Jim Rigsbee
2019-07-22 0d0d0e99169d9285f46b3fd5fc425843c42fff89
refs
author Jim Rigsbee <jimrigsbee@gmail.com>
Monday, July 22, 2019 20:30 +0200
committer Wolfgang Kulhanek <wkulhanek@users.noreply.github.com>
Monday, July 22, 2019 20:30 +0200
commit0d0d0e99169d9285f46b3fd5fc425843c42fff89
tree a62035dceec322338acd49c8a7b0ab64f9a116e8 tree | zip | gz
parent bf41614acf5edce1f082dc89424ae68220a509c3 view | diff
Apply Let's Encrypt Certificates to local IdentityManager (#507)

* Introduced ocp4-workload-projectreaper-operator

* Added GPTE defaults to Project Reaper
1) Added defaults to the role
2) Added new defaults for GPTE to the ProjectTracker template

* Made instance alternate names plural
1) Added loop in the cloudformation template to create multiple Route53 entries for multiple alternate instance names
2) Added python-boto to the list of installed packages on bastion
3) Changed default instance in default env_vars to handle alt_name as array

* Added new ocp4-workload-idm
This workload installs Identity Manager on bastion and makes necessary DNS entries for the OpenShift cluster to reach it

* Introduced the ability to remove workloads on cluster destroy in ocp4-workshop
Some workloads may create infrastructure that must be removed before the cloudformation stack is deleted
Added the remove infrastructure tasks to the ocp4-workload-idm workload

* Added new workload: ocp4-workload-mysql
This workload installs and configures MariaDB (MySQL) on the bastion.

* debugged remove workloads and fixed with some refactoring of playbooks

* WIP: refactor for PR comments

* WIP: issue 484 - make nexus deployment optional

* WIP: Change operator container image version and location

* Successfully tested mysql workload

* Successfully tested refactor of IdM workload

* WIP: issue 484 - make nexus deployment optional

* WIP: Change operator container image version and location

* Default variable to avoid "not defined"

* Moved archived ipa-server role to the correct location in the source tree

* Fix for PR review: use Ansible fact to retrieve bastion IP address

* Updates to nexus operator workload
1) Moved location of nexus-operator container to gpte-devops-automation
2) Added additional permissions needed by nexus-operator
3) Added logic to create a user.info display of the Nexus admin password

* Fixed root account setup in mysql workload

* Refactored instance.alt_name to accept an array of names or a single string for backward compatibility

* Added ocp4-workload-mysql instead of just using an infra-workload because it needs to make a DNS entry for the OpenShift cluster to be able to discover its alias name

* WIP: Refactor lets encrypt to make more reusable

* Added Lets Encrypt certs to local IdM server

* Bump version of Nexus operator to 0.9.0

* Changed Nexus operator version to 0.9

* WIP: issue 484 - make nexus deployment optional

* WIP: Change operator container image version and location

* Updates to nexus operator workload
1) Moved location of nexus-operator container to gpte-devops-automation
2) Added additional permissions needed by nexus-operator
3) Added logic to create a user.info display of the Nexus admin password

* WIP: Refactor lets encrypt to make more reusable

* Added Lets Encrypt certs to local IdM server

* Bump version of Nexus operator to 0.9.0

* Changed Nexus operator version to 0.9
1 files deleted
5 files added
11 files modified
2 files renamed
344 ■■■■ changed files
ansible/roles/host-lets-encrypt-certs-certbot/defaults/main.yml 4 ●●● diff | view | raw | blame | history
ansible/roles/host-lets-encrypt-certs-certbot/files/deploy_certs.yml 24 ●●●●● diff | view | raw | blame | history
ansible/roles/host-lets-encrypt-certs-certbot/tasks/main.yml 28 ●●●● diff | view | raw | blame | history
ansible/roles/ocp4-workload-enable-lets-encrypt-certificates/files/deploy_certs.sh diff | view | raw | blame | history
ansible/roles/ocp4-workload-enable-lets-encrypt-certificates/files/deploy_certs.yml 47 ●●●●● diff | view | raw | blame | history
ansible/roles/ocp4-workload-enable-lets-encrypt-certificates/files/router-certs.j2 diff | view | raw | blame | history
ansible/roles/ocp4-workload-enable-lets-encrypt-certificates/tasks/workload.yml 19 ●●●●● diff | view | raw | blame | history
ansible/roles/ocp4-workload-idm/files/DSTRootCAX3.pem 20 ●●●●● diff | view | raw | blame | history
ansible/roles/ocp4-workload-idm/files/LEAuthX3.pem 27 ●●●●● diff | view | raw | blame | history
ansible/roles/ocp4-workload-idm/files/deploy_certs.sh 4 ●●●● diff | view | raw | blame | history
ansible/roles/ocp4-workload-idm/files/deploy_certs.yml 30 ●●●●● diff | view | raw | blame | history
ansible/roles/ocp4-workload-idm/tasks/remove_workload.yml 5 ●●●●● diff | view | raw | blame | history
ansible/roles/ocp4-workload-idm/tasks/workload.yml 58 ●●●●● diff | view | raw | blame | history
ansible/roles/ocp4-workload-nexus-operator/defaults/main.yml 4 ●●● diff | view | raw | blame | history
ansible/roles/ocp4-workload-nexus-operator/tasks/remove_workload.yml 3 ●●●● diff | view | raw | blame | history
ansible/roles/ocp4-workload-nexus-operator/tasks/workload.yml 55 ●●●●● diff | view | raw | blame | history
ansible/roles/ocp4-workload-nexus-operator/templates/opentlc-nexus.j2 2 ●●● diff | view | raw | blame | history
ansible/roles/ocp4-workload-nexus-operator/templates/operator.j2 6 ●●●● diff | view | raw | blame | history
ansible/roles/ocp4-workload-nexus-operator/templates/role.j2 8 ●●●● diff | view | raw | blame | history