---
- name: Make the app be real
  hosts: os_control[0]:os_control_stg[0]
  user: root
  gather_facts: false

  vars_files:
    - /srv/web/infra/ansible/vars/global.yml
    - "/srv/private/ansible/vars.yml"
    - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

  vars:

  roles:
  - role: rabbit/user
    user_name: "noggin{{ env_suffix }}"
    user_sent_topics: ^org\.fedoraproject\.{{ env_short }}\.fas\..*

  - role: openshift/project
    project_app: noggin-centos
    project_description: "Self-service account portal"
    project_appowners:
    - abompard
    - nils
    - ryanlerch
    tags:
      - apply-appowners
    when: env == "production"
  - role: openshift/project
    project_app: noggin-centos
    project_description: "Self-service account portal"
    project_appowners:
    - abompard
    - nils
    - ryanlerch
    tags:
      - apply-appowners
    when: env == "staging"

  - role: openshift/secret-file
    secret_file_app: noggin-centos
    secret_file_secret_name: fedora-messaging-ca
    secret_file_key: cacert.pem
    secret_file_privatefile: "rabbitmq/{{env}}/ca-combined.crt"
  - role: openshift/secret-file
    secret_file_app: noggin-centos
    secret_file_secret_name: fedora-messaging-crt
    secret_file_key: noggin-cert.pem
    secret_file_privatefile: "rabbitmq/{{env}}/pki/issued/noggin{{env_suffix}}.crt"
  - role: openshift/secret-file
    secret_file_app: noggin-centos
    secret_file_secret_name: fedora-messaging-key
    secret_file_key: noggin-key.pem
    secret_file_privatefile: "rabbitmq/{{env}}/pki/private/noggin{{env_suffix}}.key"

  - role: openshift/imagestream
    imagestream_app: noggin-centos
    imagestream_imagename: noggin

  - role: openshift/object
    object_app: noggin
    object_os_app: noggin-centos
    object_template: buildconfig.yml.j2
    object_objectname: buildconfig.yml

  - role: openshift/object
    object_app: noggin
    object_os_app: noggin-centos
    object_template: configmap.yml.j2
    object_objectname: configmap.yml
    noggin_theme: centos

  - role: openshift/ipa-client
    ipa_client_app: noggin-centos

  - role: openshift/object
    object_app: noggin
    object_os_app: noggin-centos
    object_template: service.yml.j2
    object_objectname: service.yml

  - role: openshift/route
    route_app: noggin-centos
    route_name: noggin
    route_host: "accounts{{ env_suffix }}.centos.org"
    route_serviceport: web
    route_servicename: noggin-web
    route_annotations:
      haproxy.router.openshift.io/timeout: 5m

  - role: openshift/object
    object_app: noggin
    object_os_app: noggin-centos
    object_template: secrets.yml.j2
    object_objectname: secrets.yml

  - role: openshift/object
    object_app: noggin
    object_os_app: noggin-centos
    object_template: secret-webhook.yml.j2
    object_objectname: secret-webhook.yml

  - role: openshift/object
    object_app: noggin
    object_os_app: noggin-centos
    object_template: deploymentconfig.yml.j2
    object_objectname: deploymentconfig.yml

  - role: openshift/start-build
    start_build_app: noggin-centos
    start_build_buildname: noggin
    tags:
    - never
    - build

  - role: openshift/rollout
    rollout_app: noggin-centos
    rollout_dcname: noggin
    tags:
    - never
    - rollout