ansible/playbooks/openshift-apps/mdapi.yml
Aurélien Bompard d884a0f8ba
Use the combined RabbitMQ CA cert in the clients
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-11 15:15:45 +02:00

99 lines
2.6 KiB
YAML

---
- name: Make the app be real
hosts: os_control_stg[0]:os_control[0]
user: root
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
roles:
- role: rabbit/user
user_name: "mdapi{{ env_suffix }}"
user_sent_topics: ^org\.fedoraproject\.{{ env_short }}\.mdapi\..*
- role: openshift/project
project_app: mdapi
project_description: mdapi is a small API exposing the metadata contained in different RPM repositories.
project_appowners:
- t0xic0der
- kevin
- role: openshift/object
object_app: mdapi
object_template: imagestream.yml.j2
object_objectname: imagestream.yml
- role: openshift/object
object_app: mdapi
object_template: buildconfig.yml.j2
object_objectname: buildconfig.yml
- role: openshift/object
object_app: mdapi
object_file: storage.yml
object_objectname: storage.yml
- role: openshift/object
object_app: mdapi
object_template: configmap.yml.j2
object_objectname: configmap.yml
- role: openshift/secret-file
secret_file_app: mdapi
secret_file_secret_name: mdapi-fedora-messaging-key
secret_file_key: mdapi.key
secret_file_privatefile: "rabbitmq/{{env}}/pki/private/mdapi{{env_suffix}}.key"
- role: openshift/secret-file
secret_file_app: mdapi
secret_file_secret_name: mdapi-fedora-messaging-crt
secret_file_key: mdapi.crt
secret_file_privatefile: "rabbitmq/{{env}}/pki/issued/mdapi{{env_suffix}}.crt"
- role: openshift/secret-file
secret_file_app: mdapi
secret_file_secret_name: mdapi-fedora-messaging-ca
secret_file_key: mdapi.ca
secret_file_privatefile: "rabbitmq/{{env}}/ca-combined.crt"
- role: openshift/object
object_app: mdapi
object_file: cron.yml
object_objectname: cron.yml
tags:
- cron-job
- role: openshift/start-build
start_build_app: mdapi
start_build_buildname: mdapi-build
start_build_objectname: mdapi-build
tags:
- never
- build
- role: openshift/object
object_app: mdapi
object_file: service.yml
object_objectname: service.yml
- role: openshift/route
route_app: mdapi
route_name: mdapi
route_host: "mdapi{{env_suffix}}.fedoraproject.org"
route_serviceport: 8080-tcp
route_servicename: mdapi
- role: openshift/object
object_app: mdapi
object_file: deploymentconfig.yml
object_objectname: deploymentconfig.yml
- role: openshift/rollout
rollout_app: mdapi
rollout_dcname: mdapi
tags:
- never
- rollout