uninstall.yaml

- name: Désinstallation du socle DSO
  hosts: localhost
  gather_facts: false
  vars:
    grafana_dashboards:
      - argo-cd
      - gitlab-ci-pipelines
      - gitlab-gitaly
      - gitlab-runner
      - harbor
      - keycloak
      - nexus
      - sonarqube
      - vault

  tasks:

    - name: "Récupération de la conf socle à partir de la dsc conf-dso (défaut)"
      kubernetes.core.k8s_info:
        kind: dsc
        name: conf-dso
        api_version: cloud-pi-native.fr/v1alpha
      register: socle_config
      tags:
        - always

    - name: "Récupération de la conf socle à partir de l'extra var dsc_cr quand définie"
      kubernetes.core.k8s_info:
        kind: dsc
        name: "{{ dsc_cr }}"
        api_version: cloud-pi-native.fr/v1alpha
      register: socle_config_custom
      when: dsc_cr is defined
      tags:
        - always

    - name: "Vérification de socle_config_custom et arrêt si vide"
      when: (dsc_cr is defined) and (socle_config_custom.resources | length == 0)
      tags:
        - always
      block:
        - name: Warning message
          ansible.builtin.debug:
            msg:
              - "Attention ! Vous avez lancé le playbook avec l'option '-e dsc_cr={{ dsc_cr }}'"
              - "mais la ressource dsc nommée '{{ dsc_cr }}' est vide ou inexistante côté cluster !"
              - ""
              - "Vérifiez que vous ne vous êtes pas trompé de nom et que la ressource existe bien, via la commande suivante :"
              - ""
              - " kubectl get dsc {{ dsc_cr }} "
              - ""
              - "Si elle n'est pas trouvée (not found), listez simplement les resources dsc actuellement déclarées :"
              - ""
              - " kubectl get dsc "
              - ""
              - "Puis relancez le playbook avec une resource dsc existante."
              - ""
              - "Rappel : le présent playbook lancé seul, sans extra vars, procédera à des désinstallations d'outils,"
              - "ou de la chaîne DSO complète, en s'appuyant sur les namespaces déclarés dans le dsc par défaut (conf-dso)."

        - name: Exit playbook
          ansible.builtin.meta: end_play

    - name: "Déclaration du fact socle_config quand dsc_cr est définie et non vide"
      ansible.builtin.set_fact:
        socle_config: "{{ socle_config_custom }}"
      when: (socle_config_custom is not skipped) and (socle_config_custom.resources | length > 0)
      tags:
        - always

    - name: "Déclaration du fact dsc_name"
      ansible.builtin.set_fact:
        dsc_name: "{{ socle_config.resources[0].metadata.name }}"
      tags:
        - always

    - name: "Déclaration du fact dsc"
      ansible.builtin.set_fact:
        dsc: "{{ socle_config.resources[0] }}"
      tags:
        - always

    - name: "Déclaration des facts config et releases"
      ansible.builtin.set_fact:
        dsc_default_config: "{{ lookup('ansible.builtin.file', './roles/socle-config/files/config.yaml') | from_yaml }}"
        dsc_default_releases: "{{ lookup('ansible.builtin.file', './roles/socle-config/files/releases.yaml') | from_yaml }}"
      tags:
        - always

    - name: "Combinaison des nouveaux facts avec le fact dsc"
      ansible.builtin.set_fact:
        dsc: "{{ dsc_default_releases | combine(dsc_default_config, recursive=True) | combine(dsc, recursive=True) }}"
      tags:
        - always

    - name: "Mise à jour du fact dsc"
      ansible.builtin.set_fact:
        dsc: "{{ dsc.spec }}"
      tags:
        - always

    - name: Suppression de cert-manager
      kubernetes.core.helm:
        name: cert-manager
        release_namespace: cert-manager
        state: absent
        wait: true
      tags:
        - never
        - cert-manager

    - name: "Suppression du namespace cert-manager"
      kubernetes.core.k8s:
        state: absent
        kind: Namespace
        name: cert-manager
      tags:
        - never
        - cert-manager

    - name: "Désinstallation de Kubed"
      kubernetes.core.helm:
        name: kubed
        chart_ref: appscode/kubed
        release_namespace: openshift-infra
        state: absent
        wait: true
      tags:
        - never
        - confSyncer
        - kubed

    - name: "Suppression de l'instance CloudNativePG"
      kubernetes.core.helm:
        name: cloudnative-pg
        release_namespace: "{{ dsc.cloudnativepg.namespace }}"
        release_state: absent
        wait: true
      tags:
        - never
        - cnpg
        - cloudnativepg

