ptoal/toallab-automation
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add Automation Orchestrator Install and setup

Browse Source
This commit is contained in:
Patrick Toal
2026-10-02 13:24:44 -04:00
parent 085654d017
commit c164cb2598
23 changed files with 1568 additions and 90 deletions
Download Patch File Download Diff File Expand all files Collapse all files

81
roles/automation_orchestrator_operator/defaults/main.yml Normal file
View File

@@ -0,0 +1,81 @@
---
# --- OLM subscription ---
# Automation Orchestrator is published in redhat-operators. To install a pre-release
# build instead (as aapctl's scripts/create-catalogsources.sh does), set:
# automation_orchestrator_operator_catalog_source_name: cs-automation-orchestrator
# automation_orchestrator_operator_catalog_image: quay.io/aap/ansible-automation-platform/automation-orchestrator-operator-index@sha256:...
# plus automation_orchestrator_operator_image_digest_mirrors below.
#
# To adopt an existing install (e.g. from OperatorHub), point operator_namespace at
# it: an existing OperatorGroup in that namespace is reused, not duplicated, and an
# already-installed CSV skips InstallPlan approval.
automation_orchestrator_operator_operator_namespace: automation-orchestrator
automation_orchestrator_operator_channel: stable
automation_orchestrator_operator_name: automation-orchestrator-operator
automation_orchestrator_operator_catalog_source_name: redhat-operators
# Index image for a custom CatalogSource; "" uses the existing catalog_source_name as-is.
automation_orchestrator_operator_catalog_image: ""
# Manual: the role approves the initial InstallPlan only (upgrades stay pending).
automation_orchestrator_operator_install_plan_approval: Manual
automation_orchestrator_operator_wait_timeout: 600
# --- Pre-release image mirrors (ImageDigestMirrorSet) ---
# Only needed for pre-release builds whose images are not on registry.redhat.io.
# Cluster-wide; applying it triggers a MachineConfigPool rollout. Pre-release example:
# - source: registry.redhat.io/ansible-automation-platform-27-next
# mirrors: [quay.io/aap/ansible-automation-platform-27-next]
# - source: registry.redhat.io/ansible-automation-platform-27
# mirrors: [quay.io/aap/ansible-automation-platform-27-next]
automation_orchestrator_operator_idms_name: idms-aap-27-next
automation_orchestrator_operator_image_digest_mirrors: []
automation_orchestrator_operator_mcp_wait_timeout: 1800
# --- AutomationOrchestrator CR ---
# Same as the operator namespace by default (aapctl runs OLM + CR in one namespace);
# override only if you need to split the cluster-scoped operator from the app instance.
automation_orchestrator_operator_app_namespace: "{{ automation_orchestrator_operator_operator_namespace }}"
automation_orchestrator_operator_instance_name: automation-orchestrator
# --- PostgreSQL (bring-your-own) ---
# Defaults match the Secrets/Service created by the cloudnativepg_operator role
# (run it first, or point these at a customer-managed PostgreSQL instance instead).
automation_orchestrator_operator_postgres_host: orchestrator-postgres-rw
automation_orchestrator_operator_postgres_port: 5432
automation_orchestrator_operator_postgres_ssl_mode: verify-ca
# Name of a pre-existing Secret (key ca.crt). CloudNativePG auto-generates
# "<cluster-name>-ca" for its Cluster CR. Only used with sslMode verify-ca/verify-full.
automation_orchestrator_operator_postgres_ca_cert_secret: orchestrator-postgres-ca
# Names of pre-existing Secrets (keys: database, username, password) — created by
# cloudnativepg_operator, or your own Secrets when using a customer-managed PostgreSQL.
automation_orchestrator_operator_backend_db_secret_name: orchestrator-postgres-secret
automation_orchestrator_operator_temporal_db_secret_name: temporal-postgres-secret
# --- Ingress ---
# Route (OpenShift) or Ingress (AKS); the operator manages the resource itself.
automation_orchestrator_operator_ingress_type: Route
automation_orchestrator_operator_ingress_host: ""
automation_orchestrator_operator_ingress_annotations: {}
# Only used when ingress_type is Ingress — name of a pre-existing kubernetes.io/tls Secret.
automation_orchestrator_operator_ingress_tls_secret_name: ""
# --- Component workload images (only needed for private registries) ---
automation_orchestrator_operator_image_pull_secrets: []
# --- Per-component overrides (replicas, resources, affinity, tolerations, nodeSelector) ---
# Passed through as-is into the matching spec.<component> block; leave {} for operator defaults.
automation_orchestrator_operator_backend: {}
automation_orchestrator_operator_ui: {}
automation_orchestrator_operator_worker: {}
automation_orchestrator_operator_background_worker: {}
automation_orchestrator_operator_redis: {}
automation_orchestrator_operator_temporal_server: {}
# Escape hatch: recursively merged into the generated spec last, for fields
# (fileStorage, otel, tls, secrets, workflowHttpRequestAllowedHosts, ...) not
# otherwise exposed as dedicated variables above.
automation_orchestrator_operator_extra_spec: {}
# --- Debugging ---
# Set to false to disable no_log and expose secret values in task output.
automation_orchestrator_operator_no_log: true

