okd/roles/openshift_node_problem_detector/tasks/install.yaml

---
- name: validate openshift_node_problem_detector_image_pull_policy variable
  fail:
    msg: "openshift_node_problem_detector_image_pull_policy must be one of Always, Never, IfNotPresent. Got {{ openshift_node_problem_detector_image_pull_policy }}"
  when: openshift_node_problem_detector_image_pull_policy not in ['Always', 'Never', 'IfNotPresent']

- name: create Node Problem Detector service account
  oc_serviceaccount:
    name: "{{ openshift_node_problem_detector_service_account }}"
    namespace: "{{ openshift_node_problem_detector_namespace }}"
    state: present

- name: bind node-problem-detector cluster role to the node-problem-detector service account
  oc_adm_policy_user:
    state: present
    user: "system:serviceaccount:{{ openshift_node_problem_detector_namespace }}:{{ openshift_node_problem_detector_service_account }}"
    namespace: "{{ openshift_node_problem_detector_namespace }}"
    resource_kind: cluster-role
    resource_name: "{{ openshift_node_problem_detector_cluster_role_name }}"

- name: Grant privileged SCC from node problem detector service account
  oc_adm_policy_user:
    state: present
    user: "system:serviceaccount:{{ openshift_node_problem_detector_namespace }}:{{ openshift_node_problem_detector_service_account }}"
    namespace: "{{ openshift_node_problem_detector_namespace }}"
    resource_kind: scc
    resource_name: privileged

- name: read node problem detector configmap
  include_vars:
    name: openshift_node_problem_detector_configmap
    file: "{{ openshift_node_problem_detector_configmap_filename }}"

- name: create node problem detector configuration configmap
  oc_configmap:
    state: present
    name: "{{ openshift_node_problem_detector_configmap_name }}"
    namespace: "{{ openshift_node_problem_detector_namespace }}"
    from_literal: "{{ openshift_node_problem_detector_configmap.data }}"

- name: create node problem detector
  template:
    src: "{{ openshift_node_problem_detector_daemonset_template_file }}"
    dest: "{{ openshift_node_problem_detector_tmp_location }}/npd-ds.yaml"

- name: create node problem detector daemonset
  oc_obj:
    kind: daemonset
    name: "{{ openshift_node_problem_detector_daemonset_name }}"
    namespace: "{{ openshift_node_problem_detector_namespace }}"
    state: present
    files:
    - "{{ openshift_node_problem_detector_tmp_location }}/npd-ds.yaml"
    delete_after: "{{ openshift_node_problem_detector_delete_tempfiles }}"