    - name: "Suppression du namespace CloudNativePG"
      kubernetes.core.k8s:
        state: absent
        kind: Namespace
        name: "{{ dsc.cloudnativepg.namespace }}"
      tags:
        - never
        - cnpg
        - cloudnativepg

    - name: "Suppression de l'instance Keycloak"
      kubernetes.core.helm:
        name: keycloak
        release_namespace: "{{ dsc.keycloak.namespace }}"
        state: absent
        wait: true
      tags:
        - keycloak

    - name: "Suppression du namespace Keycloak"
      kubernetes.core.k8s:
        state: absent
        kind: Namespace
        name: "{{ dsc.keycloak.namespace }}"
      tags:
        - keycloak

    - name: "Suppression de la ClusterPolicy replace-kubed"
      kubernetes.core.k8s:
        state: absent
        kind: ClusterPolicy
        name: replace-kubed
      tags:
        - never
        - kyverno

    - name: "Suppression du namespace Kyverno"
      kubernetes.core.k8s:
        state: absent
        kind: Namespace
        name: "{{ dsc.kyverno.namespace }}"
      tags:
        - never
        - kyverno

    - name: "Suppression des ValidatingWebhookConfigurations Kyverno"
      kubernetes.core.k8s:
        api_version: admissionregistration.k8s.io/v1
        state: absent
        kind: ValidatingWebhookConfiguration
        label_selectors:
          - "webhook.kyverno.io/managed-by=kyverno"
      tags:
        - never
        - kyverno

    - name: "Suppression des MutatingWebhookConfigurations Kyverno"
      kubernetes.core.k8s:
        api_version: admissionregistration.k8s.io/v1
        state: absent
        kind: MutatingWebhookConfiguration
        label_selectors:
          - "webhook.kyverno.io/managed-by=kyverno"
      tags:
        - never
        - kyverno

    - name: "Suppression des CustomResourceDefinitions Kyverno"
      kubernetes.core.k8s:
        api_version: apiextensions.k8s.io/v1
        state: absent
        kind: CustomResourceDefinition
        label_selectors:
          - "app.kubernetes.io/instance=kyverno"
      tags:
        - never
        - kyverno

    - name: "Suppression du namespace Nexus"
      kubernetes.core.k8s:
        state: absent
        kind: Namespace
        name: "{{ dsc.nexus.namespace }}"
      tags:
        - nexus

    - name: "Suppression de l'ancien mot de passe Nexus"
      kubernetes.core.k8s:
        kind: Secret
        name: dso-config
        namespace: "{{ dsc.console.namespace }}"
        state: patched
        definition:
          data:
            NEXUS_ADMIN_PASSWORD:
      tags:
        - nexus

    - name: "Suppression du namespace Sonarqube"
      kubernetes.core.k8s:
        state: absent
        kind: Namespace
        name: "{{ dsc.sonarqube.namespace }}"
      tags:
        - sonarqube

    - name: "Suppression du GitLab Runner"
      kubernetes.core.helm:
        name: gitlab-runner
        release_namespace: "{{ dsc.gitlab.namespace }}"
        release_state: absent
        wait: true
      tags:
        - gitlab-runner
        - gitlab

    - name: "Suppression de l'instance GitLab"
      kubernetes.core.k8s:
        state: absent
        api_version: apps.gitlab.com/v1beta1
        kind: GitLab
        name: gitlab
        namespace: "{{ dsc.gitlab.namespace }}"
        wait: true
      tags:
        - gitlab

    - name: "Suppression du namespace GitLab"
      kubernetes.core.k8s:
        state: absent
        kind: Namespace
        name: "{{ dsc.gitlab.namespace }}"
      tags:
        - gitlab

    - name: "Suppression de l'opérateur GitLab"
      kubernetes.core.helm:
        name: gitlab-operator
        release_namespace: "{{ dsc.gitlabOperator.namespace }}"
        release_state: absent
        wait: true
      tags:
        - never
        - gitlab-operator

    - name: "Suppression du namespace GitLab Operator"
      kubernetes.core.k8s:
        state: absent
        kind: Namespace
        name: "{{ dsc.gitlabOperator.namespace }}"
      tags:
        - never
        - gitlab-operator

    - name: "Suppression gitlab-validating-webhook-configuration"
      kubernetes.core.k8s:
        state: absent
        kind: ValidatingWebhookConfiguration
        name: gitlab-validating-webhook-configuration
      tags:
        - never
        - gitlab-operator

    - name: "Suppression du namespace Vault"
      kubernetes.core.k8s:
        state: absent
        kind: Namespace
        name: "{{ dsc.vault.namespace }}"
      tags:
        - vault

    - name: "Suppression de l'intance Argo CD"
      kubernetes.core.helm:
        name: "{{ dsc_name }}"
        release_namespace: "{{ dsc.argocd.namespace }}"
        release_state: absent
        wait: true
      tags:
        - argocd
        - argo
        - gitops

