Added logic to TSB workload to kill operator pod afgter deployment (should ...

Wolfgang Kulhanek

2019-06-18 7b6a0688a75e673686e9d345adc4fdbf63099bba

Added logic to TSB workload to kill operator pod afgter deployment (should fix random permissions errors)

 ansible/roles/ocp4-workload-template-service-broker/tasks/remove_workload.yml

@@ -19,7 +19,7 @@

- name: Remove Template Service Broker Project
  k8s:
    name: "{{ _broker_project }}"
    name: "{{ _tsb_broker_project }}"
    api_version: v1
    kind: Namespace
    state: absent

 ansible/roles/ocp4-workload-template-service-broker/tasks/workload.yml

@@ -47,6 +47,39 @@
  loop:
  - ./templates/template_service_broker.j2

- name: Wait for Template Service Broker to be running
  k8s_facts:
    api_version: apps.openshift.io/v1
    kind: DeploymentConfig
    namespace: "{{ _tsb_broker_project }}"
    name: apiserver
  register: r_tsb
  retries: 30
  delay: 10
  until: r_tsb.resources[0].status.availableReplicas | int == 1

# Workaround to make Operator Pod pick up permissions from the service
# account. Without this the TSB will be running but not
# displaying any Templates in the Developer Catalog.
# Somehow killing the pod (and have it recreated via the Deployment)
# fixes the issue.
- name: Workaround - Get Operator Pod
  k8s_facts:
    api_version: v1
    kind: Pod
    namespace: "{{ _tsb_broker_project }}"
    label_selectors:
    - name = openshift-template-service-broker-operator-alm-owned
  register: r_operator_pod

- name: Workaround - Kill Operator Pod
  k8s:
    state: absent
    api_version: v1
    kind: Pod
    namespace: "{{ _tsb_broker_project }}"
    name: "{{ r_operator_pod.resources[0].metadata.name }}"

# Leave this as the last task in the playbook.
- name: workload tasks complete
  debug: