---
- name: Make the app be real
  hosts: os_control[0]:os_control_stg[0]
  user: root
  gather_facts: false

  vars_files:
    - /srv/web/infra/ansible/vars/global.yml
    - "/srv/private/ansible/vars.yml"
    - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

  roles:

  - role: rabbit/user
    user_name: "bugzilla2fedmsg{{ env_suffix }}"
    user_sent_topics: ^org\.fedoraproject\.{{ env_short }}\.bugzilla\..*

  - role: openshift/project
    project_app: bugzilla2fedmsg
    project_description: bugzilla2fedmsg
    project_appowners:
    - abompard
    - kevin
    tags:
      - apply-appowners

  # Fedora Messaging secrets
  - role: openshift/secret-file
    secret_file_app: bugzilla2fedmsg
    secret_file_secret_name: fedora-messaging-ca
    secret_file_key: cacert.pem
    secret_file_privatefile: "rabbitmq/{{env}}/ca-combined.crt"

  - role: openshift/secret-file
    secret_file_app: bugzilla2fedmsg
    secret_file_secret_name: fedora-messaging-crt
    secret_file_key: bugzilla2fedmsg-cert.pem
    secret_file_privatefile: "rabbitmq/{{env}}/pki/issued/bugzilla2fedmsg{{env_suffix}}.crt"

  - role: openshift/secret-file
    secret_file_app: bugzilla2fedmsg
    secret_file_secret_name: fedora-messaging-key
    secret_file_key: bugzilla2fedmsg-key.pem
    secret_file_privatefile: "rabbitmq/{{env}}/pki/private/bugzilla2fedmsg{{env_suffix}}.key"

  # STOMP secrets
  - role: openshift/secret-file
    secret_file_app: bugzilla2fedmsg
    secret_file_secret_name: stomp-crt
    secret_file_key: msg-client-fedora-prod.crt
    secret_file_privatefile: "bugzilla2fedmsg/msg-client-fedora-prod.crt"

  - role: openshift/secret-file
    secret_file_app: bugzilla2fedmsg
    secret_file_secret_name: stomp-key
    secret_file_key: msg-client-fedora-prod.key
    secret_file_privatefile: "bugzilla2fedmsg/msg-client-fedora-prod.key"

    # FASJSON access
  - role: openshift/ipa-client
    ipa_client_app: bugzilla2fedmsg
  - role: openshift/keytab
    keytab_app: bugzilla2fedmsg
    keytab_key: service.keytab
    keytab_secret_name: keytab
    keytab_service: bugzilla2fedmsg

  - role: openshift/imagestream
    imagestream_app: bugzilla2fedmsg
    imagestream_imagename: bugzilla2fedmsg

  - role: openshift/object
    object_app: bugzilla2fedmsg
    object_template: buildconfig.yml.j2
    object_objectname: buildconfig.yml

  - role: openshift/object
    object_app: bugzilla2fedmsg
    object_template: configmap.yml.j2
    object_objectname: configmap.yml

  - role: openshift/object
    object_app: bugzilla2fedmsg
    object_template: deploymentconfig.yml.j2
    object_objectname: deploymentconfig.yml