158
roles/automation_orchestrator_operator/meta/argument_specs.yml Normal file
View File

@@ -0,0 +1,158 @@
---
argument_specs:
main:
short_description: Install Automation Orchestrator via its OLM operator (AutomationOrchestrator CR)
description:
- Installs the Automation Orchestrator operator via OLM (redhat-operators by default, or a
custom CatalogSource for pre-release builds) and creates a single
AutomationOrchestrator CR. Adopts an existing install (OperatorGroup, installed CSV)
when operator_namespace points at one.
- >-
Automation Orchestrator is bring-your-own-PostgreSQL: this role only references
existing K8s Secrets (keys: database, username, password) — it does not create the
database/user or their credential Secret. Defaults match the cloudnativepg_operator
role's output; run that role first, or point postgres_* variables and the secret-name
variables at a customer-managed PostgreSQL instance.
- Modeled on https://github.com/ansible/aapctl and https://github.com/automation-nexus/automation-orchestrator-operator.
options:
automation_orchestrator_operator_operator_namespace:
description: Namespace for the Automation Orchestrator operator and (by default) its CR.
type: str
default: automation-orchestrator
automation_orchestrator_operator_channel:
description: OLM subscription channel.
type: str
default: stable
automation_orchestrator_operator_name:
description: Operator package name in the catalog.
type: str
default: automation-orchestrator-operator
automation_orchestrator_operator_catalog_source_name:
description: CatalogSource to subscribe from (created by this role only when catalog_image is set).
type: str
default: redhat-operators
automation_orchestrator_operator_catalog_image:
description: >-
Index image for a custom CatalogSource (e.g. a pre-release build). Empty string
uses the existing catalog_source_name without creating a CatalogSource.
type: str
default: ""
automation_orchestrator_operator_install_plan_approval:
description: >-
Subscription installPlanApproval (Manual or Automatic). With Manual, the role approves
only the initial InstallPlan; once a CSV is installed, upgrades are left pending.
type: str
choices: [Manual, Automatic]
default: Manual
automation_orchestrator_operator_wait_timeout:
description: Seconds to wait for the operator and instance to become ready.
type: int
default: 600
automation_orchestrator_operator_idms_name:
description: Name of the cluster-wide ImageDigestMirrorSet for pre-release images.
type: str
default: idms-aap-27-next
automation_orchestrator_operator_image_digest_mirrors:
description: >-
spec.imageDigestMirrors entries ({source, mirrors}) for the IDMS. Applying a change
triggers a MachineConfigPool rollout. Only needed for pre-release builds; [] skips it.
type: list
elements: dict
default: []
automation_orchestrator_operator_mcp_wait_timeout:
description: Seconds to wait for the MachineConfigPool rollout after the IDMS changes.
type: int
default: 1800
automation_orchestrator_operator_app_namespace:
description: >-
Namespace for the AutomationOrchestrator instance. Exactly one CR is allowed per namespace.
Defaults to the same namespace as the operator.
type: str
default: "{operator_namespace}"
automation_orchestrator_operator_instance_name:
description: Name of the AutomationOrchestrator CR.
type: str
default: automation-orchestrator
automation_orchestrator_operator_postgres_host:
description: PostgreSQL host shared by the backend and Temporal databases.
type: str
