ansible/playbooks/openshift-apps/kerneltest.yml
Aurélien Bompard d884a0f8ba
Use the combined RabbitMQ CA cert in the clients
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-11 15:15:45 +02:00

111 lines
3.3 KiB
YAML

---
- name: Setup the database
hosts: db01.iad2.fedoraproject.org:db01.stg.iad2.fedoraproject.org
gather_facts: no
become: yes
become_user: postgres
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- /srv/private/ansible/vars.yml
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
tasks:
- name: Kerneltest DB user
community.postgresql.postgresql_user:
name: "{{ (env == 'production') | ternary(kerneltest_db_user, kerneltest_stg_db_user) }}"
password: "{{ (env == 'production') | ternary(kerneltest_db_pass, kerneltest_stg_db_pass) }}"
- name: Kerneltest database creation
community.postgresql.postgresql_db:
name: "{{ kerneltest_db_name }}"
owner: "{{ (env == 'production') | ternary(kerneltest_db_user, kerneltest_stg_db_user) }}"
encoding: UTF-8
- name: Make the app be real
hosts: os_control_stg:os_control
user: root
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
pre_tasks:
- name: Include Global Variables
ansible.builtin.include_vars:
dir: /srv/web/infra/ansible/vars/all/
ignore_files: README
roles:
- role: rabbit/user
user_name: "kerneltest{{ env_suffix }}"
user_sent_topics: ^org\.fedoraproject\.{{ env_short }}\.kerneltest\..*
- role: openshift/project
project_app: kerneltest
project_description: kerneltest
project_appowners:
- pingou
- ryanlerch
tags:
- apply-appowners
- role: openshift/secret-file
secret_file_app: kerneltest
secret_file_secret_name: fedora-messaging-ca
secret_file_key: cacert.pem
secret_file_privatefile: "rabbitmq/{{env}}/ca-combined.crt"
- role: openshift/secret-file
secret_file_app: kerneltest
secret_file_secret_name: fedora-messaging-crt
secret_file_key: kerneltest-cert.pem
secret_file_privatefile: "rabbitmq/{{env}}/pki/issued/kerneltest{{env_suffix}}.crt"
- role: openshift/secret-file
secret_file_app: kerneltest
secret_file_secret_name: fedora-messaging-key
secret_file_key: kerneltest-key.pem
secret_file_privatefile: "rabbitmq/{{env}}/pki/private/kerneltest{{env_suffix}}.key"
- role: openshift/object
object_app: kerneltest
object_file: imagestream.yml
object_objectname: imagestream.yml
- role: openshift/object
object_app: kerneltest
object_template: buildconfig.yml.j2
object_objectname: buildconfig.yml
- role: openshift/object
object_app: kerneltest
object_file: storage.yml
object_objectname: storage.yml
- role: openshift/object
object_app: kerneltest
object_file: service.yml
object_objectname: service.yml
- role: openshift/object
object_app: kerneltest
object_template: configmap.yml.j2
object_objectname: configmap.yml
- role: openshift/ipa-client
ipa_client_app: kerneltest
- role: openshift/route
route_app: kerneltest
route_name: kerneltest
route_host: "kerneltest{{ env_suffix }}.fedoraproject.org"
route_serviceport: web
route_servicename: kerneltest-web
route_annotations:
haproxy.router.openshift.io/timeout: 5m
- role: openshift/object
object_app: kerneltest
object_file: deploymentconfig.yml
object_objectname: deploymentconfig.yml