mirror of
https://github.com/ansible/awx-operator.git
synced 2026-03-26 21:33:14 +00:00
51 lines
1.3 KiB
YAML
51 lines
1.3 KiB
YAML
---
|
|
|
|
- name: Create Temporary secrets file
|
|
tempfile:
|
|
state: file
|
|
suffix: .json
|
|
register: tmp_secrets
|
|
|
|
- name: Dump (generated) secret names from statuses and data into file
|
|
include_tasks: dump_generated_secret.yml
|
|
with_items:
|
|
- secretKeySecret
|
|
- adminPasswordSecret
|
|
- broadcastWebsocketSecret
|
|
- postgresConfigurationSecret
|
|
|
|
- name: Dump secret names from awx spec and data into file
|
|
include_tasks: dump_secret.yml
|
|
loop:
|
|
- route_tls_secret
|
|
- ingress_tls_secret
|
|
- ldap_cacert_secret
|
|
- bundle_cacert_secret
|
|
- ee_pull_credentials_secret
|
|
|
|
# image_pull_secret is deprecated in favor of image_pull_secrets
|
|
- name: Dump image_pull_secret into file
|
|
include_tasks: dump_secret.yml
|
|
with_items:
|
|
- image_pull_secret
|
|
when: image_pull_secret is defined
|
|
|
|
- name: Dump image_pull_secrets into file
|
|
include_tasks: dump_secret.yml
|
|
with_items:
|
|
- image_pull_secrets
|
|
when: image_pull_secrets | default([]) | length
|
|
|
|
- name: Nest secrets under a single variable
|
|
set_fact:
|
|
secrets: {"secrets": '{{ secret_dict }}'}
|
|
no_log: "{{ no_log }}"
|
|
|
|
- name: Write postgres configuration to pvc
|
|
k8s_exec:
|
|
namespace: "{{ backup_pvc_namespace }}"
|
|
pod: "{{ ansible_operator_meta.name }}-db-management"
|
|
command: >-
|
|
bash -c "echo '{{ secrets | to_yaml }}' > {{ backup_dir }}/secrets.yml"
|
|
no_log: "{{ no_log }}"
|