    chart_ref: "{{ k8s_argocd_helm__chart_ref | default('argo-cd') }}"
@ -201,62 +262,5 @@
    release_values: "{{ combined_helm__release_values }}"
  when:
  - inventory_hostname == groups['kube_control_plane'][0]
-
- name: Download argo-cd ApplicationSet CRD
-  get_url:
-    url: 'https://raw.githubusercontent.com/argoproj/applicationset/{{ k8s_argocd__crd_applicationset_version }}/manifests/install.yaml'
-    dest: '/tmp/argocd_ApplicationSet_install_{{ k8s_argocd__crd_applicationset_version }}.yml'
-    mode: '0440'
-  when:
-  - inventory_hostname == groups['kube_control_plane'][0]
-
- name: Deploy argo-cd ApplicationSet CRD
-  kubernetes.core.k8s:
-    state: present
-    namespace: '{{ k8s_argocd_helm__release_namespace }}'
-    src: '/tmp/argocd_ApplicationSet_install_{{ k8s_argocd__crd_applicationset_version }}.yml'
-  when:
-  - inventory_hostname == groups['kube_control_plane'][0]
-
- name: Checkout defined argocd-related objects
-  ansible.builtin.git:
-    repo: 'https://{{ gitea_admin_username }}:{{ gitea_admin_password }}@{{ shared_service_gitea_hostname }}/gitea-admin/argocd.git'
-    dest: '/tmp/gitrepo'
-    version: master
-  when:
-  - inventory_hostname == groups['kube_control_plane'][0]
-
- name: Find file with definition of argocd-AppProjects
-  find:
-    paths: '/tmp/gitrepo/AppProjects'
-    pattern: '*.yml'
-  register: appprojects
-  when:
-  - inventory_hostname == groups['kube_control_plane'][0]
-
- name: Find file with definition of argocd-ApplicationSets
-  find:
-    paths: '/tmp/gitrepo/ApplicationSets'
-    pattern: '*.yml'
-  register: applicationsets
-  when:
-  - inventory_hostname == groups['kube_control_plane'][0]
-
- name: Apply defined AppProjects defined in checked out repo
-  kubernetes.core.k8s:
-    state: present
-    namespace: '{{ k8s_argocd_helm__release_namespace }}'
-    src: '{{ item.path }}'
-  loop: '{{ appprojects.files }}'
-  when:
-  - inventory_hostname == groups['kube_control_plane'][0]
-
- name: Apply defined ApplicationSets defined in checked out repo
-  kubernetes.core.k8s:
-    state: present
-    namespace: '{{ k8s_argocd_helm__release_namespace }}'
-    src: '{{ item.path }}'
-  loop: '{{ applicationsets.files }}'
-  when:
-  - inventory_hostname == groups['kube_control_plane'][0]
-
+  tags:
+    - argo-cd
--- a/roles/kubernetes/argocd/templates/keycloak-realm-create-client-argocd.json.j2
+++ b/roles/kubernetes/argocd/templates/keycloak-realm-create-client-argocd.json.j2
--- a/roles/kubernetes/awx/defaults/main.yml
+++ b/roles/kubernetes/awx/defaults/main.yml
@ -0,0 +1,23 @@
+---
+awx_ansible_username: ansible
+awx_ansible_password: ansible
+
+# TODO
+# reason: IT DOES NOT SCALE!!!!
+# plz move it so separate DIR and do a lookup for all file in $DIR
+# not doing it right now due avoiding breaking change within <migrating awx to k8s>
+awx_job_templates:
+  - name: "create-database"
+  - name: "create-database-backup"
+  - name: "create-kibana-objects"
+  - name: "create-realm"
+  - name: "create-server"
+  - name: "create-service"
+  - name: "import-database"
+  - name: "remove-database"
+  - name: "remove-realm"
+  - name: "remove-server"
+  - name: "remove-service"
+  - name: "restore-database-backup"
+  - name: "update-monitoring"
+  - name: "update-service-state"
--- a/roles/kubernetes/apps/tasks/awx-config-cleanup.yml
+++ b/roles/kubernetes/apps/tasks/awx-config-cleanup.yml
@ -1,6 +1,7 @@
 ---