default: orchestrator-postgres-rw
automation_orchestrator_operator_postgres_port:
description: PostgreSQL port.
type: int
default: 5432
automation_orchestrator_operator_postgres_ssl_mode:
description: PostgreSQL SSL mode (disable, allow, prefer, require, verify-ca, verify-full).
type: str
default: verify-ca
automation_orchestrator_operator_postgres_ca_cert_secret:
description: >-
Name of a pre-existing Secret (key ca.crt) with the PostgreSQL server CA certificate.
Required when sslMode is verify-ca or verify-full.
type: str
default: orchestrator-postgres-ca
automation_orchestrator_operator_backend_db_secret_name:
description: Name of the pre-existing Secret with the backend database credentials.
type: str
default: orchestrator-postgres-secret
automation_orchestrator_operator_temporal_db_secret_name:
description: Name of the pre-existing Secret with the Temporal database credentials.
type: str
default: temporal-postgres-secret
automation_orchestrator_operator_ingress_type:
description: External access type (Route on OpenShift, Ingress on AKS, or None).
type: str
default: Route
automation_orchestrator_operator_ingress_host:
description: Custom hostname for external access. Leave unset to use the operator's auto-generated hostname.
type: str
default: ""
automation_orchestrator_operator_ingress_annotations:
description: Annotations applied to the generated Route/Ingress resource.
type: dict
default: {}
automation_orchestrator_operator_ingress_tls_secret_name:
description: Name of a pre-existing kubernetes.io/tls Secret. Only used when ingress_type is Ingress.
type: str
default: ""
automation_orchestrator_operator_image_pull_secrets:
description: List of {name} references to Secrets used to pull component workload images.
type: list
elements: dict
default: []
automation_orchestrator_operator_backend:
description: Passthrough overrides (replicas, resources, affinity, tolerations, nodeSelector) for spec.backend.
type: dict
default: {}
automation_orchestrator_operator_ui:
description: Passthrough overrides for spec.ui.
type: dict
default: {}
automation_orchestrator_operator_worker:
description: Passthrough overrides for spec.worker.
type: dict
default: {}
automation_orchestrator_operator_background_worker:
description: >-
Passthrough overrides for spec.backgroundWorker. Note: replicas has no effect —
the operator always manages this component via an HPA.
type: dict
default: {}
automation_orchestrator_operator_redis:
description: Passthrough overrides for spec.redis.
type: dict
default: {}
automation_orchestrator_operator_temporal_server:
description: Passthrough overrides for spec.temporal.server.
type: dict
default: {}
automation_orchestrator_operator_extra_spec:
description: >-
Arbitrary dict recursively merged into the generated CR spec last — escape hatch for
fields not otherwise exposed (fileStorage, otel, tls, secrets, workflowHttpRequestAllowedHosts, ...).
type: dict
default: {}
automation_orchestrator_operator_no_log:
description: Set to false to disable no_log and expose secret values in task output. Never set false in shared environments.
type: bool
default: true

18
roles/automation_orchestrator_operator/meta/main.yml Normal file
View File

@@ -0,0 +1,18 @@
---
galaxy_info:
author: ptoal
description: Install Automation Orchestrator via its OpenShift/AKS OLM operator
license: MIT
min_ansible_version: "2.16"
platforms:
- name: GenericLinux
versions:
- all
galaxy_tags:
- openshift
- aap
- operator
- olm
- ansible
dependencies: []

63
roles/automation_orchestrator_operator/tasks/image_mirrors.yml Normal file
View File

@@ -0,0 +1,63 @@
---
# Apply the ImageDigestMirrorSet that redirects pre-release AAP 2.7 images from
# registry.redhat.io to quay.io, then wait for the resulting MachineConfigPool
# rollout (matches https://github.com/ansible/aapctl scripts/create-catalogsources.sh).
#
# The IDMS is cluster-wide: it affects every digest pull from the source repos,
# not just Automation Orchestrator. The API may be briefly unavailable during the
# rollout on SNO, so the waits tolerate failed reads and keep retrying.
- name: Read MachineConfigPools before applying IDMS
kubernetes.core.k8s_info:
api_version: machineconfiguration.openshift.io/v1
kind: MachineConfigPool
register: __automation_orchestrator_operator_mcp_before
- name: Create ImageDigestMirrorSet for pre-release images
kubernetes.core.k8s:
state: present
definition:
apiVersion: config.openshift.io/v1
kind: ImageDigestMirrorSet
metadata:
name: "{{ automation_orchestrator_operator_idms_name }}"
spec:
imageDigestMirrors: "{{ automation_orchestrator_operator_image_digest_mirrors }}"
register: __automation_orchestrator_operator_idms
# Without this, the Updated wait below could pass on the pools' pre-IDMS state
# before the MCO has rendered the new MachineConfig.
- name: Wait for MCO to render new MachineConfigs
kubernetes.core.k8s_info:
api_version: machineconfiguration.openshift.io/v1
kind: MachineConfigPool
register: __automation_orchestrator_operator_mcp
until: >-
(__automation_orchestrator_operator_mcp.resources | default([]) | length) > 0 and
(__automation_orchestrator_operator_mcp.resources
| map(attribute='spec.configuration.name')
| intersect(__automation_orchestrator_operator_mcp_before.resources | map(attribute='spec.configuration.name'))
| length) == 0
retries: "{{ __automation_orchestrator_operator_mcp_wait_retries }}"
delay: 10
when: __automation_orchestrator_operator_idms is changed
# Always runs, so a re-run also catches a rollout interrupted on a previous run.
- name: Wait for MachineConfigPool rollout to complete
kubernetes.core.k8s_info:
api_version: machineconfiguration.openshift.io/v1
kind: MachineConfigPool
register: __automation_orchestrator_operator_mcp
until: >-
(__automation_orchestrator_operator_mcp.resources | default([]) | length) > 0 and
(__automation_orchestrator_operator_mcp.resources | map(attribute='spec.configuration.name') | list) ==
(__automation_orchestrator_operator_mcp.resources | map(attribute='status.configuration.name', default='') | list) and
(__automation_orchestrator_operator_mcp.resources
| map(attribute='status.conditions', default=[])
| map('selectattr', 'type', '==', 'Updated')
| map('selectattr', 'status', '==', 'True')
| map('list')
| reject('equalto', [])
| list | length) == (__automation_orchestrator_operator_mcp.resources | length)
retries: "{{ __automation_orchestrator_operator_mcp_wait_retries }}"
delay: 10

271
roles/automation_orchestrator_operator/tasks/main.yml Normal file
View File

@@ -0,0 +1,271 @@
---
# Install Automation Orchestrator via its OpenShift OLM operator.
#
# Automation Orchestrator is bring-your-own-PostgreSQL: this role only creates the
# OperatorGroup/Subscription and the AutomationOrchestrator CR — it references
# existing K8s Secrets (keys: database/username/password, or host/port/database/
# username/password for CNPG's basic-auth secrets) rather than creating them.
# Pair with the cloudnativepg_operator role (defaults match its secret names) or
# point postgres_* variables at a customer-managed PostgreSQL instance.
#
# Modeled on https://github.com/ansible/aapctl (internal/install/automationorchestrator)
# and https://github.com/automation-nexus/automation-orchestrator-operator.
# With Manual install-plan approval (the default) this role approves the initial
# InstallPlan itself; later upgrade InstallPlans are left for manual approval.
#
# All tasks are idempotent (kubernetes.core.k8s state: present).
- name: Verify PostgreSQL host is set
ansible.builtin.assert:
that:
- automation_orchestrator_operator_postgres_host | length > 0
fail_msg: >-
automation_orchestrator_operator_postgres_host must be set. Automation Orchestrator is
bring-your-own-PostgreSQL — either run the cloudnativepg_operator role first (its defaults
match this role's) or point this at a customer-managed PostgreSQL instance.
# ------------------------------------------------------------------
# Step 0: Mirror pre-release AAP 2.7 images (IDMS) — triggers an MCP rollout
# ------------------------------------------------------------------
- name: Configure pre-release image mirrors
ansible.builtin.include_tasks: image_mirrors.yml
when: automation_orchestrator_operator_image_digest_mirrors | length > 0
# ------------------------------------------------------------------
# Step 1: Install Automation Orchestrator operator via OLM
# ------------------------------------------------------------------
- name: Create Automation Orchestrator namespace
kubernetes.core.k8s:
state: present
definition:
apiVersion: v1
kind: Namespace
metadata:
name: "{{ automation_orchestrator_operator_operator_namespace }}"
- name: Create Automation Orchestrator app namespace
kubernetes.core.k8s:
state: present
definition:
apiVersion: v1
kind: Namespace
metadata:
name: "{{ automation_orchestrator_operator_app_namespace }}"
when: automation_orchestrator_operator_app_namespace != automation_orchestrator_operator_operator_namespace
- name: Create CatalogSource for Automation Orchestrator
kubernetes.core.k8s:
state: present
definition:
apiVersion: operators.coreos.com/v1alpha1
kind: CatalogSource
metadata:
name: "{{ automation_orchestrator_operator_catalog_source_name }}"
namespace: openshift-marketplace
spec:
sourceType: grpc
image: "{{ automation_orchestrator_operator_catalog_image }}"
displayName: Automation Orchestrator
when: automation_orchestrator_operator_catalog_image | length > 0
# OLM allows only one OperatorGroup per namespace; reuse any existing one
# (e.g. the auto-named group an OperatorHub install creates).
- name: Look up existing OperatorGroups
kubernetes.core.k8s_info:
api_version: operators.coreos.com/v1
kind: OperatorGroup
namespace: "{{ automation_orchestrator_operator_operator_namespace }}"
register: __automation_orchestrator_operator_ogs
- name: Create OperatorGroup for Automation Orchestrator
kubernetes.core.k8s:
state: present
definition:
apiVersion: operators.coreos.com/v1
kind: OperatorGroup
metadata:
name: "{{ automation_orchestrator_operator_name }}"
namespace: "{{ automation_orchestrator_operator_operator_namespace }}"
spec: {}
when: __automation_orchestrator_operator_ogs.resources | length == 0
- name: Subscribe to Automation Orchestrator operator
kubernetes.core.k8s:
state: present
definition:
apiVersion: operators.coreos.com/v1alpha1
kind: Subscription
metadata:
name: "{{ automation_orchestrator_operator_name }}"
namespace: "{{ automation_orchestrator_operator_operator_namespace }}"
spec:
