workshop_create_openshift4.yaml

---
## This Playbook will deploy an OpenShift 4 Workshop environment
####################################################################
## Stage 1 Infrastructure and Base Setup
####################################################################
- name: Deploy OpenShift 4 Workshop - Base and Stage 1
  hosts: localhost
  gather_facts: true
  collections:
    - community.crypto
    - community.general
    - ibm.cloudcollection

  tasks:
    - name: Include IP Definition Vars
      include_role:
        name: ws-ocp4-tf
        tasks_from: shared_vars

    # Preflight tasks such as generation directory
    - name: Provision Terraform locally
      include_role:
        name: localTerraform
      tags:
        - local_terraform

    - name: Build infrastructure
      include_role:
        name: ws-ocp4-tf
      vars:
        ibmcloud_api_key: "{{ ibmcloud_api_key }}"
      tags:
        - build_infra

    - name: Template out Zones YAML file
      include_role:
        name: ws-ocp4-tf
        tasks_from: template_zones_file
      tags:
        - template_zones_yaml

    - name: Configure DNSNB
      include_role:
        name: dnsnb
      when: dnsnb_provider is defined
      tags:
        - dnsnb

####################################################################
## DNS Server Config
####################################################################
- name: Connect to DNS VSIs and set configuration
  hosts: dns_vsi
  collections:
    - ansible.posix
  gather_facts: true
  tasks:
    - name: Include IP Definition Vars
      include_role:
        name: ws-ocp4-tf
        tasks_from: shared_vars
      
    - name: Configure DNS servers - FirewallD
      include_role:
        name: kenmoini.firewalld
      tags:
        - dns_configuration
        - firewalld
      vars:
        force_restart_of_firewalld: true
        firewalld_services:
          - ssh
          - cockpit
        firewalld_ports:
          - "53/tcp"
          - "53/udp"

    - name: Configure DNS servers - Cockpit
      include_role:
        name: kenmoini.cockpit
      tags:
        - dns_configuration
        - cockpit

    - name: Pull in zones variable
      include_vars:
        file: "{{ tfile_dir }}/zones.yaml"
      tags:
        - dns_configuration
        - zones_configuration

    - name: Configure DNS servers
      include_role:
        name: configureDNSNodes
      tags:
        - dns_configuration
        - dns_daemon_configuration

####################################################################
## Load Balancer Config
####################################################################
- name: Connect to Load Balancers and Run Configuration
  hosts: lb_vsi
  collections:
    - ansible.posix
  gather_facts: true
  tasks:
    - name: Include IP Definition Vars
      include_role:
        name: ws-ocp4-tf
        tasks_from: shared_vars

    - name: Configure Load Balancer - FirewallD
      include_role:
        name: kenmoini.firewalld
      tags:
        - load_balancer_config
        - firewalld
      vars:
        force_restart_of_firewalld: true
        firewalld_services:
          - ssh
          - cockpit
          - http
          - https
        firewalld_ports:
          - 6443/tcp
          - 8082/tcp
          - 22623/tcp

    - name: Configure Load Balancer - Cockpit
      include_role:
        name: kenmoini.cockpit
      tags:
        - load_balancer_config
        - cockpit

    - name: Put SELinux in permissive mode, logging actions that would be blocked.
      ansible.posix.selinux:
        policy: targeted
        state: permissive
      register: seLinuxState
      tags:
        - load_balancer_config
        - set_selinux
      
    - name: Reboot when needed
      reboot:
        reboot_timeout: 3600
      when: seLinuxState.reboot_required|bool
      tags:
        - load_balancer_config
        - set_selinux
        - reboot

    - name: Configure Load Balancer - Deploy HAProxy
      include_role:
        name: haproxy-lb
      vars:
        enable_machine_config_server: true
        lb_vm_ipaddr: 0.0.0.0
        bootstrap_vm_name: bootstrap
        bootstrap_vm_ipaddr: "{{ bootstrap_node_internal_ip }}"
        control_plane_vsis: "{{ hostvars['localhost']['target_control_plane_vsis'] }}"
        app_node_vsis: "{{ hostvars['localhost']['target_app_node_vsis'] }}"
      tags:
        - load_balancer_config
        - deploy_haproxy