 - name: "Fetch all {{ awx_rest_api_type }} ids"
+  delegate_to: localhost
  no_log: true
  uri:
    url: "{{ awx_base_url }}/api/v2/{{ awx_rest_api_type }}/"
@ -19,6 +20,7 @@
    - awx_config

 - name: "Remove all {{ awx_rest_api_type }}" # noqa ignore-errors
+  delegate_to: localhost
  no_log: true
  uri:
    url: "{{ awx_base_url }}{{ item.url }}"
--- a/roles/kubernetes/apps/tasks/awx-config-get-typ-id.yml
+++ b/roles/kubernetes/apps/tasks/awx-config-get-typ-id.yml
@ -6,6 +6,7 @@
  changed_when: False

 - name: "Search {{ awx_rest_api_type }} informations for {{ awx_search_name }}"
+  delegate_to: localhost
  uri:
    url: "{{ awx_base_url }}/api/v2/{{ awx_rest_api_type }}/?search={{ awx_search_name | urlencode }}"
    method: GET
--- a/roles/kubernetes/apps/tasks/awx-config-job-template-credential.yml
+++ b/roles/kubernetes/apps/tasks/awx-config-job-template-credential.yml
@ -4,6 +4,7 @@
    found_credential_id: ""

 - name: "Get {{ job.name }} job_template credential id's from awx server"
+  delegate_to: localhost
  uri:
    url: "{{ awx_base_url }}/api/v2/job_templates/{{ awx_job_template_id }}/credentials"
    method: GET
@ -45,6 +46,7 @@
   - awx_type_id is defined

 - name: "Add credential id {{ awx_credential_id }} to {{ job.name }} job_template"
+  delegate_to: localhost
  uri:
    url: "{{ awx_base_url }}/api/v2/job_templates/{{ awx_job_template_id }}/credentials/"
    method: POST
--- a/roles/kubernetes/apps/tasks/awx-config-job-template.yml
+++ b/roles/kubernetes/apps/tasks/awx-config-job-template.yml
@ -19,6 +19,7 @@
    - (awx_type_id | default(None)) != "None"

 - name: "Add job template {{ job.name }}"
+  delegate_to: localhost
  vars:
    name: "{{ job.name }}"
    description: "{{ job.description | default(job.name) }}"
--- a/roles/kubernetes/apps/tasks/awx-config.yml
+++ b/roles/kubernetes/apps/tasks/awx-config.yml
@ -7,7 +7,7 @@

 - name: "Printing..."
  debug:
-    msg: "{{ ansible_ssh_key_private }}"
+    msg: "{{ ansible_ssh_key_private_vault }}"
  delegate_to: 127.0.0.1
  become: false
  when:
@ -27,6 +27,7 @@
    - awx_type_id != "None"

 - name: "Add user <{{ awx_ansible_username }}>"
+  delegate_to: localhost
  vars:
    username: "{{ awx_ansible_username }}"
    password: "{{ awx_ansible_password }}"
@ -92,7 +93,7 @@
  when:
    - awx_type_id != "None"

