You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
98 lines
3.3 KiB
YAML
98 lines
3.3 KiB
YAML
---
|
|
|
|
# creates realm/clients on shared keycloak service
|
|
# - connect_realm: configuration to use with connect/wordpress
|
|
|
|
# Parameters:
|
|
# playbook inventory
|
|
# stage := the name of the stage (e.g. dev, int, qa, prod)
|
|
# tenant_id := (unique key for the tenant, e.g. customer)
|
|
# cluster_name := (business name for the cluster, e.g. product, department )
|
|
# cluster_size := (WIP node count for the cluster)
|
|
# cluster_service := (service to setup, e.g. 'connect', ...)
|
|
# cluster_features := (optional features to use, e.g. ['wordpress', 'resubmission', ...])
|
|
# playbook roles (keycloak / oidc)
|
|
# current_realm_name :=
|
|
# current_realm_display_name :=
|
|
# smardigo message callback
|
|
# scope_id := (scope id of the management process)
|
|
# process_instance_id := (process instance id of the management process)
|
|
# smardigo_management_action := (smardigo management action anme of the management process)
|
|
|
|
#############################################################
|
|
# Creating inventory dynamically for given parameters
|
|
#############################################################
|
|
|
|
- hosts: localhost
|
|
gather_facts: false
|
|
connection: local
|
|
|
|
pre_tasks:
|
|
- name: "Check if ansible version is at least 2.10.x"
|
|
assert:
|
|
that:
|
|
- ansible_version.major >= 2
|
|
- ansible_version.minor >= 10
|
|
msg: "The ansible version has to be at least ({{ ansible_version.full }})"
|
|
|
|
# add virtual server to load stage specific variables as context
|
|
- name: "Add <{{ stage }}-virtual-host-to-read-groups-vars> to hosts"
|
|
add_host:
|
|
name: "{{ stage }}-virtual-host-to-read-groups-vars"
|
|
groups:
|
|
- "stage_{{ stage }}"
|
|
changed_when: False
|
|
|
|
tasks:
|
|
- name: Add hosts
|
|
add_host:
|
|
name: "{{ stage }}-{{ tenant_id }}-{{ cluster_name }}-{{ '%02d' | format(item|int) }}"
|
|
groups: "{{ ['stage_' + stage ] + [cluster_service] + cluster_features }}"
|
|
with_sequence: start=1 end={{ cluster_size | default(1) }}
|
|
changed_when: False
|
|
|
|
#############################################################
|
|
# Creating realms for created inventory
|
|
#############################################################
|
|
|
|
- hosts: "stage_{{ stage }}:!{{ stage }}-virtual-host-to-read-groups-vars"
|
|
serial: "{{ serial_number | default(1) }}"
|
|
gather_facts: false
|
|
|
|
collections:
|
|
- hetzner.hcloud
|
|
- community.general
|
|
|
|
pre_tasks:
|
|
- name: "Import autodiscover pre-tasks"
|
|
import_tasks: tasks/autodiscover_pre_tasks.yml
|
|
become: false
|
|
tags:
|
|
- always
|
|
|
|
roles:
|
|
- role: connect_realm
|
|
when: '"connect" in group_names'
|
|
|
|
- role: gitea_realm
|
|
when: '"gitea" in group_names'
|
|
|
|
- role: workflow_proxy_realm
|
|
when: '"workflow-proxy" in group_names'
|
|
|
|
#############################################################
|
|
# Sending smardigo management message to process
|
|
#############################################################
|
|
|
|
- hosts: "{{ stage }}-virtual-host-to-read-groups-vars"
|
|
serial: "{{ serial_number | default(1) }}"
|
|
gather_facts: false
|
|
connection: local
|
|
run_once: true
|
|
vars:
|
|
connect_jwt_username: "{{ management_admin_username }}"
|
|
|
|
tasks:
|
|
- name: "Sending smardigo management message to <{{ smardigo_management_url }}>"
|
|
include_tasks: tasks/smardigo_management_message.yml
|