main.yml

---
- name: Enable APIs
  shell: gcloud services enable {{ item }} --project {{ project_id }}
  loop:
    - compute.googleapis.com
    - container.googleapis.com
    - dns.googleapis.com
    - secretmanager.googleapis.com
    # - cloudresourcemanager.googleapis.com

- name: get project number
  shell: gcloud projects describe {{ project_id }} --format='value(projectNumber)'
  register: project_number_result

- name: set project number
  set_fact:
    project_number: "{{ project_number_result.stdout }}"

- name: create service accounts
  include_tasks: create_service_account.yml
  loop: "{{ serviceAccounts }}"
  loop_control:
    loop_var: item
    label: "{{ item.name }}"

- name: grant access for compute engine
  shell: |
    gcloud iam service-accounts add-iam-policy-binding --project {{ project_id }} \
    {{ project_number }}-compute@developer.gserviceaccount.com \
    --member='serviceAccount:{{ coder_automation_fullname }}' --role='roles/editor'

- name: list bucket
  shell: gsutil ls -p {{ project_id }} gs://{{ bucket_name }} || true
  register: bucket_list

- name: bucket exists?
  set_fact:
    bucket_exists: "{{ not bucket_list.stderr.startswith('BucketNotFoundException') }}"
  changed_when: false

- name: create a bucket
  when: not bucket_exists
  shell: gsutil mb -p {{ project_id }} -l {{ region }} gs://{{ bucket_name }}

- name: create managed zone
  shell: |
    gcloud dns managed-zones create {{ managed_zone }} \
    --dns-name {{ domain_name }}. \
    --description "Managed zone for {{ domain_name }}" \
    --project {{ project_id }} || true

- name: get zone info
  shell: |
    gcloud dns managed-zones describe {{ managed_zone }} \
    --project {{ project_id }}
  register: managed_zone_info

- name: print zone info
  pause:
    prompt: |

      Your google project {{ project_id }} is prepared für coder development clusters.

      DNS zone info:
      {{ managed_zone_info.stdout }}

      *******************************************************************
      ** Point or delegate your domain to the nameservers of the zone. **
      *******************************************************************
    seconds: 1