- name: "Add <Machine> credentials <hetzner-ansible-ssh> with user: {{ ansible_awx_user_id }}"
+- name: "Create json object for <Machine> credentials <hetzner-ansible-ssh>"
  vars:
    name: "hetzner-ansible-ssh"
    user_id: "{{ ansible_awx_user_id }}"
@ -100,7 +101,20 @@
    credential_type_name: "Machine"
    username: "Ansible"
    ssh_public_key_data: "{{ lookup('file', '{{ playbook_dir }}/users/ansible/ssh.pub') }}"
-    ssh_key_data: "{{ ansible_ssh_key_private | replace('\n','\\n') }}"
+    ssh_key_data: "{{ ansible_ssh_key_private_vault | replace('\n','\\n') }}"
+  set_fact:
+    machine_creds: "{{ lookup('template','awx-create-credential.json.j2') }}"
+  when: awx_credential_hetzner_ansible_id is not defined
+
+- name: "Printing..."
+  debug:
+    msg: "{{ machine_creds }}"
+  delegate_to: 127.0.0.1
+  when:
+   - debug
+
+- name: "Add <Machine> credentials <hetzner-ansible-ssh> with user: {{ ansible_awx_user_id }}"
+  delegate_to: localhost
  uri:
    url: "{{ awx_base_url }}/api/v2/credentials/"
    method: POST
@ -110,7 +124,7 @@
      Content-Type: "application/json"
      Accept: "application/json"
    body_format: "json"
-    body: "{{ lookup('template','awx-create-credential.json.j2') }}"
+    body: "{{ machine_creds }}"
    force_basic_auth: true
    validate_certs: false
    status_code: 201
@ -159,6 +173,7 @@
    - awx_type_id != "None"

 - name: "Add <Source Control> credentials <{{ stage }}-gitea>"
+  delegate_to: localhost
  uri:
    url: "{{ awx_base_url }}/api/v2/credentials/"
    method: POST
@ -226,6 +241,7 @@
    - awx_type_id != "None"

 - name: "Add <Vault> credentials <hetzner-ansible-vault>"
+  delegate_to: localhost
  vars:
    name: "hetzner-ansible-vault"
    user_id: "{{ ansible_awx_user_id }}"
@ -290,6 +306,7 @@
    - awx_type_id != "None"

 - name: "Add <Container Registry> credentials <{{ shared_service_harbor_hostname }}>"
+  delegate_to: localhost
  vars:
    name: "{{ shared_service_harbor_hostname }}"
    description: "{{ shared_service_harbor_hostname }}"
@ -349,6 +366,7 @@
    - awx_type_id != "None"

 - name: "Add execution environment <hetzner-ansible>"
+  delegate_to: localhost
  vars:
    name: "hetzner-ansible"
    description: "hetzner-ansible"
@ -405,6 +423,7 @@
    - awx_type_id != "None"

 - name: "Add inventory <localhost>"
+  delegate_to: localhost
  vars:
    name: "localhost"
    description: "localhost"
@ -458,6 +477,7 @@
    - awx_type_id != "None"

 - name: "Add project <hetzner-ansible>"
+  delegate_to: localhost
  vars:
    name: "hetzner-ansible"
    description: "hetzner-ansible"
@ -516,11 +536,11 @@
      "{{ awx_credential_hetzner_ansible_id }}",
    ]

-# step is needed otherwise ansible run will fail due to missing 
+# step is needed otherwise ansible run will fail due to missing
 # resources (playbooks) on with the job template references
 - name: "Wait for project <hetzner-ansible> was updated via SCM"
  pause:
-    seconds: 10
+    seconds: 30

 - name: "Create job templates"
  include_tasks: awx-config-job-template.yml
--- a/roles/kubernetes/awx/tasks/main.yml
+++ b/roles/kubernetes/awx/tasks/main.yml
@ -3,9 +3,10 @@
  set_fact:
    awx_base_url: "https://{{ stage }}-kube-awx.{{ domain }}"
  tags:
-    - always
+    - awx

 - name: "Checkin if awx in k8s cluster is avail"
+  delegate_to: localhost
  uri:
    url: "{{ awx_base_url }}/api/login"
    method: GET
@ -21,8 +22,11 @@
  until: check_awx_available.status in [200]
  when:
  - inventory_hostname == groups['kube_control_plane'][0]
+  tags:
+    - awx

 - name: "Get awx admin password from k8s secret object"
+  become: yes
  kubernetes.core.k8s_info:
    api_version: v1
    kind: Secret
@ -32,16 +36,16 @@
  when:
  - inventory_hostname == groups['kube_control_plane'][0]
  tags:
-    - always
+    - awx

