| commit | author | age | ||
| 91843b | 1 | --- |
| WK | 2 | |
| 2def0b | 3 | - name: "Remove user {{ ocp_username }} from groups {{ ocp_user_groups }} to disable creating projects" |
| WK | 4 | command: "oc adm groups remove-users {{ item }} {{ ocp_username }}" |
| 5 | loop: "{{ ocp_user_groups }}" | |
| 91843b | 6 | when: |
| 2def0b | 7 | - ocp_username is defined |
| WK | 8 | - ocp_user_groups | default([]) | length > 0 |
| 91843b | 9 | |
| f7be83 | 10 | - name: Remove ClusterResourceQuota and remove access to Grading Jenkins |
| 2def0b | 11 | k8s: |
| WK | 12 | state: absent |
| 13 | definition: "{{ lookup('template', item ) | from_yaml }}" | |
| 14 | loop: | |
| f7be83 | 15 | - ./templates/cluster_resource_quota.j2 |
| 2def0b | 16 | - ./templates/jenkins_role_binding.j2 |
| 91843b | 17 | |
| 2def0b | 18 | - name: "Find all projects for user {{ ocp_username }}" |
| WK | 19 | k8s_facts: |
| 20 | api_version: project.openshift.io/v1 | |
| 21 | kind: Project | |
| 22 | register: r_projects | |
| 91843b | 23 | |
| 2def0b | 24 | - name: "Remove user {{ ocp_username }}'s Projects" |
| WK | 25 | k8s: |
| 26 | state: absent | |
| 27 | api_version: project.openshift.io/v1 | |
| 28 | kind: Project | |
| 29 | name: "{{ item.metadata.name }}" | |
| 91843b | 30 | when: |
| 2def0b | 31 | - item.metadata.annotations['openshift.io/requester'] is defined |
| WK | 32 | - item.metadata.annotations['openshift.io/requester'] == ocp_username |
| 33 | - item.status.phase is defined | |
| 34 | - item.status.phase != "Terminating" | |
| 35 | loop: "{{ r_projects.resources }}" | |
| 91843b | 36 | |
| WK | 37 | # Leave this as the last task in the playbook. |
| 38 | - name: remove_workload tasks complete | |
| 39 | debug: | |
| 40 | msg: "Remove Workload tasks completed successfully." | |
| 41 | when: not silent|bool | |
