dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity

test-1

Dustin 2020-03-18 11:42:53 -05:00
parent 744206fd03
commit 71b84cfe81
1 changed files with 12 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
vars/applyConfigPolicy.groovy
View File

@ -18,9 +18,14 @@ def call(rw_limit, stages) {
withEnv(["KRB5CCNAME=${WORKSPACE}/.krb5cc"]) { withEnv(["KRB5CCNAME=${WORKSPACE}/.krb5cc"]) {
try { try {
stageKinit() stageKinit()
stageRemountRW(rw_limit) withCredentials([file(
generateStages(stages) credentialsId: 'vault-jenkins@pyrocufflink.blue',
stageRemountRO(rw_limit) variable: 'SUDO_PASS_FILE'
)]) {
stageRemountRW(rw_limit)
generateStages(stages)
stageRemountRO(rw_limit)
}
} catch (err) { } catch (err) {
postFailure(err) postFailure(err)
} finally { } finally {
@ -41,12 +46,6 @@ def stageKinit() {
)]) { )]) {
sh 'kinit -kt "${KEYTAB}" jenkins@PYROCUFFLINK.BLUE' sh 'kinit -kt "${KEYTAB}" jenkins@PYROCUFFLINK.BLUE'
} }
withCredentials([file(
credentialsId: 'vault-jenkins@pyrocufflink.blue',
variable: 'SUDO_PASS_FILE'
)]) {
sh 'cp "${SUDO_PASS_FILE}" group_vars/pyrocufflink/sudo-pass'
}
} }
} }
@ -60,7 +59,8 @@ def stageRemountRW(limit) {
vaultCredentialsId: 'ansible-vault', vaultCredentialsId: 'ansible-vault',
extraVars: [ extraVars: [
remount_state: 'rw', remount_state: 'rw',
] ],
extras: '-e@"${SUDO_PASS_FILE}"'
} }
} }
@ -72,7 +72,7 @@ def generateStages(stages) {
playbook: playbook, playbook: playbook,
become: true, become: true,
vaultCredentialsId: 'ansible-vault', vaultCredentialsId: 'ansible-vault',
extras: '--diff' extras: '--diff -e@"${SUDO_PASS_FILE}"'
} }
} }
} }
@ -85,13 +85,12 @@ def stageRemountRO(limit) {
limit: limit, limit: limit,
become: true, become: true,
vaultCredentialsId: 'ansible-vault', vaultCredentialsId: 'ansible-vault',
extras: '--diff' extras: '--diff -e@"${SUDO_PASS_FILE}"'
} }
} }
def postCleanup() { def postCleanup() {
sh 'kdestroy' sh 'kdestroy'
sh 'find . -name sudo-pass -delete'
} }
def postFailure(err) { def postFailure(err) {