PREPARED Migrations 23.4

  virtual_hosts:
  - name: deployer
    purpose: deployment_server
    type: deployer
    create: false
    attributes:
      host: cr.vidinet.net
      docker_registry_port:
      docker_registry_user: XXX
      docker_registry_password: XXX  

global:
  docker:
    registry:
      endpoint: "{{ lookup('deployer','docker_registry_endpoint') }}"
      user: "{{ lookup('deployer','docker_registry_user') }}"
      pass: "{{ lookup('deployer','docker_registry_password') }}"

layers:
  migrations:
    origin: "oci://{{ hostvars['deployer']['docker_registry_user'] }}:{{ hostvars['deployer']['docker_registry_password'] }}@{{ hostvars['deployer']['host'] }}/prepared/layers/migrations:23.4.1"

#jinja2:variable_start_string:'[%' , variable_end_string:'%]'
################################################
# Environment
################################################
environment:

  ops-setup-migration:
    helm_chart:
      install: true
      chart_name: cluster-admin
      chart_subpath:
      chart_folder: ClusterAdmin
      chart_category: VPMS
      chart_version: "0.1.12"
      chart_namespace: "{{ vpms3.environment.base.default.ops_namespace }}"
      chart_instance_name: "ops-setup-migration"
      install_before: ops-setup
      chart_values:
        hull:
          config:
            general:
              globalImageRegistryToFirstRegistrySecretServer: true
              fullnameOverride: "ops-setup-migration"
{% if not vpms3.global.base.default.features.gitops.flux.enabled %}
              metadata:
                annotations:
                  custom:
                    vidispine.prepared/version: "{{ prepared_version }}"
{% endif %}
          objects:
            registry:
              registry:
                server: "{{ vpms3.global.docker.registry.endpoint }}"
                username: "{{ vpms3.global.docker.registry.user }}"
                password: "{{ vpms3.global.docker.registry.pass }}"
            configmap:
              cluster-admin:
                data:
                  cluster-admin.sh:
                    inline: |-
                      #!/bin/sh -e
                      
                      adopt() {
                          type=$1
                          instance=$2
                          chart=$3

                          exists=`kubectl get $type $instance -n {{ vpms3.environment.base.default.ops_namespace }} -o json 2>&1`
                          if grep -q "Error from server (NotFound)" <<< "$exists"; then
                            echo "$type $instance does not exist, nothing to migrate ..."
                          else
                            if grep -q "the server doesn't have a resource type" <<< "$exists"; then
                              echo "$type not registered in API, nothing to migrate ..."
                            else
                              echo "$type $instance exists, add to Helm Chart ..."
                              adopt=`kubectl annotate $type $instance --overwrite -n {{ vpms3.environment.base.default.ops_namespace }} meta.helm.sh/release-name=$chart  2>&1`
                              echo "Add release-name:"
                              echo $adopt
                              adopt=`kubectl annotate $type $instance --overwrite -n {{ vpms3.environment.base.default.ops_namespace }} meta.helm.sh/release-namespace={{ vpms3.environment.base.default.ops_namespace }} 2>&1`
                              echo "Add release-namespace:"
                              echo $adopt
                              adopt=`kubectl label $type $instance --overwrite -n {{ vpms3.environment.base.default.ops_namespace }} app.kubernetes.io/managed-by=Helm 2>&1`
                              echo "Add managed-by:"
                              echo $adopt
                            fi
                          fi
                      }

                      adopt "serviceaccount" "ops-setup-default" "ops-setup"
                      adopt "secret" "ops-setup-registry" "ops-setup"
                      adopt "configmap" "haproxy-error-pages" "ops-setup"
                      adopt "IPAddressPool" "metallb-environment-haproxy" "ops-ingress-setup"

  ops-setup:
    helm_chart:
      chart_depends_on:
      - step: "ops-setup-migration"
        role: environment

################################################
# VidiEditor
################################################
---
{% if 'vidieditor' in vpms3 %}
{% if 'chart_version' in vpms3.vidieditor.default.helm_chart %}
vidieditor:
  vidieditor-license:
    helm_chart:
      install: true
      chart_name: hull-canvas
      chart_subpath:
      chart_folder: HullCanvas
      chart_category: VPMS
      chart_version: "{{ vpms3.global.system.default_versions.hull_canvas }}"
      chart_namespace: "{{ vpms3.vidieditor.base.default.namespace }}"
      chart_instance_name: "vidieditor-license"
      chart_depends_on:
        - step: default
          role: vidieditor
      helm_config:
        atomic: false
        wait: false
      chart_values:
        hull:
          objects:
            registry:
              vpms3:
                server: "{{ vpms3.global.docker.registry.endpoint }}"
                username: "{{ vpms3.global.docker.registry.user }}"
                password: "{{ vpms3.global.docker.registry.pass }}"
          config:
            general:
              globalImageRegistryToFirstRegistrySecretServer: true
              fullnameOverride: "vidieditor-license"
{% if not vpms3.global.base.default.features.gitops.flux.enabled %}
              metadata:
                annotations:
                  custom:
                    vidispine.prepared/version: "{{ prepared_version }}"
{% endif %}
              data:
                endpoints: {{ vpms3.vidieditor.default.helm_chart.chart_values.hull.config.general.data.endpoints }}
                installation:
                  config:
                    proxy:
                      httpProxy: "{{ vpms3.global.system.proxy.http_proxy }}"
                      httpsProxy: "{{ vpms3.global.system.proxy.https_proxy }}"
                      noProxy: "{{ vpms3.global.system.proxy.no_proxy }}"
{% if vpms3.global.system.ssl.custom_ca_certs | length > 0 %}
                    customCaCertificates:
{% for key, value in vpms3.global.system.ssl.custom_ca_certs.items() %}
                      {{ key }}: "{{ (value | singleline) + '\n' }}"
{% endfor %}
{% else %}
                    customCaCertificates: {}
{% endif %}
                  endpoints:
                    30_configportal:
                      subresources:
                        60_productcomponents:
                          entities:
                            license:
                              processNoOp: true
                              _helm_charts_:
                                - name: vidieditor
                                  version: "{{ vpms3.vidieditor.default.helm_chart.chart_version }}"
{% endif %}
{% endif %}

################################################
# Global
################################################
---
global:
  base:
    default:
      features:
        gitops:
          flux:
            enabled: true
            url: "https://dev.azure.com/arvato-systems-dmm/PREPARED/_git/project-test"
            branch: master
            auth:
              username: 'git'
              password: [Your AzureDevops PAT needs to go in here]
            role_tags: []