Managing Kubernetes Resources with Ansible Tower

I will explain the, how can we create, delete, restart resource on the kubernetss cluster with using ansible tower.

We need the ansible tower, kubernetes cluster and code pushing tool or ide like vscode.

Step1:

Create new repository on the your github account.
Our Repo:
https://github.com/hafifbilgiler/ANSIBLE

Step2:

Create new service account on the kubernetes cluster. And give permission to create new namespaces on the your kubernetes cluster. Also you can give another permission to control the deployment, replicaset or something else. I will share the sample sa account and cluster role file like below.

NOTE: I have used kubernetes v1.25.4. In this version you should create secret for your service account. This rule came with v1.22  version of kubernetes.

vim resource.yaml

kind: Namespace
metadata:
  name: ansible
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: create-namespace
  namespace: ansible
automountServiceAccountToken: true
---
apiVersion: v1
kind: Secret
metadata:
  namespace: ansible
  name: namespace-create
  annotations:
    kubernetes.io/service-account.name: create-namespace
type: kubernetes.io/service-account-token
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: namespace-create
rules:
- apiGroups: [""]
  resources: ["namespaces"]
  verbs: ["get", "watch", "list", "create", "delete"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: namespace-create
subjects:
- kind: ServiceAccount
  name: create-namespace
  namespace: ansible
roleRef:
  kind: ClusterRole
  name: namespace-create
  apiGroup: rbac.authorization.k8s.io

kubectl apply -f resource.yaml

Step3:

Obtain the you sa token with command below and register. Then try to list namespaces list with command below.

TOKEN=$(kubectl describe secret namespace-create -n ansible | grep token: | awk '{print $2}')

echo $TOKEN

Try to list namespaces,

curl -k  -H "Authorization: Bearer $TOKEN" -H 'Accept: application/json' https://<kubernetesmasternodeip>:6443/api/v1/namespaces/

Step4:

Create inventory and other files and push your github repository. You can find sample tasks from our repository.

https://github.com/hafifbilgiler/ANSIBLE/tree/master/TOWER

Step5:

Create new project, inventory and inventory source file on the ansible tower.

Step6:

Create new job template from your project.

Step7:

Run the template with extra variables and watch the your output.

That’s it. Have happy works!!!