Condition added for password

[ealt-edge.git] / ocd / infra / playbooks / roles / eg_mep / tasks / install.yml

diff --git a/ocd/infra/playbooks/roles/eg_mep/tasks/install.yml b/ocd/infra/playbooks/roles/eg_mep/tasks/install.yml
index 5474126..62e103b 100644 (file)
--- a/ocd/infra/playbooks/roles/eg_mep/tasks/install.yml
+++ b/ocd/infra/playbooks/roles/eg_mep/tasks/install.yml
@@ -59,12 +59,21 @@
   args:
     chdir: /tmp/.mep_tmp_cer/
 
-- name: Openssl rsa mep tls
+- name: Openssl rsa mep tls with common pwd
   # yamllint disable rule:line-length
   command: openssl rsa -in mepserver_tls.key -aes256 -passout pass:{{ vardata.common_pwd.name}} -out mepserver_encryptedtls.key
   # yamllint disable rule:line-length
   args:
     chdir: /tmp/.mep_tmp_cer/
+  when: '{{ vardata.common_pwd.name}}'
+
+- name: Openssl rsa mep tls
+  # yamllint disable rule:line-length
+  command: openssl rsa -in mepserver_tls.key -aes256 -passout pass:{{ vardata.mep_cert_pwd.name}} -out mepserver_encryptedtls.key
+  # yamllint disable rule:line-length
+  args:
+    chdir: /tmp/.mep_tmp_cer/
+  when: '{{ vardata.mep_cert_pwd.name}}'
 
 - name: Openssl req new key mepserver tls key
   # yamllint disable rule:line-length
@@ -90,33 +99,62 @@
   args:
     chdir: /tmp/.mep_tmp_cer/
 
-- name: Openssl rsa in jwt
+- name: Openssl rsa in jwt with common pwd
   # yamllint disable rule:line-length
   command: openssl rsa -in jwt_privatekey -aes256 -passout pass:{{ vardata.common_pwd.name}} -out jwt_encrypted_privatekey
   # yamllint disable rule:line-length
   args:
     chdir: /tmp/.mep_tmp_cer/
+  when: '{{ vardata.common_pwd.name}}'
+
+- name: Openssl rsa in jwt
+  # yamllint disable rule:line-length
+  command: openssl rsa -in jwt_privatekey -aes256 -passout pass:{{ vardata.mep_cert_pwd.name}} -out jwt_encrypted_privatekey
+  # yamllint disable rule:line-length
+  args:
+    chdir: /tmp/.mep_tmp_cer/
+  when: '{{ vardata.mep_cert_pwd.name}}'
 
 - name: Create mep namespace
   command: kubectl create ns mep
   args:
     chdir: /tmp/
 
-- name: Create generic pg secret
+- name: Create generic pg secret with common pwd
   # yamllint disable rule:line-length
   command: kubectl -n mep create secret generic pg-secret --from-literal=pg_admin_pwd={{ vardata.common_pwd.name}} --from-literal=kong_pg_pwd={{ vardata.common_pwd.name}}
            --from-file=server.key=/tmp/.mep_tmp_cer/mepserver_tls.key --from-file=server.crt=/tmp/.mep_tmp_cer/mepserver_tls.crt
   # yamllint disable rule:line-length
   args:
     chdir: /tmp/
+  when: '{{ vardata.common_pwd.name}}'
 
-- name: Create mep generic for mep ssl
+- name: Create generic pg secret
+  # yamllint disable rule:line-length
+  command: kubectl -n mep create secret generic pg-secret --from-literal=pg_admin_pwd={{ vardata.mep_pg_admin_pwd.name}} --from-literal=kong_pg_pwd={{ vardata.mep_kong_pg_pwd.name}}
+           --from-file=server.key=/tmp/.mep_tmp_cer/mepserver_tls.key --from-file=server.crt=/tmp/.mep_tmp_cer/mepserver_tls.crt
+  # yamllint disable rule:line-length
+  args:
+    chdir: /tmp/
+  when: '{{ vardata.mep_pg_admin_pwd.name}}'
+
+- name: Create mep generic for mep ssl with common pwd
   # yamllint disable rule:line-length
   command: kubectl -n mep create secret generic mep-ssl --from-literal=cert_pwd={{ vardata.common_pwd.name}} --from-file=server.cer=/tmp/.mep_tmp_cer/mepserver_tls.crt
            --from-file=server_key.pem=/tmp/.mep_tmp_cer/mepserver_encryptedtls.key --from-file=trust.cer=/tmp/.mep_tmp_cer/ca.crt
   # yamllint disable rule:line-length
   args:
     chdir: /tmp/
+  when: '{{ vardata.common_pwd.name}}'
+
+- name: Create mep generic for mep ssl
+  # yamllint disable rule:line-length
+  command: kubectl -n mep create secret generic mep-ssl --from-literal=cert_pwd={{ vardata.mep_cert_pwd.name}} --from-file=server.cer=/tmp/.mep_tmp_cer/mepserver_tls.crt
+           --from-file=server_key.pem=/tmp/.mep_tmp_cer/mepserver_encryptedtls.key --from-file=trust.cer=/tmp/.mep_tmp_cer/ca.crt
+  # yamllint disable rule:line-length
+  args:
+    chdir: /tmp/
+  when: '{{ vardata.mep_cert_pwd.name}}'
 
 - name: Create mep seret generic
   # yamllint disable rule:line-length