summaryrefslogtreecommitdiffstats
path: root/roles/cockpit-ui/tasks
diff options
context:
space:
mode:
authorAndrew Butcher <abutcher@redhat.com>2016-09-02 17:58:30 -0400
committerAndrew Butcher <abutcher@redhat.com>2016-09-02 19:48:44 -0400
commit9c114231850ac265e7414afefbf78da194d0a8e4 (patch)
tree988f9f164d810f7cd3313173bf13243eb5ed9402 /roles/cockpit-ui/tasks
parent43728fd16e0cd2b295a7b3f5e117b6bfa70cb141 (diff)
downloadopenshift-9c114231850ac265e7414afefbf78da194d0a8e4.tar.gz
openshift-9c114231850ac265e7414afefbf78da194d0a8e4.tar.bz2
openshift-9c114231850ac265e7414afefbf78da194d0a8e4.tar.xz
openshift-9c114231850ac265e7414afefbf78da194d0a8e4.zip
Secure registry for atomic registry deployment (deployment_subtype=registry).
Diffstat (limited to 'roles/cockpit-ui/tasks')
-rw-r--r--roles/cockpit-ui/tasks/main.yml49
1 files changed, 39 insertions, 10 deletions
diff --git a/roles/cockpit-ui/tasks/main.yml b/roles/cockpit-ui/tasks/main.yml
index c752bcff1..9fc15ee8b 100644
--- a/roles/cockpit-ui/tasks/main.yml
+++ b/roles/cockpit-ui/tasks/main.yml
@@ -1,31 +1,53 @@
---
-- name: Expose docker-registry
+- name: Create temp directory for kubeconfig
+ command: mktemp -d /tmp/openshift-ansible-XXXXXX
+ register: mktemp
+ changed_when: False
+
+- set_fact:
+ openshift_hosted_kubeconfig: "{{ mktemp.stdout }}/admin.kubeconfig"
+
+- name: Copy the admin client config(s)
command: >
- {{ openshift.common.client_binary }} expose service docker-registry -n default
- register: expose_docker_registry
- changed_when: "'already exists' not in expose_docker_registry.stderr"
- failed_when: "'already exists' not in expose_docker_registry.stderr and expose_docker_registry.rc != 0"
+ cp {{ openshift_master_config_dir }}/admin.kubeconfig {{ openshift_hosted_kubeconfig }}
+ changed_when: False
+
+- name: Create passthrough route for docker-registry
+ command: >
+ {{ openshift.common.client_binary }} create route passthrough
+ --service docker-registry
+ --config={{ openshift_hosted_kubeconfig }}
+ -n default
+ register: create_docker_registry_route
+ changed_when: "'already exists' not in create_docker_registry_route.stderr"
+ failed_when: "'already exists' not in create_docker_registry_route.stderr and create_docker_registry_route.rc != 0"
- name: Create passthrough route for registry-console
command: >
{{ openshift.common.client_binary }} create route passthrough
--service registry-console
--port registry-console
+ --config={{ openshift_hosted_kubeconfig }}
-n default
register: create_registry_console_route
changed_when: "'already exists' not in create_registry_console_route.stderr"
failed_when: "'already exists' not in create_registry_console_route.stderr and create_registry_console_route.rc != 0"
- name: Retrieve docker-registry route
- command: "{{ openshift.common.client_binary }} get route docker-registry -n default --template='{{ '{{' }} .spec.host {{ '}}' }}'"
+ command: >
+ {{ openshift.common.client_binary }} get route docker-registry
+ --template='{{ '{{' }} .spec.host {{ '}}' }}'
+ --config={{ openshift_hosted_kubeconfig }}
+ -n default
register: docker_registry_route
- failed_when: false
changed_when: false
- name: Retrieve cockpit kube url
- command: "{{ openshift.common.client_binary }} get route registry-console -n default --template='https://{{ '{{' }} .spec.host {{ '}}' }}'"
+ command: >
+ {{ openshift.common.client_binary }} get route registry-console
+ --template='https://{{ '{{' }} .spec.host {{ '}}' }}'
+ -n default
register: registry_console_cockpit_kube_url
- failed_when: false
changed_when: false
- set_fact:
@@ -36,9 +58,16 @@
{{ openshift.common.client_binary }} new-app --template=registry-console
{{ cockpit_image_prefix }}
-p OPENSHIFT_OAUTH_PROVIDER_URL="{{ openshift.master.public_api_url }}"
- -p REGISTRY_HOST="{{ docker_registry_route.stdout }}:80"
+ -p REGISTRY_HOST="{{ docker_registry_route.stdout }}"
-p COCKPIT_KUBE_URL="{{ registry_console_cockpit_kube_url.stdout }}"
+ --config={{ openshift_hosted_kubeconfig }}
-n default
register: deploy_registry_console
changed_when: "'already exists' not in deploy_registry_console.stderr"
failed_when: "'already exists' not in deploy_registry_console.stderr and deploy_registry_console.rc != 0"
+
+- name: Delete temp directory
+ file:
+ name: "{{ mktemp.stdout }}"
+ state: absent
+ changed_when: False