More checks. Check for ClusterVersion to make the role work on both 4.1 and...

Wolfgang Kulhanek

2020-03-14 c37a78f35516ddd06f3430fcb2ea545175a83269

 ansible/roles/ocp4-workload-quay-operator/tasks/remove_workload.yml

@@ -7,34 +7,58 @@
                 ocp4_workload_quay_operator_secrets | default( {} ), recursive=true)
      }}

- name: Remove Red Hat Quay Operator
- name: Get ClusterVersion
  k8s_facts:
    api_version: config.openshift.io/v1
    kind: ClusterVersion
    name: version
  register: r_cluster_version
- name: Set ocp4_workload_quay_operator_cluster_version fact
  set_fact:
    ocp4_workload_quay_operator_cluster_version: "{{ r_cluster_version.resources[0].status.history[0].version }}"
- name: Print OpenShift version
  debug:
    msg: "Removing Quay Operator for OpenShift Version: {{ ocp4_workload_quay_operator_cluster_version }}"

- name: Remove Quay
  k8s:
    state: absent
    definition: "{{ lookup('template', item ) | from_yaml }}"
  loop:
  - ./templates/quay.j2
  - ./templates/subscription.j2
  - ./templates/operatorgroup.j2
  - ./templates/catalogsourceconfig.j2

- name: Remove serviceaccounts from anyuid scc (if they are still there)
  shell: "oc adm policy remove-scc-from-user anyuid system:serviceaccount:quay-{{ ocp4_workload_quay_operator.project }}:{{ item }}"
  loop:
  - quay
  - clair
- name: Wait for all Quay Pods to be terminated
  k8s_facts:
    api_version: v1
    kind: Pod
    namespace: "{{ ocp4_workload_quay_operator.project }}"
  register: r_running_pods
  until: r_running_pods.resources | list | length <= 1
  ignore_errors: true
  retries: 20
  delay: 10

- name: Remove Red Hat Quay Operator (Shared resources)
- name: Remove Red Hat Quay Operator
  k8s:
    state: absent
    definition: "{{ lookup('template', item ) | from_yaml }}"
  loop:
  - ./templates/subscription.j2
  - ./templates/operatorgroup.j2
  - ./templates/catalogsourceconfig.j2
  - ./templates/pull_secret.j2
  - ./templates/quay_superuser_secret.j2
  - ./templates/quay_config_secret.j2
  - ./templates/quay_ssl_certificate_secret.j2
  - ./templates/project.j2

- name: Remove serviceaccounts from anyuid scc (if they are still there)
  shell: "oc adm policy remove-scc-from-user anyuid system:serviceaccount:{{ ocp4_workload_quay_operator.project }}:{{ item }}"
  loop:
  - quay
  - clair
  ignore_errors: true

# Leave this as the last task in the playbook.
- name: remove_workload tasks complete
  debug: