+ ---

+ - hosts: os-control01.stg # :os-control01

+   user: root

+   gather_facts: false

+ 

+   roles:

+   - role: openshift-apps/fcos-pipeline

+     project_name: fcos-pipeline

+     project_description: Jenkins pipeline configuration for Fedora CoreOS.

+     appowners:

+     - dustymabe

+     - jlebon

+     - cverna

+ project_name: fcos-pipeline

+ project_description: Jenkins Pipeline Configuration for FHCOS

+ appowners: []

+ ocp_service_account: root

+ project_templates:

+   - project.yaml

+   - group.yaml

+   - rolebinding.yaml

+ - name: Create the directories to hold the templates

+   file:

+     path: "/root/ocp4/openshift-apps/"

+     state: directory

+     owner: root

+     group: root

+     mode: 0770

+     recurse: yes

+ 

+ # generate the templates for project to be created

+ - name: apply the template

+   template:

+     src: "{{ item }}"

+     dest: "/root/ocp4/openshift-apps/{{ item }}"

+   with_items: "{{ project_templates }}"

+ 

+ # apply created openshift resources

+ - name: oc apply resources

+   command: "/root/bin/oc apply -f /root/ocp4/openshift-apps/{{ item }}"

+   with_items: "{{ project_templates }}"

+ kind: Group

+ apiVersion: user.openshift.io/v1

+ metadata:

+   name: "{{project_name}}-appowners"

+ users:

+ {% for item in appowners %}

+ - "{{ item }}"

+ {% endfor %}

+ ---

+ kind: Namespace

+ apiVersion: v1

+ metadata:

+   name: "{{project_name}}"

+   annotations:

+     openshift.io/description: "{{ project_description }}"

+     openshift.io/display-name: "{{ project_name }}"

+ kind: RoleBinding

+ apiVersion: rbac.authorization.k8s.io/v1

+ metadata:

+   name: "{{project_name}}-appowners"

+   namespace: "{{project_name}}"

+ subjects:

+   - kind: Group

+     apiGroup: rbac.authorization.k8s.io

+     name: "{{project_name}}-appowners"

+ roleRef:

+   apiGroup: rbac.authorization.k8s.io

+   kind: ClusterRole

+   name: admin