 - name: "Define some VARs"
  set_fact:
-    awx_admin_username: admin # overwritting stage-specific VAR declaration due to already existing awx-installation(${stage}-dev-awx...)
    awx_admin_password: '{{ ( awx_admin_creds.resources | first ).data.password | b64decode }}'
  tags:
-    - always
+    - awx

 - name: "Authenticating with awx server"
+  delegate_to: localhost
  uri:
    url: "{{ awx_base_url }}/api/login"
    method: GET
@ -53,13 +57,13 @@
    status_code: 200
  register: authentication_response
  tags:
-    - always
+    - awx

 - name: DEBUG
  debug:
    msg: "{{ authentication_response }}"
  tags:
-    - always
+    - awx
  when:
    - debug

@ -71,3 +75,9 @@
    awx_rest_api_access_pw: "{{ awx_admin_password }}"
  when:
  - inventory_hostname == groups['kube_control_plane'][0]
+  args:
+    apply:
+      tags:
+        - awx
+  tags:
+    - awx
--- a/roles/kubernetes/apps/templates/awx-create-credential.json.j2
+++ b/roles/kubernetes/apps/templates/awx-create-credential.json.j2
--- a/roles/kubernetes/apps/templates/awx-create-execution-environment.json.j2
+++ b/roles/kubernetes/apps/templates/awx-create-execution-environment.json.j2
--- a/roles/kubernetes/apps/templates/awx-create-inventory.json.j2
+++ b/roles/kubernetes/apps/templates/awx-create-inventory.json.j2
--- a/roles/kubernetes/apps/templates/awx-create-job-template.json.j2
+++ b/roles/kubernetes/apps/templates/awx-create-job-template.json.j2
--- a/roles/kubernetes/apps/templates/awx-create-project.json.j2
+++ b/roles/kubernetes/apps/templates/awx-create-project.json.j2
--- a/roles/kubernetes/apps/templates/awx-create-user.json.j2
+++ b/roles/kubernetes/apps/templates/awx-create-user.json.j2
--- a/roles/kubernetes/base/tasks/main.yml
+++ b/roles/kubernetes/base/tasks/main.yml
@ -25,6 +25,7 @@
    - base

 - name: Install Helm plugins
+  become: yes
  kubernetes.core.helm_plugin:
    plugin_path: "{{ item }}"
    state: present
--- a/roles/kubernetes/cert_manager/defaults/main.yml
+++ b/roles/kubernetes/cert_manager/defaults/main.yml
--- a/roles/kubernetes/cert_manager/tasks/main.yml
+++ b/roles/kubernetes/cert_manager/tasks/main.yml
@ -4,6 +4,7 @@
 ###   cert-manager

 - name: Install cert-manager via helm
+  become: yes
  kubernetes.core.helm:
    name: cert-manager
    chart_ref: "{{ k8s_certmanager_helm__chart_ref }}"
@ -17,6 +18,7 @@
    - cert-manager

 - name: Create secret for digitalocean-dns
+  become: yes
  kubernetes.core.k8s:
    definition:
      api_version: v1
@ -33,6 +35,7 @@
    - cert-manager

 - name: Create ClusterIssuer for letsencrypt (prod/staging)
+  become: yes
  kubernetes.core.k8s:
    definition:
      api_version: cert-manager.io/v1
--- a/roles/kubernetes/cloud_controller_manager/defaults/main.yml
+++ b/roles/kubernetes/cloud_controller_manager/defaults/main.yml
--- a/roles/kubernetes/cloud_controller_manager/tasks/main.yml
+++ b/roles/kubernetes/cloud_controller_manager/tasks/main.yml
@ -4,6 +4,7 @@
 ###   ccm

 - name: Create secret for Hetzner CCM
+  become: yes
  kubernetes.core.k8s:
    definition:
      api_version: v1
@ -24,6 +25,7 @@
    - ccm

