115 lines
2.9 KiB
YAML
115 lines
2.9 KiB
YAML
---
|
|
- name: Give access to the datanommer DB
|
|
hosts: datanommer_dbserver:datanommer_dbserver_stg
|
|
gather_facts: no
|
|
become: yes
|
|
become_user: postgres
|
|
vars_files:
|
|
- /srv/web/infra/ansible/vars/global.yml
|
|
- /srv/private/ansible/vars.yml
|
|
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
|
|
- /srv/web/infra/ansible/vars/apps/badges.yml
|
|
|
|
tasks:
|
|
- name: DB user
|
|
community.postgresql.postgresql_user:
|
|
name: datagrepper
|
|
password: "{{ (env == 'production') | ternary(datagrepper_prod_db_password, datagrepper_stg_db_password) }}"
|
|
- name: Grant the db user read only access to datanommer2
|
|
community.postgresql.postgresql_privs:
|
|
database: datanommer2
|
|
privs: SELECT
|
|
objs: ALL_IN_SCHEMA
|
|
roles: datagrepper
|
|
|
|
|
|
- name: Make the app be real
|
|
hosts: os_control_stg[0]:os_control[0]
|
|
user: root
|
|
gather_facts: false
|
|
|
|
vars_files:
|
|
- /srv/web/infra/ansible/vars/global.yml
|
|
- "/srv/private/ansible/vars.yml"
|
|
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
|
|
|
|
vars:
|
|
|
|
roles:
|
|
|
|
- role: openshift/project
|
|
project_app: datagrepper
|
|
project_description: "Query the message history"
|
|
project_appowners:
|
|
- abompard
|
|
- ryanlerch
|
|
- kevin
|
|
tags:
|
|
- apply-appowners
|
|
when: env == "production"
|
|
- role: openshift/project
|
|
project_app: datagrepper
|
|
project_description: "Query the message history"
|
|
project_appowners:
|
|
- abompard
|
|
- ryanlerch
|
|
- james02135
|
|
- lenkaseg
|
|
- kevin
|
|
tags:
|
|
- apply-appowners
|
|
when: env == "staging"
|
|
|
|
- role: openshift/object
|
|
object_app: datagrepper
|
|
object_file: imagestream.yml
|
|
object_objectname: imagestream.yml
|
|
|
|
- role: openshift/object
|
|
object_app: datagrepper
|
|
object_template: buildconfig.yml.j2
|
|
object_objectname: buildconfig.yml
|
|
|
|
- role: openshift/object
|
|
object_app: datagrepper
|
|
object_template: configmap.yml.j2
|
|
object_objectname: configmap.yml
|
|
|
|
- role: openshift/object
|
|
object_app: datagrepper
|
|
object_template: service.yml.j2
|
|
object_objectname: service.yml
|
|
|
|
- role: openshift/route
|
|
route_app: datagrepper
|
|
route_name: datagrepper
|
|
route_host: "apps{{ env_suffix }}.fedoraproject.org"
|
|
route_path: "/datagrepper"
|
|
route_serviceport: web
|
|
route_servicename: datagrepper-web
|
|
route_annotations:
|
|
haproxy.router.openshift.io/timeout: 5m
|
|
|
|
- role: openshift/object
|
|
object_app: datagrepper
|
|
object_template: secret-webhook.yml.j2
|
|
object_objectname: secret-webhook.yml
|
|
|
|
- role: openshift/object
|
|
object_app: datagrepper
|
|
object_template: deploymentconfig.yml.j2
|
|
object_objectname: deploymentconfig.yml
|
|
|
|
# - role: openshift/start-build
|
|
# start_build_app: datagrepper
|
|
# start_build_buildname: datagrepper
|
|
# tags:
|
|
# - never
|
|
# - build
|
|
|
|
# - role: openshift/rollout
|
|
# rollout_app: datagrepper
|
|
# rollout_dcname: datagrepper
|
|
# tags:
|
|
# - never
|
|
# - rollout
|