mirror of
https://github.com/ansible/awx-operator.git
synced 2026-03-26 21:33:14 +00:00
3fa60853a2
The default paramater from the jinja map filter has been added in the
2.11.0 release.
However, the downstream ansible operator is still using ansible 2.9
with jinja 2.10.x so using the default parameter leads to the
following error:
TASK [Dump ingress tls secret names from awx spec and data into file]
********************************
The error was: jinja2.exceptions.FilterArgumentError: Unexpected
keyword argument 'default'
fatal: [localhost]: FAILED! => {
"msg": "Unexpected failure during module execution.",
"stdout": ""
}
Rather than using the default parameter with the map filter then add the
selectattr filter to get only the items with tls_secret defined and then
get the tls_secret attribute with the map filter.
This also gets rid of the when statement since we always get an empty
list when no tls_secret are present in ingress_hosts so the loop statement
will be skipped on the empty list.
Finally this changes the default value from the ingress_hosts field because
it's a list rather than a string.
https://jinja.palletsprojects.com/en/latest/templates/#jinja-filters.map
Signed-off-by: Dimitri Savineau <dsavinea@redhat.com>
56 lines
1.8 KiB
YAML
56 lines
1.8 KiB
YAML
---
|
|
|
|
- name: Dump (generated) secret names from statuses and data into file
|
|
include_tasks: dump_generated_secret.yml
|
|
with_items:
|
|
- secretKeySecret
|
|
- adminPasswordSecret
|
|
- broadcastWebsocketSecret
|
|
- postgresConfigurationSecret
|
|
|
|
- name: Dump secret names from awx spec and data into file
|
|
include_tasks: dump_secret.yml
|
|
loop:
|
|
- route_tls_secret
|
|
# ingress_tls_secret is deprecated in favor of ingress_hosts.tls_secret
|
|
- ingress_tls_secret
|
|
- ldap_cacert_secret
|
|
- bundle_cacert_secret
|
|
- ee_pull_credentials_secret
|
|
|
|
- name: Dump ingress tls secret names from awx spec and data into file
|
|
include_tasks: dump_ingress_tls_secrets.yml
|
|
with_items: "{{ awx_spec.spec['ingress_hosts'] | default([]) | selectattr('tls_secret', 'defined') | map(attribute='tls_secret') | list }}"
|
|
|
|
- name: Dump receptor secret names and data into file
|
|
include_tasks: dump_receptor_secrets.yml
|
|
loop:
|
|
- '{{ deployment_name }}-receptor-ca'
|
|
- '{{ deployment_name }}-receptor-work-signing'
|
|
|
|
# image_pull_secret is deprecated in favor of image_pull_secrets
|
|
- name: Dump image_pull_secret into file
|
|
include_tasks: dump_secret.yml
|
|
with_items:
|
|
- image_pull_secret
|
|
when: image_pull_secret is defined
|
|
|
|
- name: Dump image_pull_secrets into file
|
|
include_tasks: dump_secret.yml
|
|
with_items:
|
|
- image_pull_secrets
|
|
when: image_pull_secrets | default([]) | length
|
|
|
|
- name: Nest secrets under a single variable
|
|
set_fact:
|
|
secrets: {"secrets": '{{ secret_dict }}'}
|
|
no_log: "{{ no_log }}"
|
|
|
|
- name: Write postgres configuration to pvc
|
|
k8s_cp:
|
|
namespace: "{{ backup_pvc_namespace }}"
|
|
pod: "{{ ansible_operator_meta.name }}-db-management"
|
|
remote_path: "{{ backup_dir }}/secrets.yml"
|
|
content: "{{ secrets | to_yaml }}"
|
|
no_log: "{{ no_log }}"
|