From b010f630c06d5ef4e28e5c8cf04e07894a27a042 Mon Sep 17 00:00:00 2001
From: Viv Briffa <viv@place.technology>
Date: Tue, 1 Nov 2022 20:56:35 +1100
Subject: [PATCH] fix(gke): network-policies deny all, don't patch non-existent
 ingress

---
 ansible/roles/placeos.networkpolicies/tasks/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ansible/roles/placeos.networkpolicies/tasks/main.yml b/ansible/roles/placeos.networkpolicies/tasks/main.yml
index 8aba227..ee6f236 100644
--- a/ansible/roles/placeos.networkpolicies/tasks/main.yml
+++ b/ansible/roles/placeos.networkpolicies/tasks/main.yml
@@ -34,6 +34,7 @@
           metadata:
             labels:
               networking/allow-external-access: "true"
+  when: gke is not defined
 
 - name: service for dispatch
   community.kubernetes.k8s:
@@ -78,7 +79,6 @@
     "{{ internal_ns }}"
   loop_control:
     loop_var: "ns"
-  when: gke is not defined
 
 - name: ingress access to upstream apps
   community.kubernetes.k8s: