You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
125 lines
5.4 KiB
125 lines
5.4 KiB
---
|
|
|
|
- name: Prepare the Ansible inventory
|
|
hosts: localhost
|
|
gather_facts: no
|
|
vars:
|
|
# By default, the 3scale admin portal hostname and its access token are taken
|
|
# from a Kubernetes secret but they can also be passed from the command line
|
|
# as extra vars (-e threescale_portal_hostname=... -e threescale_cicd_access_token=...)
|
|
# or from environment variables (THREESCALE_PORTAL_HOSTNAME=..., THREESCALE_CICD_ACCESS_TOKEN=...)
|
|
threescale_portal_hostname: '{{ lookup(''env'', ''THREESCALE_PORTAL_HOSTNAME'') if lookup(''env'', ''THREESCALE_PORTAL_HOSTNAME'')|length > 0 else lookup(''env'', ''threescale_portal_hostname'') }}'
|
|
threescale_cicd_access_token: '{{ lookup(''env'', ''THREESCALE_CICD_ACCESS_TOKEN'') if lookup(''env'', ''THREESCALE_CICD_ACCESS_TOKEN'')|length > 0 else lookup(''env'', ''threescale_cicd_access_token'') }}'
|
|
tasks:
|
|
- block:
|
|
- name: Check if /tmp/secrets/hostname exists
|
|
stat:
|
|
path: /tmp/secrets/hostname
|
|
register: secrets
|
|
|
|
- name: Fetch the threescale_portal_hostname variable from /tmp/secrets/hostname
|
|
set_fact:
|
|
threescale_portal_hostname: '{{ lookup(''file'', ''/tmp/secrets/hostname'') }}'
|
|
when: secrets.stat.exists
|
|
|
|
- name: Check if /tmp/secrets/access_token exists
|
|
stat:
|
|
path: /tmp/secrets/access_token
|
|
register: secrets
|
|
|
|
- name: Fetch the threescale_cicd_access_token variable from /tmp/secrets/access_token
|
|
set_fact:
|
|
threescale_cicd_access_token: '{{ lookup(''file'', ''/tmp/secrets/access_token'') }}'
|
|
when: secrets.stat.exists
|
|
|
|
- assert:
|
|
that: threescale_portal_hostname|length > 0
|
|
msg: >
|
|
Please pass the hostname of your 3scale Admin Portal in "hostname" key of the
|
|
"3scale-admin-portal" secret.
|
|
|
|
- assert:
|
|
that: threescale_cicd_access_token|length > 0
|
|
msg: >
|
|
Please pass the access token of your 3scale Admin Portal in "access_token" key of the
|
|
"3scale-admin-portal" secret.
|
|
|
|
# Generate dynamically a one host inventory
|
|
- add_host:
|
|
hostname: '{{ threescale_portal_hostname }}'
|
|
groups:
|
|
- threescale
|
|
threescale_cicd_access_token: '{{ threescale_cicd_access_token }}'
|
|
when: groups['threescale']|default([])|length == 0
|
|
|
|
- name: Deploy an API to 3scale
|
|
hosts: threescale
|
|
gather_facts: no
|
|
vars:
|
|
# Support for OpenShift custom build
|
|
#
|
|
# The git_repository, git_context_dir and git_ref are taken from the OpenShift build definition
|
|
# but they can be overriden from the command line as extra vars (-e git_repository=...
|
|
# -e git_ref=... -e git_context_dir=...) or environment variables (GIT_REPOSITORY=..., GIT_REF=...,
|
|
# GIT_CONTEXT_DIR=...)
|
|
build: '{{ lookup(''env'', ''BUILD'')|from_json if lookup(''env'', ''BUILD'')|length > 0 else {} }}'
|
|
git_repository: '{{ build.spec.source.git.uri if ''spec'' in build and ''uri'' in build.spec.source.git else '''' }}'
|
|
git_context_dir: '{{ build.spec.source.git.contextDir if ''spec'' in build and ''contextDir'' in build.spec.source.git else '''' }}'
|
|
git_ref: '{{ build.spec.source.git.ref if ''spec'' in build and ''ref'' in build.spec.source.git else ''master'' }}'
|
|
openapi_file: openapi-spec.yaml
|
|
|
|
ansible_connection: local
|
|
threescale_cicd_openapi_file: '{{ playbook_dir ~ "/api/" ~ git_context_dir ~ "/" ~ openapi_file if git_repository|length > 0 else playbook_dir ~ "/api/" ~ openapi_file }}'
|
|
parameter_whitelist:
|
|
- git_repository
|
|
- git_ref
|
|
- git_context_dir
|
|
- openapi_file # relative path to the OpenAPI file
|
|
- threescale_cicd_openapi_file # absolute path to the OpenAPI file
|
|
- threescale_cicd_openapi_file_format
|
|
- threescale_cicd_api_system_name
|
|
- threescale_cicd_api_base_system_name
|
|
- threescale_cicd_wildcard_domain
|
|
- threescale_cicd_api_basepath
|
|
- threescale_cicd_api_backend_hostname
|
|
- threescale_cicd_api_backend_scheme
|
|
- threescale_cicd_private_base_url
|
|
- threescale_cicd_apicast_policies_cors
|
|
- threescale_cicd_openapi_smoketest_operation
|
|
- threescale_cicd_api_environment_name
|
|
- threescale_cicd_validate_openapi
|
|
- threescale_cicd_apicast_sandbox_endpoint
|
|
- threescale_cicd_apicast_production_endpoint
|
|
- threescale_cicd_sso_issuer_endpoint
|
|
pre_tasks:
|
|
- name: Accept threescale_cicd_* variables from environment variables (lowercase)
|
|
set_fact:
|
|
'{{ item|lower }}': '{{ lookup(''env'', item|lower) }}'
|
|
with_items: '{{ parameter_whitelist }}'
|
|
when: 'lookup(''env'', item|lower)|length > 0'
|
|
|
|
- name: Accept threescale_cicd_* variables from environment variables (uppercase)
|
|
set_fact:
|
|
'{{ item|lower }}': '{{ lookup(''env'', item|upper) }}'
|
|
with_items: '{{ parameter_whitelist }}'
|
|
when: 'lookup(''env'', item|upper)|length > 0'
|
|
|
|
- name: Clone the git repo containing the API Definition
|
|
git:
|
|
repo: '{{ git_repository }}'
|
|
dest: '{{ playbook_dir }}/api'
|
|
version: '{{ git_ref }}'
|
|
when: 'git_repository|length > 0'
|
|
|
|
- name: Check if /tmp/secrets/sso_issuer_endpoint exists
|
|
stat:
|
|
path: /tmp/secrets/sso_issuer_endpoint
|
|
register: secrets
|
|
|
|
- name: Fetch the threescale_cicd_sso_issuer_endpoint variable from /tmp/secrets/sso_issuer_endpoint
|
|
set_fact:
|
|
threescale_cicd_sso_issuer_endpoint: '{{ lookup(''file'', ''/tmp/secrets/sso_issuer_endpoint'') }}'
|
|
when: secrets.stat.exists
|
|
|
|
roles:
|
|
- nmasse-itix.threescale-cicd
|
|
|