From c0164599229ba4527c07fbaf028d8bf6fe84472e Mon Sep 17 00:00:00 2001
From: Ruakij <ruakij@ruekov.eu>
Date: Fri, 9 Oct 2026 14:37:29 +0000
Subject: [PATCH] Write the k3s registries.yaml only on a semantic change

---
 kubernetes/tasks/install.yml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/kubernetes/tasks/install.yml b/kubernetes/tasks/install.yml
index 3a7aa2f..55c55dc 100644
--- a/kubernetes/tasks/install.yml
+++ b/kubernetes/tasks/install.yml
@@ -36,12 +36,24 @@
     mode: "744"
 # todo: update when file changed?
 
+- name: Read the live registries.yaml
+  slurp:
+    src: /etc/rancher/k3s/registries.yaml
+  register: live_registries
+  failed_when: false
+  when: "type == 'server'"
+
+# Written only on a change k3s would see, like config.yaml
 - name: Deploy registries.yaml
   ansible.builtin.template:
     src: k3s/server/registries.yaml.j2
     dest: /etc/rancher/k3s/registries.yaml
   register: registries_config
-  when: "type == 'server'"
+  when:
+    - "type == 'server'"
+    - >-
+      live_registries.content is not defined or
+      (live_registries.content | b64decode | from_yaml) != (lookup('template', 'k3s/server/registries.yaml.j2') | from_yaml)
 
 - import_tasks: ./install/server/setup_network.yml
   when: "type == 'server'"