setup.yaml

- hosts: openshift
  gather_facts: false
  tasks:
  - name: Set number of apps
    set_fact:
      num_apps: "{{ (num_dc | int) / 5 }}"
  - name: Login
    when: oc_username is defined and oc_password is defined
    command: "oc login --username={{ oc_username }} --password={{ oc_password }}"
  - name: Check namespace presence
    command: "oc get project {{ namespace }}"
    register: ns_exists
    failed_when: false
  - name: Create namespace
    when: ns_exists.rc != 0
    command: "oc new-project {{ namespace }}"
  # - name: Add policy allowing privileged containers
  #   when: use_istio | bool
  #   command: "oc adm policy add-scc-to-user privileged -z default -n {{ namespace }}"
  - name: Switch namespace
    command: "oc project {{ namespace }}"
    failed_when: false
  - name: Clean leftovers from previous test
    include_tasks: delete-resources.yaml
    when: ns_exists.rc == 0
  - name: Get temporary services files
    tempfile:
      prefix: services-
      suffix: .yaml
    register: services
  - name: Generate services CRs
    template:
      src: services.yaml.j2
      dest: "{{ services.path }}"
  - name: Apply services
    command: "oc apply -f {{ services.path }}"
  - name: Drop temporary services file
    file:
      path: "{{ services.path }}"
      state: absent
  - name: Setup Istio routing
    when: use_istio | bool
    block:
    - name: Generate gateway certificates
      command: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /tmp/app.key -out /tmp/app.crt -subj "/CN=*.{{ wildcard_domain }}/O=app"
    - name: Drop old certificates
      command: "oc delete secret istio-ingressgateway-certs -n {{ control_plane }}"
      failed_when: false
    - name: Apply certificates to ingressgateway
      command: "oc create -n {{ control_plane }} secret tls istio-ingressgateway-certs --key /tmp/app.key --cert /tmp/app.crt"
    # For some reason the update on gateway requires resourceVersion
    - name: Delete old gateway
      command: "oc delete gateway app-gateway -n {{ namespace }}"
      failed_when: false
    - name: Get temporary routing files
      tempfile:
        prefix: routing-
        suffix: .yaml
      register: routing
    - name: Generate routing CRs
      template:
        src: routing.yaml.j2
        dest: "{{ routing.path }}"
    - name: Apply routing
      command: "oc apply -f {{ routing.path }}"
    - name: Drop temporary routing file
      file:
        path: "{{ routing.path }}"
        state: absent
    - name: Create passthrough routes
      when: control_plane == 'istio-system' and target == 'routers'
      block:
      - name: Drop existing routes
        command: "oc delete route --all -n {{ control_plane }}"
        failed_when: false
      - name: Expose route
        command: "oc create route passthrough app-{{ item }} -n {{ control_plane }} --service=istio-ingressgateway --port=8443 --hostname=app-{{ item }}.{{ wildcard_domain }}"
        loop: "{{ range(1, (num_apps | int) + 1, 1) | list }}"
  - name: Setup native Openshift routing
    when: not (use_istio | bool)
    block:
    - name: Drop existing routes
      command: "oc delete route --all -n {{ namespace }}"
      failed_when: false
    - name: Expose route
      command: "oc create route reencrypt app-{{ item }} --cert=/home/rvansa/workspace/mannequin/src/main/resources/domain.crt --key=/home/rvansa/workspace/mannequin/src/main/resources/domain.key --service=app-{{ item }} --port=8443 --hostname=app-{{ item }}.{{ wildcard_domain }}"
      loop: "{{ range(1, (num_apps | int) + 1, 1) | list }}"
  - name: Generate deployment configs
    include_tasks: generate-dc.yaml
  - name: Wait for pods to come up
    shell:  "{{ playbook_dir }}/wait-for-pods.sh {{ namespace }} \"{{ pod_pattern }}\" {{ num_dc }}"
- hosts: hyperfoil_controller
  roles:
  - hyperfoil.hyperfoil_setup