# Copyright 2015 Red Hat, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
---
- hosts: all
  vars:
    rolename: ansible-role-zuul-registry
    zuul_registry_file_ssl_cert_content: |
      -----BEGIN CERTIFICATE-----
      MIIDTzCCAjcCFBfoHAg0EQQloogrr6mpLimi+YUJMA0GCSqGSIb3DQEBCwUAMGIx
      CzAJBgNVBAYTAlVTMQ4wDAYDVQQIDAVUZXhhczEPMA0GA1UEBwwGQXVzdGluMR0w
      GwYDVQQKDBRPcGVuU3RhY2sgRm91bmRhdGlvbjETMBEGA1UEAwwKZ2Vhcm1hbi1j
      YTAeFw0yMDExMTcyMTIxMzVaFw0zMDExMTUyMTIxMzVaMGYxCzAJBgNVBAYTAlVT
      MQ4wDAYDVQQIDAVUZXhhczEPMA0GA1UEBwwGQXVzdGluMR0wGwYDVQQKDBRPcGVu
      U3RhY2sgRm91bmRhdGlvbjEXMBUGA1UEAwwOZ2Vhcm1hbi1jbGllbnQwggEiMA0G
      CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cIGCILH7E15Pl0tK6TUKd/8DlsQW
      R+sUju2pSwETz+/sW3TFWcWacS91BX8A3uMuneLTf1xgN/IhH/z4/6+XQi4BUN1a
      /vI8t2xOWAFgq9h9pM2GvYTlPJC2Xj4vTONdZSEIPJE5d/QYpNzHA/NKlQq61A1n
      /bdTALRxdPEeGLF63uY/kiiU+UtR3SF69lysJSw8ryHlCnSUPKc/2NpOvgmzPBVz
      0CjSMeKQzvLxvV31sD1jYa/qEGORwURQl4GrKch4KlOBelEHsjZhKaWnr/19Dhgy
      WoLeXxeACMfa822D5kWza1p5aIMHYXELjKa3PlDCUQnqYqoWIqrNG7FpAgMBAAEw
      DQYJKoZIhvcNAQELBQADggEBAFZVHK2ZxDO9aIAnB03akKQ5WQ1tpljtidBdTvuf
      +Xw76BxCtMFZpk7n3IlfMuhOyTjRyuswb1eTP7VQwW/v3UDJOVzxBrGcCgSA1MEU
      MmftGuV9DMHCELmKGBQKstK59oSCLp55U0cEdHF9Uxuwxv5b5MHdUFiHsKqDYQST
      CUSpLqE7WwZhAu9+vVQq6+4Dr1llu72i4sSV6Yo8/qLALoIhUnocyco1pO/Uh7uQ
      WLpKtURdHg6l4lfhIe3RySTL00W4iSVVZbVX2D234DD7kr4Uj9NhJuNZHap7k4WN
      +pq0Knq5gJvNe49BTgsulj9Inv3gkR9FiWQlidPOKXP0T0s=
      -----END CERTIFICATE-----
    zuul_registry_file_ssl_key_content: |
      -----BEGIN PRIVATE KEY-----
      MIIEwAIBADANBgkqhkiG9w0BAQEFAASCBKowggSmAgEAAoIBAQC4cIGCILH7E15P
      l0tK6TUKd/8DlsQWR+sUju2pSwETz+/sW3TFWcWacS91BX8A3uMuneLTf1xgN/Ih
      H/z4/6+XQi4BUN1a/vI8t2xOWAFgq9h9pM2GvYTlPJC2Xj4vTONdZSEIPJE5d/QY
      pNzHA/NKlQq61A1n/bdTALRxdPEeGLF63uY/kiiU+UtR3SF69lysJSw8ryHlCnSU
      PKc/2NpOvgmzPBVz0CjSMeKQzvLxvV31sD1jYa/qEGORwURQl4GrKch4KlOBelEH
      sjZhKaWnr/19DhgyWoLeXxeACMfa822D5kWza1p5aIMHYXELjKa3PlDCUQnqYqoW
      IqrNG7FpAgMBAAECggEBAIZeKGul6CQzcxTm8wprJaIv05BIySg2UtQSYKBiLTHC
      3lbCNisEgMpIRTuqumDnAHlYuwQ8GA9dEsABLuo0VDcNFrkMsYb2j4GeW4Aj6zUD
      XOAELVtJPMVIv2Cs/f61tDq5TzxR67cDZciCavluLlOai0ua6v1kwKbur4asnHDA
      bagRhqa5Kij+63Wq1o08AtpfUVcvr3iAtuqTf0dw0Fz+iMSxvResy57U/r1sByAa
      vNbLliBXgkO6IfHeiIQ6JdOVNBsjE9Lz1d5yFshOf8SROdBmIKedtSY29nc/2Rit
      +wuWlp2nOdzq+KIaPRqfacWYomcSdwLLhsrSOJKO/JECgYEA5CFJv5wmzTJ3RaZF
      LcErfKWA98jS46oStWWf4DQIltEoWeb/3anoAxyzx1KsId1LCWtEQzf9LlQ2IuRz
      CYhv2T5FWiXT1Ia4OX/WFUMRYXho4hMPxLNOxMPw2rR06FDWDRUAyJdc5g9as6vp
      JRCjiVmFuiV2Ln/tBts/jFgjI50CgYEAzvjOYm05HKwPlnlIMv6sOJtCZslgNcH2
      FRfKUPPTAos8iBu/joprCzUd3TRJn2QlOORvB00M+gQRZTT/+ig60h1stWVkjg6K
      LKpdCBeCS7/2CirFx7cNsLA6fgalqBA1QnwAsCh9ykW1Ao0yM11gq6A0lfMNXW7l
      bwlGMqlTeT0CgYEAnW+Lobx12q61OU/h9g2VoVPmiRoC0DMS7jTP/L5sHwkBO+n7
      MlKLV3p7Z1dai5RYsItidLEy/MIJClN2QGH0LoyW9/ubENRYVvYuHEZIvGeImlxl
      SW4lMg23LnfTJnCDCEwyWjx7VBnMkqpVH8s30RYC/8/Sm4yVW2H7nTNGLNECgYEA
      l+A1uj5B6YtNCPNIirsc75DmwfxFkE0bYdEKUisJjVVU/t+1ykhCUoAQwRCscb0Q
      H1ZpLudYfWJczXJ94DiDKUoUSmvzxNZgiHQfPl/Z6fIb/svyRCJMdnprAa2pA9GY
      84eBDcM4wyQxtoSb8Ns1o9s0m1A2X3iP/dHFZEmiilUCgYEA2tzCS7zu6VXaBXFq
      CwhImmNmBWMrncx7TeCLL2UGxl53z6hmNTZ2N216O+cNItpXeBWmjbyDK1wyLAug
      7fLNnW3xMlIRNaqo5qkoj1iPyaYzAz/RfhIjSH7EHHcm0L5HssjanOGW9YOpTpqv
      4VFGmzIrdzue1QSi4qkP8DuY7Nk=
      -----END PRIVATE KEY-----

