Files
fedora-infra_ansible/playbooks/openshift-apps/greenwave.yml
Aurélien Bompard d884a0f8ba Use the combined RabbitMQ CA cert in the clients
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-11 15:15:45 +02:00

121 lines
3.6 KiB
YAML

---
- name: Make the app be real
hosts: os_control[0]:os_control_stg[0]
user: root
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
- "/srv/web/infra/ansible/vars/all/00-FedoraCycleNumber.yaml"
- "/srv/web/infra/ansible/vars/all/FedoraBranched.yaml"
- "/srv/web/infra/ansible/vars/all/FedoraBranchedNumber.yaml"
- "/srv/web/infra/ansible/vars/all/FedoraPreviousCycleNumber.yaml"
- "/srv/web/infra/ansible/vars/all/FedoraPreviousPrevious.yaml"
- "/srv/web/infra/ansible/vars/all/FedoraPreviousPreviousCycleNumber.yaml"
- "/srv/web/infra/ansible/vars/all/FedoraRawhideNumber.yaml"
roles:
- role: openshift/project
project_app: greenwave
project_description: greenwave
project_appowners:
- lholecek
- vmaljulin
- kevin
tags:
- apply-appowners
- role: rabbit/user
user_name: greenwave{{ env_suffix }}
user_queue_name: greenwave{{ env_suffix }}
user_sent_topics: ^org\.fedoraproject\.{{ env_short }}\.greenwave\..*
- role: openshift/secret-file
secret_file_app: greenwave
secret_file_secret_name: greenwave-fedora-messaging-key
secret_file_key: greenwave.key
secret_file_privatefile: "rabbitmq/{{env}}/pki/private/greenwave{{env_suffix}}.key"
- role: openshift/secret-file
secret_file_app: greenwave
secret_file_secret_name: greenwave-fedora-messaging-crt
secret_file_key: greenwave.crt
secret_file_privatefile: "rabbitmq/{{env}}/pki/issued/greenwave{{env_suffix}}.crt"
- role: openshift/secret-file
secret_file_app: greenwave
secret_file_secret_name: greenwave-fedora-messaging-ca
secret_file_key: greenwave.ca
secret_file_privatefile: "rabbitmq/{{env}}/ca-combined.crt"
- role: openshift/object
object_app: greenwave
object_template: imagestream.yml.j2
object_objectname: imagestream.yml
- role: openshift/object
object_app: greenwave
object_template: configmap.yml.j2
object_objectname: configmap.yml
- role: openshift/object
object_app: greenwave
object_file: service.yml
object_objectname: service.yml
- role: openshift/route
route_app: greenwave
route_name: web-pretty
route_host: "greenwave{{ env_suffix }}.fedoraproject.org"
route_serviceport: web
route_servicename: greenwave-web
# TODO -- someday retire this old route in favor of the pretty one above.
- role: openshift/object
object_app: greenwave
object_file: route.yml
object_objectname: route.yml
- role: openshift/object
object_app: greenwave
object_template: deploymentconfig.yml.j2
object_objectname: deploymentconfig.yml
tags:
- apply-deploymentconfig
- role: openshift/rollout
rollout_app: greenwave
rollout_dcname: greenwave-web
tags:
- never
- rollout
- role: openshift/rollout
rollout_app: greenwave
rollout_dcname: greenwave-fedmsg-consumers
tags:
- never
- rollout
- name: Change the route haproxy default timeout
hosts: os_control[0]:os_control_stg[0]
user: root
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
tasks:
- name: Set the timeout to the openshift route
ansible.builtin.command: "oc -n greenwave annotate route {{ item }} --overwrite haproxy.router.openshift.io/timeout=750s"
with_items:
- greenwave-web
- web-pretty
tags:
- route-timeout