From 41358ff8b2071d0ac1aced96f394f25a0e197780 Mon Sep 17 00:00:00 2001 From: Vladimir Kozhukalov Date: Tue, 25 Jun 2024 14:25:42 -0500 Subject: [PATCH] Couple tiny fixes for deploy-env role - typo in the setup of wireguard tunnel - wrong home directory when setup k8s client for root user Change-Id: Ia50f9f631b56538f72843112745525bc074e7948 --- roles/deploy-env/tasks/client_cluster_tunnel.yaml | 2 +- roles/deploy-env/tasks/k8s_client.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/deploy-env/tasks/client_cluster_tunnel.yaml b/roles/deploy-env/tasks/client_cluster_tunnel.yaml index 41daac0bd..8a39f4ab6 100644 --- a/roles/deploy-env/tasks/client_cluster_tunnel.yaml +++ b/roles/deploy-env/tasks/client_cluster_tunnel.yaml @@ -51,7 +51,7 @@ wg set client-wg listen-port 51820 private-key /root/wg-private-key peer {{ client_wg_public_key }} allowed-ips {{ tunnel_network_cidr }} endpoint {{ client_default_ip }}:51820 ip link set client-wg up iptables -t filter -P FORWARD ACCEPT - iptables -t filter -I FORWARD -o client-gw -j ACCEPT + iptables -t filter -I FORWARD -o client-wg -j ACCEPT EOF chmod +x /tmp/configure_cluster_tunnel.sh /tmp/configure_cluster_tunnel.sh diff --git a/roles/deploy-env/tasks/k8s_client.yaml b/roles/deploy-env/tasks/k8s_client.yaml index 9a3b96cc8..7991e291b 100644 --- a/roles/deploy-env/tasks/k8s_client.yaml +++ b/roles/deploy-env/tasks/k8s_client.yaml @@ -40,7 +40,7 @@ - name: "Set kubconfig file ownership for {{ kubectl.user }} user" shell: | - chown -R {{ kubectl.user }}:{{ kubectl.group }} /home/{{ kubectl.user }}/.kube + chown -R {{ kubectl.user }}:{{ kubectl.group }} {{ user_home_directory }}/.kube - name: Deploy Helm block: