[patch] Added additional ca.crt field to rsl secret (#1839)

Co-authored-by: Alif Rahi <“alif.rahi@ibm.com”>
Co-authored-by: Jasmin Makwana <jasminmakwana1999@gmail.com>

Author: 3 people

ibm/mas_devops/roles/aiservice_tenant/defaults/main.yml

@@ -66,3 +66,4 @@ aiservice_rsl_secret: "{{ aiservice_tenant_name }}----rsl-secret" # this is igno
 rsl_url: "{{ lookup('env', 'RSL_URL') | default('', true) }}"
 rsl_org_id: "{{ lookup('env', 'RSL_ORG_ID') | default('', true) }}"
 rsl_token: "{{ lookup('env', 'RSL_TOKEN') | default('', true) }}"
+rsl_ca_crt: "{{ lookup('env', 'RSL_CA_CRT') | default('', true) }}"

ibm/mas_devops/roles/aiservice_tenant/tasks/config_rsl/main.yml

@@ -1,14 +1,14 @@
 ---
 - name: "Check if all RSL config values are present"
   ansible.builtin.set_fact:
-    rsl_config_valid: "{{ rsl_url | length > 0 and rsl_org_id | length > 0 and rsl_token | length > 0 }}"
+    rsl_config_valid: "{{ rsl_url | length > 0 and rsl_org_id | length > 0 and rsl_token | length > 0 and rsl_ca_crt | length > 0 }}"
 
-- name: "Set RSL Secret name"
+- name: "Unset RSL Secret name"
   ansible.builtin.set_fact:
     aiservice_rsl_secret: ""
   when: not rsl_config_valid
 
-- name: "warning about RSL config being incomplete"
+- name: "Warning about RSL config being incomplete"
   ansible.builtin.debug:
     msg: "WARNING: RSL config is incomplete. Skipping RSL secret creation."
   when: not rsl_config_valid

ibm/mas_devops/roles/aiservice_tenant/templates/rsl/rsl-secret.yml.j2

@@ -17,3 +17,4 @@ data:
   rsl_org_id: "{{ rsl_org_id | b64encode }}"
   rsl_url: "{{ rsl_url | b64encode }}"
   rsl_token: "{{ rsl_token | b64encode }}"
+  ca.crt: "{{ rsl_ca_crt | b64encode }}"