mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-04-30 21:41:53 +08:00
117 lines
3.0 KiB
YAML
117 lines
3.0 KiB
YAML
---
|
|
- name: Make the app be real
|
|
hosts: os_control[0]:os_control_stg[0]
|
|
user: root
|
|
gather_facts: false
|
|
|
|
vars_files:
|
|
- /srv/web/infra/ansible/vars/global.yml
|
|
- "/srv/private/ansible/vars.yml"
|
|
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
|
|
|
|
vars:
|
|
|
|
roles:
|
|
- role: rabbit/user
|
|
user_name: "noggin{{ env_suffix }}"
|
|
user_sent_topics: ^org\.fedoraproject\.{{ env_short }}\.fas\..*
|
|
|
|
- role: openshift/project
|
|
project_app: noggin
|
|
project_description: "Self-service account portal"
|
|
project_appowners:
|
|
- abompard
|
|
- nils
|
|
- ryanlerch
|
|
tags:
|
|
- apply-appowners
|
|
when: env == "production"
|
|
- role: openshift/project
|
|
project_app: noggin
|
|
project_description: "Self-service account portal"
|
|
project_appowners:
|
|
- abompard
|
|
- nils
|
|
- ryanlerch
|
|
tags:
|
|
- apply-appowners
|
|
when: env == "staging"
|
|
|
|
- role: openshift/secret-file
|
|
secret_file_app: noggin
|
|
secret_file_secret_name: fedora-messaging-ca
|
|
secret_file_key: cacert.pem
|
|
secret_file_privatefile: "rabbitmq/{{env}}/ca-combined.crt"
|
|
- role: openshift/secret-file
|
|
secret_file_app: noggin
|
|
secret_file_secret_name: fedora-messaging-crt
|
|
secret_file_key: noggin-cert.pem
|
|
secret_file_privatefile: "rabbitmq/{{env}}/pki/issued/noggin{{env_suffix}}.crt"
|
|
- role: openshift/secret-file
|
|
secret_file_app: noggin
|
|
secret_file_secret_name: fedora-messaging-key
|
|
secret_file_key: noggin-key.pem
|
|
secret_file_privatefile: "rabbitmq/{{env}}/pki/private/noggin{{env_suffix}}.key"
|
|
|
|
- role: openshift/imagestream
|
|
imagestream_app: noggin
|
|
imagestream_imagename: noggin
|
|
|
|
- role: openshift/object
|
|
object_app: noggin
|
|
object_template: buildconfig.yml.j2
|
|
object_objectname: buildconfig.yml
|
|
|
|
- role: openshift/object
|
|
object_app: noggin
|
|
object_template: configmap.yml.j2
|
|
object_objectname: configmap.yml
|
|
noggin_theme: fas
|
|
|
|
- role: openshift/ipa-client
|
|
ipa_client_app: noggin
|
|
|
|
- role: openshift/object
|
|
object_app: noggin
|
|
object_template: service.yml.j2
|
|
object_objectname: service.yml
|
|
|
|
- role: openshift/route
|
|
route_app: noggin
|
|
route_name: noggin
|
|
route_host: "accounts{{ env_suffix }}.fedoraproject.org"
|
|
route_serviceport: web
|
|
route_servicename: noggin-web
|
|
route_annotations:
|
|
haproxy.router.openshift.io/timeout: 5m
|
|
haproxy.router.openshift.io/set-forwarded-headers: append
|
|
|
|
- role: openshift/object
|
|
object_app: noggin
|
|
object_template: secrets.yml.j2
|
|
object_objectname: secrets.yml
|
|
|
|
- role: openshift/object
|
|
object_app: noggin
|
|
object_template: secret-webhook.yml.j2
|
|
object_objectname: secret-webhook.yml
|
|
|
|
- role: openshift/object
|
|
object_app: noggin
|
|
object_template: deploymentconfig.yml.j2
|
|
object_objectname: deploymentconfig.yml
|
|
|
|
- role: openshift/start-build
|
|
start_build_app: noggin
|
|
start_build_buildname: noggin
|
|
tags:
|
|
- never
|
|
- build
|
|
|
|
- role: openshift/rollout
|
|
rollout_app: noggin
|
|
rollout_dcname: noggin
|
|
tags:
|
|
- never
|
|
- rollout
|