okd/roles/openshift_docker_gc/tasks/main.yml

---
- name: Create docker-gc tempdir
  command: mktemp -d
  register: templates_tmpdir

# NOTE: oc_adm_policy_user does not support -z (yet)
- name: Add dockergc as privileged
  command: "{{ openshift_client_binary }}  adm policy add-scc-to-user -z dockergc privileged"
#  oc_adm_policy_user:
#    user: dockergc
#    resource_kind: scc
#    resource_name: privileged
#    state: present

- name: Create dockergc DaemonSet
  become: yes
  template:
    src: dockergc-ds.yaml.j2
    dest: "{{ templates_tmpdir.stdout }}/dockergc-ds.yaml"

- name: Apply dockergc DaemonSet
  oc_obj:
    state: present
    kind: DaemonSet
    name: "dockergc"
    files:
    - "{{ templates_tmpdir.stdout }}/dockergc-ds.yaml"

- name: Remove temp directory
  file:
    state: absent
    name: "{{ templates_tmpdir.stdout }}"