channel: "{{ automation_orchestrator_operator_channel }}"
installPlanApproval: "{{ automation_orchestrator_operator_install_plan_approval }}"
name: "{{ automation_orchestrator_operator_name }}"
source: "{{ automation_orchestrator_operator_catalog_source_name }}"
sourceNamespace: openshift-marketplace
# ------------------------------------------------------------------
# Step 2: Approve the initial InstallPlan (if needed) and wait for the CSV
# ------------------------------------------------------------------
# Once a CSV is installed, pending InstallPlans are upgrades — leave those for
# manual approval rather than approving them on every run.
- name: Wait for OLM to resolve the Subscription
kubernetes.core.k8s_info:
api_version: operators.coreos.com/v1alpha1
kind: Subscription
namespace: "{{ automation_orchestrator_operator_operator_namespace }}"
name: "{{ automation_orchestrator_operator_name }}"
register: __automation_orchestrator_operator_sub
until: >-
__automation_orchestrator_operator_sub.resources | length > 0 and
((__automation_orchestrator_operator_sub.resources[0].status.installedCSV | default('')) | length > 0 or
(__automation_orchestrator_operator_sub.resources[0].status.installPlanRef.name | default('')) | length > 0)
retries: "{{ __automation_orchestrator_operator_wait_retries }}"
delay: 10
- name: Resolve installed CSV name
ansible.builtin.set_fact:
__automation_orchestrator_operator_csv_name: >-
{{ __automation_orchestrator_operator_sub.resources[0].status.installedCSV | default('') }}
- name: Approve the initial InstallPlan
when: __automation_orchestrator_operator_csv_name | length == 0
block:
- name: Read the InstallPlan
kubernetes.core.k8s_info:
api_version: operators.coreos.com/v1alpha1
kind: InstallPlan
namespace: "{{ automation_orchestrator_operator_operator_namespace }}"
name: "{{ __automation_orchestrator_operator_sub.resources[0].status.installPlanRef.name }}"
register: __automation_orchestrator_operator_installplan
- name: Approve the InstallPlan
kubernetes.core.k8s_json_patch:
api_version: operators.coreos.com/v1alpha1
kind: InstallPlan
namespace: "{{ automation_orchestrator_operator_operator_namespace }}"
name: "{{ __automation_orchestrator_operator_sub.resources[0].status.installPlanRef.name }}"
patch:
- op: add
path: /spec/approved
value: true
when: not (__automation_orchestrator_operator_installplan.resources[0].spec.approved | default(false))
- name: Resolve CSV name from the InstallPlan
ansible.builtin.set_fact:
__automation_orchestrator_operator_csv_name: >-
{{ __automation_orchestrator_operator_installplan.resources[0].spec.clusterServiceVersionNames[0] }}
- name: Wait for Automation Orchestrator CSV to succeed
kubernetes.core.k8s_info:
api_version: operators.coreos.com/v1alpha1
kind: ClusterServiceVersion
namespace: "{{ automation_orchestrator_operator_operator_namespace }}"
name: "{{ __automation_orchestrator_operator_csv_name }}"
register: __automation_orchestrator_operator_csv
until: >-
__automation_orchestrator_operator_csv.resources | length > 0 and
__automation_orchestrator_operator_csv.resources[0].status.phase | default('') == 'Succeeded'
retries: "{{ __automation_orchestrator_operator_wait_retries }}"
delay: 10
- name: Wait for AutomationOrchestrator CRD to be available
kubernetes.core.k8s_info:
api_version: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
name: automationorchestrators.aap.ansible.com
register: __automation_orchestrator_operator_crd
until: __automation_orchestrator_operator_crd.resources | length > 0
retries: "{{ __automation_orchestrator_operator_wait_retries }}"
delay: 10
# ------------------------------------------------------------------
# Step 3: Deploy the AutomationOrchestrator instance
# ------------------------------------------------------------------
- name: Build AutomationOrchestrator spec
ansible.builtin.set_fact:
__automation_orchestrator_operator_spec: >-
{{
{
'imagePullSecrets': automation_orchestrator_operator_image_pull_secrets,
'postgres': {
'host': automation_orchestrator_operator_postgres_host,