    - name: "Suppression du namespace ArgoCD"
      kubernetes.core.k8s:
        state: absent
        kind: Namespace
        name: "{{ dsc.argocd.namespace }}"
      tags:
        - argocd
        - argo
        - gitops

    - name: "Suppression Argo CD OpenShift scc crb"
      kubernetes.core.k8s:
        state: absent
        kind: ClusterRoleBinding
        name: "{{ dsc_name }}-argocd-system:openshift:scc:privileged"
        api_version: rbac.authorization.k8s.io/v1
      tags:
        - argocd
        - argo
        - gitops

    - name: "Suppression du namespace Harbor"
      kubernetes.core.k8s:
        state: absent
        kind: Namespace
        name: "{{ dsc.harbor.namespace }}"
      tags:
        - harbor
        - registry

    - name: "Suppression du namespace Console"
      kubernetes.core.k8s:
        state: absent
        kind: Namespace
        name: "{{ dsc.console.namespace }}"
      tags:
        - console-dso
        - console

    - name: "Suppression des dashboards Grafana"
      kubernetes.core.k8s:
        api_version: grafana.integreatly.org/v1beta1
        state: absent
        kind: GrafanaDashboard
        namespace: "{{ dsc.grafana.namespace }}"
        name: "{{ dsc_name }}-{{ item }}"
      loop: "{{ grafana_dashboards }}"
      tags:
        - grafana-dashboards

    - name: Initialisation du fact grafana_label
      ansible.builtin.set_fact:
        grafana_label: "{{ dsc_name }}-prod"
      tags:
        - grafana-datasource

    - name: Paramétrage du fact grafana_label
      when: dsc.global.environment != 'production'
      ansible.builtin.set_fact:
        grafana_label: "{{ dsc_name }}-horsprod"
      tags:
        - grafana-datasource

    - name: "Suppression de la datasource Grafana prometheus par défaut"
      kubernetes.core.k8s:
        api_version: grafana.integreatly.org/v1beta1
        state: absent
        kind: GrafanaDatasource
        namespace: "{{ dsc.grafana.namespace }}"
        name: datasource-prom-{{ grafana_label }}
      tags:
        - grafana-datasource

    - name: "Suppression du ClusterRoleBinding pour le service account Grafana"
      kubernetes.core.k8s:
        api_version: rbac.authorization.k8s.io/v1
        state: absent
        kind: ClusterRoleBinding
        name: "{{ dsc.grafana.namespace }}-view"
      tags:
        - grafana

    - name: Initialisation du fact grafana_name
      ansible.builtin.set_fact:
        grafana_name: "{{ dsc_name }}-prod"
      tags:
        - grafana

    - name: Paramétrage du fact grafana_name
      when: dsc.global.environment != 'production'
      ansible.builtin.set_fact:
        grafana_name: "{{ dsc_name }}-horsprod"
      tags:
        - grafana

    - name: "Suppression de l'ingress Grafana"
      kubernetes.core.k8s:
        api_version: networking.k8s.io/v1
        state: absent
        kind: Ingress
        name: "{{ grafana_name }}"
        namespace: "{{ dsc.grafana.namespace }}"
      tags:
        - grafana

    - name: "Suppression de l'instance Grafana"
      kubernetes.core.k8s:
        api_version: grafana.integreatly.org/v1beta1
        state: absent
        kind: Grafana
        name: "{{ grafana_name }}"
        namespace: "{{ dsc.grafana.namespace }}"
      tags:
        - grafana

    - name: "Suppression de l'opérateur Grafana"
      kubernetes.core.helm:
        name: grafana-operator
        release_namespace: "{{ dsc.grafanaOperator.namespace }}"
        release_state: absent
        wait: true
      tags:
        - never
        - grafana-operator

    - name: "Suppression du ClusterRole de Grafana Operator"
      kubernetes.core.k8s:
        api_version: rbac.authorization.k8s.io/v1
        state: absent
        kind: ClusterRole
        label_selectors:
          - "app.kubernetes.io/name=grafana-operator"
      tags:
        - never
        - grafana-operator

    - name: "Suppression du ClusterRoleBinding de Grafana Operator"
      kubernetes.core.k8s:
        api_version: rbac.authorization.k8s.io/v1
        state: absent
        kind: ClusterRoleBinding
        label_selectors:
          - "app.kubernetes.io/name=grafana-operator"
      tags:
        - never
        - grafana-operator

    - name: "Suppression du namespace Grafana Operator"
      kubernetes.core.k8s:
        state: absent
        kind: Namespace
        name: "{{ dsc.grafanaOperator.namespace }}"
      tags:
        - never
        - grafana-operator