  roles:
    - "{{ rolename }}"

  post_tasks:
    - name: Assert results are registered.
      assert:
        that:
          - zuul_registry_file_registry_yaml
          - zuul_registry_file_zuul_registry_service
          - zuul_registry_file_zuul_registry_service_config
          - zuul_registry_service_zuul_registry

    - name: Register zuul_registry_git_dest_stat.
      stat:
        path: /home/zuul/src/opendev.org/zuul/zuul-registry
      register: zuul_registry_git_dest_stat
      when: zuul_registry_install_method == 'git'

    - name: Assert zuul_registry_git_dest tests.
      assert:
        that:
          - zuul_registry_git_dest_stat.stat.exists
          - zuul_registry_git_dest_stat.stat.isdir
      when: zuul_registry_install_method == 'git'

    - name: Register /etc/systemd/system/zuul-registry.service
      stat:
        path: /etc/systemd/system/zuul-registry.service
      register: _zuul_registry_service_systemd_stat

    - name: Assert _zuul_registry_service_systemd_stat tests.
      assert:
        that:
          - _zuul_registry_service_systemd_stat.stat.exists
          - _zuul_registry_service_systemd_stat.stat.isreg
          - _zuul_registry_service_systemd_stat.stat.pw_name == 'root'
          - _zuul_registry_service_systemd_stat.stat.gr_name == 'root'
          - _zuul_registry_service_systemd_stat.stat.mode == '0644'

    - name: Register /etc/systemd/system/zuul-registry.service.d/override.conf
      stat:
        path: /etc/systemd/system/zuul-registry.service.d/override.conf
      register: zuul_registry_service_config_stat

    - name: Assert zuul_registry_service_config_stat tests.
      assert:
        that:
          - zuul_registry_service_config_stat.stat.exists
          - zuul_registry_service_config_stat.stat.isreg
          - zuul_registry_service_config_stat.stat.pw_name == 'root'
          - zuul_registry_service_config_stat.stat.gr_name == 'root'
          - zuul_registry_service_config_stat.stat.mode == '0644'

    - name: Ensure zuul-registry is running
      become: true
      shell: /usr/sbin/service zuul-registry status
      tags: skip_ansible_lint