    - name: Configure Load Balancer - Pilot Light server
      include_role:
        name: pilot-light-server
      vars:
        pilot_light_masters_schedulable: true
        installConfig_sshKey: "{{ lookup('file', generation_directory+'/id_ssh_rsa.pub') }}"
        installConfig_pullSecret: "{{ ocp4_pull_secret }}"
        installConfig_baseDomain: "{{ domain }}"
        installConfig_name: "{{ guid }}"
        installConfig_controlPlaneCount: "{{ ocp_control_plane_count }}"
      tags:
        - load_balancer_config
        - pilot_light_server

####################################################################
## External Base Config
####################################################################
- name: Connect to new external VSIs and set base system updates
  hosts: ext_workshop_vsi
  collections:
    - ansible.posix
  gather_facts: true

  tasks:

    - name: Include IP Definition Vars
      include_role:
        name: ws-ocp4-tf
        tasks_from: shared_vars

    - name: Double check on updates
      include_role:
        name: baseLinuxUpdate
      vars:
        reboot_after_kernel_update: true
      tags:
        - global_configuration
        - baseLinuxUpdate

    - name: Configure FirewallD
      include_role:
        name: kenmoini.firewalld
      tags:
        - global_configuration
        - firewalld
        - never
      vars:
        force_restart_of_firewalld: true
        firewalld_services:
          - ssh
          - cockpit

    - name: Configure Cockpit
      include_role:
        name: kenmoini.cockpit
      tags:
        - global_configuration
        - cockpit
        - never

    - name: Set proper hostnames
      include_role:
        name: setSystemDNS
        tasks_from: set_hostnames.yaml
      tags:
        - set_system_dns
        - set_hostnames

    - name: Set up System DNS vars
      include_role:
        name: setSystemDNS
        tasks_from: template_system_dns_vars.yaml
      with_items: "{{ groups['dns_vsi'] }}"
      tags:
        - set_system_dns

    - name: Set system DNS to deployed servers
      include_role:
        name: setSystemDNS
      when: inventory_hostname not in groups.dns_vsi
      vars:
        system_search_domain: "{{ guid }}.{{ domain }}"
      tags:
        - set_system_dns
####################################################################
## Stage 2 Configuration
####################################################################
- name: Deploy OpenShift 4 Workshop - Stage 2
  hosts: localhost
  gather_facts: true
  collections:
    - community.crypto
    - community.general
    - ibm.cloudcollection

  tasks:
    - name: Include IP Definition Vars
      include_role:
        name: ws-ocp4-tf
        tasks_from: shared_vars

    - name: Build Stage 2 Infrastructure - OCP Bootstrap Node
      include_role:
        name: ws-ocp4-tf
        tasks_from: deploy_stage2
      tags:
        - stage2
  # Deploy Stage 3 Terraform - OCP 4 Control Plane Nodes
    - name: Wait for 45 seconds while the bootstrap node comes up
      pause:
        seconds: 45
      tags:
        - wait_for_bootstrap

    - name: Build Stage 3 Infrastructure - OCP Control Plane Nodes
      include_role:
        name: ws-ocp4-tf
        tasks_from: deploy_stage3
      tags:
        - stage3
  # Deploy Stage 4 Terraform - Additional Nodes such as GitLab, Minio, NFS, etc
    - name: Wait for 5 minutes while the control plane nodes comes up
      pause:
        minutes: 5
      tags:
        - wait_for_control_plane

    - name: Build Stage 4 Infrastructure - OCP Control Plane Nodes
      include_role:
        name: ws-ocp4-tf
        tasks_from: deploy_stage4
      tags:
        - stage4
  # Run additional post-cluster deployment configuration