 - name: Applying CCM deployment
+  become: yes
  kubernetes.core.k8s:
    state: present
    definition: "{{ lookup('template', k8s_ccm__template) }}"
--- a/roles/kubernetes/cloud_controller_manager/templates/hetzner-ccm-networks__v1.12.1.yaml.j2
+++ b/roles/kubernetes/cloud_controller_manager/templates/hetzner-ccm-networks__v1.12.1.yaml.j2
--- a/roles/kubernetes/container_storage_interface/defaults/main.yml
+++ b/roles/kubernetes/container_storage_interface/defaults/main.yml
--- a/roles/kubernetes/container_storage_interface/tasks/main.yml
+++ b/roles/kubernetes/container_storage_interface/tasks/main.yml
@ -4,6 +4,7 @@
 ###   csi

 - name: Create secret for Hetzner CSI
+  become: yes
  kubernetes.core.k8s:
    definition:
      api_version: v1
@ -23,6 +24,7 @@
    - csi

 - name: Applying CSI deployment
+  become: yes
  kubernetes.core.k8s:
    state: present
    definition: "{{ lookup('template', k8s_csi__template) }}"
--- a/roles/kubernetes/container_storage_interface/templates/hcloud-csi.v1.6.0.yaml.j2
+++ b/roles/kubernetes/container_storage_interface/templates/hcloud-csi.v1.6.0.yaml.j2
--- a/roles/kubernetes/external_dns/defaults/main.yml
+++ b/roles/kubernetes/external_dns/defaults/main.yml
--- a/roles/kubernetes/external_dns/tasks/main.yml
+++ b/roles/kubernetes/external_dns/tasks/main.yml
@ -4,6 +4,7 @@
 ###   external-dns

 - name: Install external-dns via helm
+  become: yes
  kubernetes.core.helm:
    name: external-dns
    chart_ref: "{{ k8s_externaldns_helm__chart_ref }}"
@ -17,6 +18,7 @@
    - external-dns

 - name: Create secret for digitalocean-dns
+  become: yes
  kubernetes.core.k8s:
    definition:
      api_version: v1
--- a/roles/kubernetes/ingress_controller/defaults/main.yml
+++ b/roles/kubernetes/ingress_controller/defaults/main.yml
--- a/roles/kubernetes/ingress_controller/tasks/main.yml
+++ b/roles/kubernetes/ingress_controller/tasks/main.yml
@ -4,6 +4,7 @@
 ###   ingress-controller

 - name: Install ingress via helm
+  become: yes
  kubernetes.core.helm:
    name: ingress
    chart_repo_url: "{{ k8s_ingress_helm__chart_repo_url | default('https://kubernetes.github.io/ingress-nginx') }}"
--- a/roles/kubernetes/namespace/tasks/main.yml
+++ b/roles/kubernetes/namespace/tasks/main.yml
@ -4,6 +4,7 @@
 ###   namespace

 - name: "Create k8s namespace <{{ k8s_namespace }}>"
+  become: yes
  kubernetes.core.k8s:
    name: "{{ k8s_namespace }}"
    api_version: v1
@ -15,6 +16,7 @@
    - namespace

 - name: "Create docker registry secret for namespace <{{ k8s_namespace }}"
+  become: yes
  kubernetes.core.k8s:
    state: present
    merge_type: merge
--- a/roles/kubernetes/prometheus/tasks/main.yml
+++ b/roles/kubernetes/prometheus/tasks/main.yml
@ -4,6 +4,7 @@
 ###   prometheus

 - name: Deploy kube-prometheus-stack inside monitoring namespace
+  become: yes
  kubernetes.core.helm:
    name: "{{ k8s_prometheus_helm__name }}"
    chart_repo_url: "{{ k8s_prometheus_helm__chart_repo_url | default('https://prometheus-community.github.io/helm-charts') }}"