From 8e1ccb5cca689ca6d65ec118d14789a0680a6cb9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Aur=C3=A9lien=20Bompard?= <aurelien@bompard.org>
Date: Fri, 22 Mar 2024 08:46:50 +0100
Subject: [PATCH] Badges: Fedora Messaging certs
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
---
 playbooks/openshift-apps/badges.yml | 25 +++++++++++++++++++++----
 1 file changed, 21 insertions(+), 4 deletions(-)

diff --git a/playbooks/openshift-apps/badges.yml b/playbooks/openshift-apps/badges.yml
index d4bbf268a0..1bdba71628 100644
--- a/playbooks/openshift-apps/badges.yml
+++ b/playbooks/openshift-apps/badges.yml
@@ -107,11 +107,22 @@
       annotations:
         haproxy.router.openshift.io/timeout: 5m
 
-    # Deployment config
-    - role: openshift/object
+    # Fedora Messaging
+    - role: openshift/secret-file
       app: badges
-      file: deploymentconfig.yml
-      objectname: deploymentconfig.yml
+      secret_name: fedora-messaging-ca
+      key: cacert.pem
+      privatefile: "rabbitmq/{{env}}/pki/ca.crt"
+    - role: openshift/secret-file
+      app: badges
+      secret_name: fedora-messaging-crt
+      key: fedbadges-cert.pem
+      privatefile: "rabbitmq/{{env}}/pki/issued/fedbadges{{env_suffix}}.crt"
+    - role: openshift/secret-file
+      app: badges
+      secret_name: fedora-messaging-key
+      key: fedbadges-key.pem
+      privatefile: "rabbitmq/{{env}}/pki/private/fedbadges{{env_suffix}}.key"
 
     # FASJSON access
     - role: openshift/ipa-client
@@ -122,6 +133,12 @@
       secret_name: fedbadges-keytab
       service: fedbadges
 
+    # Deployment config
+    - role: openshift/object
+      app: badges
+      file: deploymentconfig.yml
+      objectname: deploymentconfig.yml
+
     - role: openshift/start-build
       app: badges
       buildname: "{{ item }}"