| commit | author | age | ||
| 74a200 | 1 | --- |
| 670e71 | 2 | - name: post_workload Tasks Complete |
| 74a200 | 3 | debug: |
| 670e71 | 4 | msg: "Pre-Software checks completed successfully - Removed" |
| 74a200 | 5 | |
| 670e71 | 6 | - name: Remove user from developer group - (remove ability to create projects) |
| ecdfa6 | 7 | command: "oadm groups remove-users {{item}} {{ocp_username}}" |
| 74a200 | 8 | register: groupadd_register |
| S | 9 | with_items: "{{ocp_user_groups}}" |
| ecdfa6 | 10 | when: |
| GC | 11 | - ocp_username is defined |
| 12 | - ocp_user_groups | default([]) | length > 0 | |
| 74a200 | 13 | |
| 670e71 | 14 | - name: Remove user Quota - oc delete clusterresourcequota "clusterquota-{{ocp_username}}-{{guid}}" |
| ecdfa6 | 15 | command: oc delete clusterresourcequota clusterquota-{{ocp_username}}-{{guid}} |
| 670e71 | 16 | ignore_errors: true |
| S | 17 | |
| 18 | - name: Remove user Quota - oc delete clusterresourcequota "clusterquota-{{ocp_username}}" | |
| ecdfa6 | 19 | command: oc delete clusterresourcequota clusterquota-{{ocp_username}} |
| 670e71 | 20 | ignore_errors: true |
| S | 21 | |
| 22 | - name: Remove user Projects - oc get projects | |
| 414c40 | 23 | command: "oc get projects -o json --as '{{ocp_username}}'" |
| 670e71 | 24 | register: all_projects |
| 414c40 | 25 | |
| 670e71 | 26 | - name: Remove user Projects - Convert output to json |
| S | 27 | set_fact: |
| 28 | projects: "{{all_projects.stdout | from_json}}" | |
| 29 | ||
| 37cc9e | 30 | - name: Debug |
| GC | 31 | debug: |
| 32 | var: projects | |
| 723bc0 | 33 | verbosity: 1 |
| 37cc9e | 34 | |
| 670e71 | 35 | - name: Remove user Projects - "oc delete project {{item.metadata.name}}" |
| ecdfa6 | 36 | command: "oc delete project {{item.metadata.name}}" |
| 670e71 | 37 | when: |
| ecdfa6 | 38 | - item.metadata.annotations['openshift.io/requester'] is defined |
| 91b999 | 39 | - item.metadata.annotations['openshift.io/requester'] == ocp_username |
| ecdfa6 | 40 | - item.status.phase is defined |
| GC | 41 | - item.status.phase != "Terminating" |
| 91b999 | 42 | - item.metadata.labels is not defined or item.metadata.labels['AAD'] is not defined |
| 670e71 | 43 | with_items: "{{projects['items']}}" |
| 91b999 | 44 | loop_control: |
| GC | 45 | label: "{{item.metadata.name | default(item)}}" |
| 46 | ||
| 670e71 | 47 | |
| S | 48 | - name: post_workload Tasks Complete |
| 49 | debug: | |
| 50 | msg: "Post-Software checks completed successfully - Removed" | |
