mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-03-20 03:57:02 +08:00
88 lines
2.3 KiB
YAML
88 lines
2.3 KiB
YAML
---
|
|
- name: Make the app be real
|
|
# We don't have any VPN set up on stg
|
|
hosts: os_control[0]:os-control01.rdu3.fedoraproject.org
|
|
user: root
|
|
gather_facts: false
|
|
|
|
vars_files:
|
|
- /srv/web/infra/ansible/vars/global.yml
|
|
- "/srv/private/ansible/vars.yml"
|
|
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
|
|
vars:
|
|
|
|
roles:
|
|
- role: openshift/project
|
|
project_app: openvpn
|
|
project_description: Openvpn Client
|
|
project_appowners:
|
|
- kevin
|
|
tags:
|
|
- apply-appowners
|
|
|
|
- role: openshift/object
|
|
object_app: openvpn
|
|
object_objectname: imagestream.yml
|
|
object_template: imagestream.yml.j2
|
|
|
|
- role: openshift/object
|
|
object_app: openvpn
|
|
object_objectname: buildconfig.yml
|
|
object_template: buildconfig.yml.j2
|
|
|
|
- role: openshift/object
|
|
object_app: openvpn
|
|
object_template: serviceaccount.yml.j2
|
|
object_objectname: serviceaccount.yml
|
|
|
|
- role: openshift/object
|
|
object_app: openvpn
|
|
object_template: scc.yml.j2
|
|
object_objectname: scc.yml
|
|
|
|
- role: openshift/object
|
|
object_app: openvpn
|
|
object_template: scc_role.yml.j2
|
|
object_objectname: scc_role.yml
|
|
|
|
- role: openshift/object
|
|
object_app: openvpn
|
|
object_template: scc_rolebinding.yml.j2
|
|
object_objectname: scc_rolebinding.yml
|
|
|
|
# load openVPN client certs for each node in ocp_nodes into ocp secret
|
|
# expect certs to be generated in {{private}}/files/vpn/pki/issued/
|
|
- role: openshift/object
|
|
object_app: openvpn
|
|
object_template: secrets.yml.j2
|
|
object_objectname: secrets.yml
|
|
|
|
- role: openshift/object
|
|
object_app: openvpn
|
|
object_template: configmap.yml.j2
|
|
object_objectname: configmap.yml
|
|
|
|
- role: openshift/object
|
|
object_app: openvpn
|
|
object_template: deployment.yml.j2
|
|
object_objectname: deployment.yml
|
|
|
|
- role: openshift/start-build
|
|
start_build_app: openvpn
|
|
start_build_buildname: openvpn
|
|
tags:
|
|
- never
|
|
- build
|
|
|
|
###############################################
|
|
# actions to delete the project from OpenShift
|
|
###############################################
|
|
# to run: sudo rbac-playbook -l os_masters_stg[0] -t delete openshift-apps/openvpn.yml
|
|
- role: openshift/object-delete
|
|
object_delete_app: openvpn
|
|
object_delete_objecttype: project
|
|
object_delete_objectname: openvpn
|
|
tags:
|
|
- never
|
|
- delete
|