85 lines
2.6 KiB
YAML
85 lines
2.6 KiB
YAML
---
|
|
- name: Make the app be real
|
|
hosts: os_control[0]:os_control_stg[0]
|
|
user: root
|
|
gather_facts: false
|
|
|
|
vars_files:
|
|
- /srv/web/infra/ansible/vars/global.yml
|
|
- "/srv/private/ansible/vars.yml"
|
|
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
|
|
|
|
roles:
|
|
|
|
- role: rabbit/user
|
|
user_name: "bugzilla2fedmsg{{ env_suffix }}"
|
|
user_sent_topics: ^org\.fedoraproject\.{{ env_short }}\.bugzilla\..*
|
|
|
|
- role: openshift/project
|
|
project_app: bugzilla2fedmsg
|
|
project_description: bugzilla2fedmsg
|
|
project_appowners:
|
|
- abompard
|
|
- kevin
|
|
tags:
|
|
- apply-appowners
|
|
|
|
# Fedora Messaging secrets
|
|
- role: openshift/secret-file
|
|
secret_file_app: bugzilla2fedmsg
|
|
secret_file_secret_name: fedora-messaging-ca
|
|
secret_file_key: cacert.pem
|
|
secret_file_privatefile: "rabbitmq/{{env}}/ca-combined.crt"
|
|
|
|
- role: openshift/secret-file
|
|
secret_file_app: bugzilla2fedmsg
|
|
secret_file_secret_name: fedora-messaging-crt
|
|
secret_file_key: bugzilla2fedmsg-cert.pem
|
|
secret_file_privatefile: "rabbitmq/{{env}}/pki/issued/bugzilla2fedmsg{{env_suffix}}.crt"
|
|
|
|
- role: openshift/secret-file
|
|
secret_file_app: bugzilla2fedmsg
|
|
secret_file_secret_name: fedora-messaging-key
|
|
secret_file_key: bugzilla2fedmsg-key.pem
|
|
secret_file_privatefile: "rabbitmq/{{env}}/pki/private/bugzilla2fedmsg{{env_suffix}}.key"
|
|
|
|
# STOMP secrets
|
|
- role: openshift/secret-file
|
|
secret_file_app: bugzilla2fedmsg
|
|
secret_file_secret_name: stomp-crt
|
|
secret_file_key: msg-client-fedora-prod.crt
|
|
secret_file_privatefile: "bugzilla2fedmsg/msg-client-fedora-prod.crt"
|
|
|
|
- role: openshift/secret-file
|
|
secret_file_app: bugzilla2fedmsg
|
|
secret_file_secret_name: stomp-key
|
|
secret_file_key: msg-client-fedora-prod.key
|
|
secret_file_privatefile: "bugzilla2fedmsg/msg-client-fedora-prod.key"
|
|
|
|
# FASJSON access
|
|
- role: openshift/ipa-client
|
|
ipa_client_app: bugzilla2fedmsg
|
|
- role: openshift/keytab
|
|
keytab_app: bugzilla2fedmsg
|
|
keytab_key: service.keytab
|
|
keytab_secret_name: keytab
|
|
keytab_service: bugzilla2fedmsg
|
|
|
|
- role: openshift/imagestream
|
|
imagestream_app: bugzilla2fedmsg
|
|
imagestream_imagename: bugzilla2fedmsg
|
|
|
|
- role: openshift/object
|
|
object_app: bugzilla2fedmsg
|
|
object_template: buildconfig.yml.j2
|
|
object_objectname: buildconfig.yml
|
|
|
|
- role: openshift/object
|
|
object_app: bugzilla2fedmsg
|
|
object_template: configmap.yml.j2
|
|
object_objectname: configmap.yml
|
|
|
|
- role: openshift/object
|
|
object_app: bugzilla2fedmsg
|
|
object_template: deploymentconfig.yml.j2
|
|
object_objectname: deploymentconfig.yml
|