---
- name: Install Metrics Server
  command: kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/latest/download/components.yaml
  environment:
    KUBECONFIG: /etc/kubernetes/admin.conf

- name: Patch Metrics Server for self-signed certs (RPi workaround)
  command: >
    kubectl patch deployment metrics-server -n kube-system --type='json'
    -p='[{"op": "add", "path": "/spec/template/spec/containers/0/args/-", "value": "--kubelet-insecure-tls"}]'
  environment:
    KUBECONFIG: /etc/kubernetes/admin.conf

- name: Install Kubernetes Dashboard
  command: kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml
  environment:
    KUBECONFIG: /etc/kubernetes/admin.conf

- name: Create Dashboard Admin Service Account
  shell: |
    cat <<EOF | kubectl apply -f -
    apiVersion: v1
    kind: ServiceAccount
    metadata:
      name: admin-user
      namespace: kubernetes-dashboard
    ---
    apiVersion: rbac.authorization.k8s.io/v1
    kind: ClusterRoleBinding
    metadata:
      name: admin-user
    roleRef:
      apiGroup: rbac.authorization.k8s.io
      kind: ClusterRole
      name: cluster-admin
    subjects:
    - kind: ServiceAccount
      name: admin-user
      namespace: kubernetes-dashboard
    EOF
  environment:
    KUBECONFIG: /etc/kubernetes/admin.conf

- name: Create Dashboard Admin Token Secret (for K8s 1.24+)
  shell: |
    cat <<EOF | kubectl apply -f -
    apiVersion: v1
    kind: Secret
    metadata:
      name: admin-user-token
      namespace: kubernetes-dashboard
      annotations:
        kubernetes.io/service-account.name: admin-user
    type: kubernetes.io/service-account-token
    EOF
  environment:
    KUBECONFIG: /etc/kubernetes/admin.conf

- name: Change Dashboard service to NodePort
  command: >
    kubectl patch svc kubernetes-dashboard -n kubernetes-dashboard 
    -p '{"spec": {"type": "NodePort", "ports": [{"port": 443, "nodePort": 30443}]}}'
  environment:
    KUBECONFIG: /etc/kubernetes/admin.conf