jadtalbert / ansible-install-couchbase-server-kubernetes Goto Github PK

Currently the implementation does not support TLS add this feature to allow secure connections into the cluster. This must be managed via the operator. Documentation can be found here-> https://docs.couchbase.com/operator/current/tutorial-tls.html

changes have been made to the group_vars/eks.yml file and are not current up-to-date nor are they accurate. Update the eks.yml file to represent the proper state of the variables.

Currently, the name and namespace attributes would have to be manually modified to meet the configuration in the group_vars/eks.yml file. To improve simplicity for the users, modify the couchbase/create_couchbase_cluster.yml file to loop over the directories and associated .yml files for each Resource type(e.g. CouchbaseCluster, Secret etc.) and dynamically add the attributes, so that the user can use the kubectl command without any specific dependency on specifying the namespace and this also removes the dependency on ansible-playbooks after the initial cluster has been provisioned.

Currently, the namespace attributes in all Couchbase YAML files are hard-coded. These should be made to implement the namespaces from the group_vars/eks.yml file to avoid having to make multiple changes across many files.

the pexpect module for ansible is not installed by default, so execute the following command in the eks_playbooks/couchbase/tls/configure_tls.yml

sudo -E pip install pexpect

Currently in the eks_playbooks/couchbase/install_couchbase_operator.yml file, the Download couchbase Operator play is taking too long when the operator file has already been downloaded. This should check to see if the file already exists, and if it does and has been unzipped, then no need to download it again.

Currently the playbooks do not allow for N2N functionality. Implement enabling N2N functionality during initial provisioning and also allow post-provisioning N2N encryption.

in the tls/configure_tls.yml file, the play Create CA secret for Couchbase cluster in namespace -> {{install_name_spaces.cao}} is throwing an error if the secret already exists. Put in some error handling to avoid this.

In the eks_playbooks/couchbase/install_couchbase_operator.yml file, there are namespaces created that need clean error handling when the namespaces already exist. Currently ignore_errors is set to true and this works, but is not a clean approach and spits out all of the errors on the command line.