From 51d7d013fbff9706910be7cbecd1720967ff486f Mon Sep 17 00:00:00 2001 From: Samuli Silvius Date: Tue, 19 Mar 2019 08:45:54 +0200 Subject: Improve application role testability Remove different phases for application role as those are supposed to run after each other anyway from playbook and pre/post steps can be disabled by other means. Enable Helm override file generation customization by delegating it to separate role. Separate Helm file transfer to own module. NOTE: install.yml with all Helm commands (shell/command) is not idempotent and should be fixed with separate commit. Issue-ID: OOM-1655 Change-Id: Ib29773c4d64a0529c71c3f93c2af7265ae94059f Signed-off-by: Samuli Silvius --- ansible/roles/application-override/tasks/main.yml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 ansible/roles/application-override/tasks/main.yml (limited to 'ansible/roles/application-override/tasks') diff --git a/ansible/roles/application-override/tasks/main.yml b/ansible/roles/application-override/tasks/main.yml new file mode 100644 index 00000000..84896fbc --- /dev/null +++ b/ansible/roles/application-override/tasks/main.yml @@ -0,0 +1,16 @@ +--- +# Role for generating Helm override.yml file +- name: Register root certificate + slurp: + src: "{{ playbook_dir }}/certs/rootCA.crt" + register: root_cert + delegate_to: localhost + +# WA: this is required because deploy plugin dont process params properly +- name: Create override file with global.cacert + copy: + dest: "{{ app_helm_override_file }}" + content: | + global: + cacert: | + {{ root_cert['content'] | b64decode | indent( width=4, indentfirst=False) }} -- cgit 1.2.3-korg