ci-framework/post-deployment.yml at main · shiftstack/ci-framework · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
- name: Run Post-deployment admin setup steps, test, and compliance scan
  hosts: "{{ cifmw_target_host | default('localhost') }}"
  gather_facts: true
  tasks:
    - name: Run cifmw_setup admin_setup.yml
      ansible.builtin.import_role:
        name: cifmw_setup
        tasks_from: admin_setup.yml
      tags:
        - admin-setup

    - name: Run Test
      vars:
        pre_tests: "{{ (lookup('vars', 'pre_tempest', default=[])) }}"
        post_tests: "{{ (lookup('vars', 'post_tempest', default=[])) }}"
      ansible.builtin.import_role:
        name: cifmw_setup
        tasks_from: run_tests.yml
      tags:
        - run-tests

    - name: Run compliance scan for controllers
      ansible.builtin.import_role:
        name: compliance
      vars:
        cifmw_compliance_podman_username: "{{ cifmw_registry_token.credentials.username }}"
        cifmw_compliance_podman_password: "{{ cifmw_registry_token.credentials.password }}"
      when: cifmw_run_operators_compliance_scans | default(false) | bool
      tags:
        - compliance

- name: Run compliance scan for computes
  hosts: "{{ groups['computes'] | default ([]) }}"
  gather_facts: true
  tasks:
    - name: Run compliance scan for one compute
      ansible.builtin.import_role:
        name: compliance
        tasks_from: run_compute_node_scans.yml
      run_once: true
      when: cifmw_run_compute_compliance_scans | default(false) | bool
  tags:
    - compliance

- name: Run hooks and inject status flag
  hosts: "{{ cifmw_target_host | default('localhost') }}"
  gather_facts: true
  tasks:
    - name: Run pre_end hooks
      tags:
        - pre-end
      vars:
        step: pre_end
      ansible.builtin.import_role:
        name: run_hook

    - name: Inject success flag
      ansible.builtin.file:
        path: "{{ ansible_user_dir }}/cifmw-success"
        state: touch
        mode: "0644"

- name: Run log related tasks
  hosts: "{{ cifmw_target_host | default('localhost') }}"
  gather_facts: false
  tasks:
    - name: Run logging
      ansible.builtin.import_role:
        name: cifmw_setup
        tasks_from: run_logs.yml
      tags:
        - logs