Scaffolding for jira-sync in staging Openshift

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>

playbooks/openshift-apps/jira-sync.yml

@@ -0,0 +1,99 @@
+#
+# Jira Sync
+# https://github.com/Zlopez/jira_sync
+#
+
+- name: Make the app be real
+  #hosts: os_control[0]:os_control_stg[0]
+  hosts: os_control_stg[0]
+  user: root
+  gather_facts: false
+
+  vars_files:
+    - /srv/web/infra/ansible/vars/global.yml
+    - "/srv/private/ansible/vars.yml"
+    - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
+
+  roles:
+
+    # Fedora Messaging
+    - name: Setup Rabbit Queue
+      ansible.builtin.include_role:
+        name: rabbit/queue
+      vars:
+        queue_username: jira-sync{{ env_suffix }}
+        queue_name: jira-sync{{ env_suffix }}
+        queue_routing_keys:
+          - "org.fedoraproject.*.bugzilla.bug.update"
+        queue_thresholds:
+          warning: 10
+          critical: 100
+    - role: openshift/secret-file
+      secret_file_app: jira-sync
+      secret_file_secret_name: fedora-messaging-ca
+      secret_file_key: cacert.pem
+      secret_file_privatefile: "rabbitmq/{{env}}/ca-combined.crt"
+    - role: openshift/secret-file
+      secret_file_app: jira-sync
+      secret_file_secret_name: fedora-messaging-cert
+      secret_file_key: cert.pem
+      secret_file_privatefile: "rabbitmq/{{env}}/pki/issued/jira-sync{{env_suffix}}.crt"
+    - role: openshift/secret-file
+      secret_file_app: jira-sync
+      secret_file_secret_name: fedora-messaging-key
+      secret_file_key: key.pem
+      secret_file_privatefile: "rabbitmq/{{env}}/pki/private/jira-sync{{env_suffix}}.key"
+
+    # Openshift
+    - role: openshift/project
+      project_app: jira-sync
+      project_description: "Sync various sources to JIRA project"
+      project_appowners:
+        - zlopez
+        - abompard
+      tags:
+        - apply-appowners
+
+    - role: openshift/object
+      object_app: jira-sync
+      object_file: imagestream.yml
+      object_objectname: imagestream.yml
+
+    - role: openshift/object
+      object_app: jira-sync
+      object_template: buildconfig.yml.j2
+      object_objectname: buildconfig.yml
+
+    - role: openshift/object
+      object_app: jira-sync
+      object_template: configmap.yml.j2
+      object_objectname: configmap.yml
+
+    - role: openshift/object
+      object_app: jira-sync
+      object_template: secrets.yml.j2
+      object_objectname: secrets.yml
+
+    - role: openshift/object
+      object_app: jira-sync
+      object_template: deployment.yml.j2
+      object_objectname: deployment.yml
+
+    - role: openshift/object
+      object_app: jira-sync
+      object_template: cron.yml.j2
+      object_objectname: cron.yml
+
+    - role: openshift/start-build
+      start_build_app: jira-sync
+      start_build_buildname: app
+      tags:
+      - never
+      - build
+
+    - role: openshift/rollout
+      rollout_app: jira-sync
+      rollout_dname: app
+      tags:
+      - never
+      - rollout