---
- name: Setup the database
  hosts: db01.iad2.fedoraproject.org:db01.stg.iad2.fedoraproject.org
  gather_facts: no
  become: yes
  become_user: postgres
  vars_files:
  - /srv/web/infra/ansible/vars/global.yml
  - /srv/private/ansible/vars.yml
  - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

  tasks:
  - name: Kerneltest DB user
    community.postgresql.postgresql_user:
      name: "{{ (env == 'production') | ternary(kerneltest_db_user, kerneltest_stg_db_user) }}"
      password: "{{ (env == 'production') | ternary(kerneltest_db_pass, kerneltest_stg_db_pass) }}"
  - name: Kerneltest database creation
    community.postgresql.postgresql_db:
      name: "{{ kerneltest_db_name }}"
      owner: "{{ (env == 'production') | ternary(kerneltest_db_user, kerneltest_stg_db_user) }}"
      encoding: UTF-8


- name: Make the app be real
  hosts: os_control_stg:os_control
  user: root
  gather_facts: false

  vars_files:
    - /srv/web/infra/ansible/vars/global.yml
    - "/srv/private/ansible/vars.yml"
    - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

  pre_tasks:
  - name: Include Global Variables
    ansible.builtin.include_vars:
      dir: /srv/web/infra/ansible/vars/all/
      ignore_files: README


  roles:
  - role: rabbit/user
    user_name: "kerneltest{{ env_suffix }}"
    user_sent_topics: ^org\.fedoraproject\.{{ env_short }}\.kerneltest\..*

  - role: openshift/project
    project_app: kerneltest
    project_description: kerneltest
    project_appowners:
    - pingou
    - ryanlerch
    tags:
      - apply-appowners

  - role: openshift/secret-file
    secret_file_app: kerneltest
    secret_file_secret_name: fedora-messaging-ca
    secret_file_key: cacert.pem
    secret_file_privatefile: "rabbitmq/{{env}}/ca-combined.crt"
  - role: openshift/secret-file
    secret_file_app: kerneltest
    secret_file_secret_name: fedora-messaging-crt
    secret_file_key: kerneltest-cert.pem
    secret_file_privatefile: "rabbitmq/{{env}}/pki/issued/kerneltest{{env_suffix}}.crt"
  - role: openshift/secret-file
    secret_file_app: kerneltest
    secret_file_secret_name: fedora-messaging-key
    secret_file_key: kerneltest-key.pem
    secret_file_privatefile: "rabbitmq/{{env}}/pki/private/kerneltest{{env_suffix}}.key"

  - role: openshift/object
    object_app: kerneltest
    object_file: imagestream.yml
    object_objectname: imagestream.yml

  - role: openshift/object
    object_app: kerneltest
    object_template: buildconfig.yml.j2
    object_objectname: buildconfig.yml

  - role: openshift/object
    object_app: kerneltest
    object_file: storage.yml
    object_objectname: storage.yml

  - role: openshift/object
    object_app: kerneltest
    object_file: service.yml
    object_objectname: service.yml

  - role: openshift/object
    object_app: kerneltest
    object_template: configmap.yml.j2
    object_objectname: configmap.yml

  - role: openshift/ipa-client
    ipa_client_app: kerneltest

  - role: openshift/route
    route_app: kerneltest
    route_name: kerneltest
    route_host: "kerneltest{{ env_suffix }}.fedoraproject.org"
    route_serviceport: web
    route_servicename: kerneltest-web
    route_annotations:
      haproxy.router.openshift.io/timeout: 5m

  - role: openshift/object
    object_app: kerneltest
    object_file: deploymentconfig.yml
    object_objectname: deploymentconfig.yml