testnet-ops/service-provider-setup/deploy-backend.yml

- name: Deploy webapp-deployer backend
  hosts: "{{ target_host }}"

  environment:
    PATH: "{{ ansible_env.PATH }}:/home/{{ansible_user}}/bin"
    KUBECONFIG: "{{ ansible_env.HOME }}/.kube/config-default.yaml"

  vars_files:
    - vars/webapp-vars.yml
    - vars/container-vars.yml
    - vars/k8s-vars.yml
    - vars/dns-vars.yml
    - vars/laconicd-vars.yml

  tasks:
    - name: Ensure gpg-keys directory exists
      file:
        path: ~/gpg-keys
        state: directory
        mode: '0700'

    - name: Create a GPG key
      shell: gpg --batch --passphrase "{{ deployer_gpg_passphrase }}" --quick-generate-key webapp-deployer-api.{{ full_domain }} default default never

    - name: Export the public key
      shell: gpg --export webapp-deployer-api.{{ full_domain }} > ~/gpg-keys/webapp-deployer-api.{{ full_domain }}.pgp.pub
      args:
        creates: ~/gpg-keys/webapp-deployer-api.{{ full_domain }}.pgp.pub

    - name: Export the GPG private key with passphrase
      shell: gpg --pinentry-mode=loopback --passphrase "{{ deployer_gpg_passphrase }}" --export-secret-keys webapp-deployer-api.{{ full_domain }} > ~/gpg-keys/webapp-deployer-api.{{ full_domain }}.pgp.key

    - name: Setup repositories for webapp-deployer-backend
      command: laconic-so --stack webapp-deployer-backend setup-repositories

    - name: Build containers for webapp-deployer-backend
      command: laconic-so --stack webapp-deployer-backend build-containers

    - name: Ensure the config directory exists
      file:
        path: "{{ ansible_env.HOME }}/config"
        state: directory

    - name: Create laconic config file
      template:
        src: "./templates/laconic.yml.j2"
        dest: "{{ ansible_env.HOME }}/config/laconic.yml"

    - name: Copy the gpg private key file to config dir
      copy:
        src: "gpg-keys/webapp-deployer-api.{{ full_domain }}.pgp.key"
        dest: "config"
        remote_src: true

    - name: Copy the gpg public key file to config dir
      copy:
        src: "gpg-keys/webapp-deployer-api.{{ full_domain }}.pgp.pub"
        dest: "config"
        remote_src: true

    - name: Publish the webapp-deployer record using laconic-so
      shell: |
        docker run -i -t \
          -v /home/{{ ansible_user }}/config:/home/root/config \
          cerc/webapp-deployer-backend:local laconic-so publish-deployer-to-registry \
            --laconic-config /home/root/config/laconic.yml \
            --api-url https://webapp-deployer-api.pwa.{{ full_domain }} \
            --public-key-file /home/root/config/webapp-deployer-api.{{ full_domain }}.pgp.pub \
            --lrn lrn://{{ authority_name }}/deployers/webapp-deployer-api.{{ full_domain }} \
            --min-required-payment 0
      register: publish_output

    - name: Display publish output
      debug:
        var: publish_output.stdout

    - name: Generate spec file for webapp-deployer-backend
      template:
        src: "./templates/specs/webapp-deployer.spec.j2"
        dest: "webapp-deployer.spec"

    - name: Create the deployment directory from the spec file
      command: >
        laconic-so --stack webapp-deployer-backend deploy create
        --deployment-dir webapp-deployer --spec-file webapp-deployer.spec

    - name: Update config for webapp-deployer-backend
      template:
        src: "./templates/configs/webapp-deployer-config.env.j2"
        dest: "webapp-deployer/config.env"

    - name: Copy the kube config file to webapp-deployer directory
      copy:
        src: "{{ansible_env.HOME}}/.kube/config-default.yaml"
        dest: "webapp-deployer/data/config/kube.yml"
        remote_src: true

    - name: Create laconic config file
      template:
        src: "./templates/laconic.yml.j2"
        dest: "webapp-deployer/data/config/laconic.yml"

    - name: login to the container registry
      command: "docker login container-registry.pwa.{{ full_domain }} --username {{ container_registry_username }} --password {{ container_registry_password}}"

    - name: Push images to container registry
      command: laconic-so deployment --dir webapp-deployer push-images

    - name: Start the webapp deployer
      command: laconic-so deployment --dir webapp-deployer start

    - name: Get the most recent pod for the deployment
      shell: kubectl get pods --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}'
      register: webapp_deployer_pod

    - name: Set pod ID to a variable
      set_fact:
        pod_id: "{{ webapp_deployer_pod.stdout }}"

    - name: Wait for the recent pod to be ready
      command: kubectl wait --for=condition=Ready pod/{{ pod_id }} --timeout=300s
      register: wait_result

    - name: Copy gpg private key file to webapp deployer pod
      shell: kubectl cp gpg-keys/webapp-deployer-api.{{ full_domain }}.pgp.key {{ pod_id }}:/app

    - name: Copy gpg public key file to webapp deployer pod
      shell: kubectl cp gpg-keys/webapp-deployer-api.{{ full_domain }}.pgp.pub {{ pod_id }}:/app