'port': automation_orchestrator_operator_postgres_port,
'sslMode': automation_orchestrator_operator_postgres_ssl_mode,
'backendDatabase': {'secretRef': {'name': automation_orchestrator_operator_backend_db_secret_name}},
'temporalDatabase': {'secretRef': {'name': automation_orchestrator_operator_temporal_db_secret_name}},
},
'ingress': {
'type': automation_orchestrator_operator_ingress_type,
'annotations': automation_orchestrator_operator_ingress_annotations,
},
'backend': automation_orchestrator_operator_backend,
'ui': automation_orchestrator_operator_ui,
'worker': automation_orchestrator_operator_worker,
'backgroundWorker': automation_orchestrator_operator_background_worker,
'redis': automation_orchestrator_operator_redis,
'temporal': {'server': automation_orchestrator_operator_temporal_server},
}
| combine(
{'postgres': {'caCertSecretRef': {'name': automation_orchestrator_operator_postgres_ca_cert_secret}}} if automation_orchestrator_operator_postgres_ca_cert_secret else {},
recursive=True
)
| combine(
{'ingress': {'host': automation_orchestrator_operator_ingress_host}} if automation_orchestrator_operator_ingress_host else {},
recursive=True
)
| combine(
{'ingress': {'tlsSecretRef': {'name': automation_orchestrator_operator_ingress_tls_secret_name}}}
if (automation_orchestrator_operator_ingress_type == 'Ingress' and automation_orchestrator_operator_ingress_tls_secret_name)
else {},
recursive=True
)
| combine(automation_orchestrator_operator_extra_spec, recursive=True)
}}
- name: Create AutomationOrchestrator instance
kubernetes.core.k8s:
state: present
definition:
apiVersion: aap.ansible.com/v1alpha1
kind: AutomationOrchestrator
metadata:
name: "{{ automation_orchestrator_operator_instance_name }}"
namespace: "{{ automation_orchestrator_operator_app_namespace }}"
spec: "{{ __automation_orchestrator_operator_spec }}"
# ------------------------------------------------------------------
# Step 4: Wait for the instance to be ready
# ------------------------------------------------------------------
- name: Wait for AutomationOrchestrator to be ready
kubernetes.core.k8s_info:
api_version: aap.ansible.com/v1alpha1
kind: AutomationOrchestrator
namespace: "{{ automation_orchestrator_operator_app_namespace }}"
name: "{{ automation_orchestrator_operator_instance_name }}"
register: __automation_orchestrator_operator_status
ignore_errors: true
until: >-
__automation_orchestrator_operator_status.resources is defined and
__automation_orchestrator_operator_status.resources | length > 0 and
(__automation_orchestrator_operator_status.resources[0].status.conditions | default([])
| selectattr('type', '==', 'Ready')
| selectattr('status', '==', 'True') | list | length > 0)
retries: "{{ __automation_orchestrator_operator_wait_retries }}"
delay: 10
# ------------------------------------------------------------------
# Step 5: Display summary
# ------------------------------------------------------------------
- name: Display Automation Orchestrator deployment summary
ansible.builtin.debug:
msg:
- "Automation Orchestrator deployment complete!"
- " Namespace : {{ automation_orchestrator_operator_app_namespace }}"
- " Instance : {{ automation_orchestrator_operator_instance_name }}"
- " Ingress type: {{ automation_orchestrator_operator_ingress_type }}"
- ""
- "Find the UI hostname with: oc get routes -n {{ automation_orchestrator_operator_app_namespace }}"
- "The initial admin password is auto-generated unless spec.secrets.initialAdminPasswordSecretRef is set:"
- " oc get secret {{ automation_orchestrator_operator_instance_name }}-initial-admin-password -n {{ automation_orchestrator_operator_app_namespace }} -o jsonpath='{.data.password}' | base64 -d"

4
roles/automation_orchestrator_operator/vars/main.yml Normal file
View File

@@ -0,0 +1,4 @@
---
# Computed internal variables - do not override
__automation_orchestrator_operator_wait_retries: "{{ (automation_orchestrator_operator_wait_timeout / 10) | int }}"
__automation_orchestrator_operator_mcp_wait_retries: "{{ (automation_orchestrator_operator_mcp_wait_timeout / 10) | int }}"