| 12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849 |
- ---
- # Ensures there is an instance of RHBoK running in a configurable namespace.
- #
- # Configures it with a realm, and some users.
- #
- # Required variables (some are supplied by defaults/main.yml):
- #
- # rhbk:
- # namespace: namespace to deploy to (keycloak)
- # name: name of the instance (sso)
- # replicas: how many instances
- # fqdn: fqdn of the route (hostname), detected if omitted
- # admin: bootstrap admin credentials
- # username: username (rhbk)
- # password: password (secret)
- # db: database-specific settings
- # image: db server image
- # name: database name (rhbk)
- # username: database owner (rhbk)
- # password: db owner's password (secret)
- # claim_modes:[] volume claim template access modes, list (ReadWriteOnce)
- # storage_class: storage class name, no default (omitted)
- # size: pvc size (1Gi)
- # replicas: how many instances (TODO ignored for now)
- # realm: name of the realm (sample-realm)
- # clients:[] a list of clients to create in the realm
- # - id: clientId
- # name: client (human readable) name (client.id)
- # secret: the client secret, if used
- # base_url: the base URL for redirects and other bits
- # users: users to create in realm, no default (meaning no users)
- # - username: required (as it is key)
- # password: optional, defaults to "secret"
- # fullname: optional, set to username if empty
- # email: optional, set to username@example.com if empty
- # state: present (default) or absent (removes a RHBK instance if found)
- #
- # NOTE: Use rhbk_state to override rhbk.state from command line.
- #
- # NOTE: Must have an operator deployed in that namespace prior (use deploy-operators role for that).
- #
- - name: Pick up whatever value we can for rhbk.state.
- ansible.builtin.set_fact:
- rhbk_action: "{{ rhbk_state | default(rhbk.state | default('present')) }}"
- - name: Include the correct set of tasks.
- ansible.builtin.include_tasks:
- file: tasks/{{ rhbk_action }}.yml
- ...
|
