130.2_playbook_add_k8s_policy_and_rule_v3.yaml

# Example Playbok to Add Kubernetes Cluster to PPDM
- name: Add K8S to PPDM
  hosts: localhost
  gather_facts: no
  connection: local
  vars_files:
    - ./vars/main.yml
    - ./templates/k8s_policy_template_v3.yaml
  vars:
    k8s_policy_name: K8S_Protection 3hrs 3days
  tasks:
    - name: Checking Required Variable ppdm_fqdn
      fail:
        msg: "We do not have ppdm_fqdn set !"
      when: (ppdm_fqdn is not defined) or (ppdm_fqdn|length <= 8)
    - name: Checking Required Variables
      fail:
        msg: "We do not have ppdm_new_password  set !"
      when: (ppdm_new_password is not defined) or (ppdm_new_password|length == 0)
    - name: Checking Required Variable ddve_fqdn
      fail:
        msg: "We do not have ddve_fqdn  set !"
      when: (ddve_fqdn is not defined) or (ddve_fqdn|length == 0)
    - name: Setting Base URL
      set_fact:
        ppdm_baseurl: "https://{{ ppdm_fqdn | regex_replace('^https://') }}"
    - name: Get PPDM Token for https://{{ ppdm_fqdn | regex_replace('^https://') }}
      include_role:
        name: get_ppdm_token
      vars:
        ppdm_password: "{{ ppdm_new_password }}"
    - debug:
        msg: "{{ access_token }}"
        verbosity: 1
      name: do we have a token ?
    - name: Get Protection Policy with filter
      vars:
        filter: 'name eq "{{ k8s_policy_name }}"'
      include_role:
        name: get_ppdm_protection_policy
    - set_fact:
        protection_policy: "{{ protection_policy[0] }}"
      when: protection_policy[0] is defined
    - debug:
        msg: "{{ protection_policy }}"
        verbosity: 0

    - name: Get DataDomain Storage Systems
      include_role:
        name: get_ppdm_storage-systems
      vars:
        filter: type eq "DATA_DOMAIN_SYSTEM" and details.dataDomain.preferredInterfaces.ipAddress eq "{{ ddve_fqdn }}"
      when: protection_policy.id is not defined

    - name: Create New Protection Policy
      vars:
        name: "{{ k8s_policy_name }}"
        ppdm_api_ver: /api/v3
        description: "Demo K8s Policy for Bob 2024"
        debugEnabled: "false"
        storageSystemId: "{{ storagesystems[0].id }}"
        preferredInterfaceId: "{{ storagesystems[0].details.dataDomain.preferredInterfaces[0].networkName }}"
        new_protection_policy: "{{ data_template }}"
      include_role:
        name: new_ppdm_protection_policy
      when: protection_policy.id is not defined and (storagesystems[0] is defined)

    - debug:
        msg: "{{ protection_policy }}"
        verbosity: 0
      when: protection_policy is defined #and (protection_policy.id is not defined)

    - name: Get DataDomain Storage Systems
      include_role:
        name: get_ppdm_storage-systems
      vars:
        filter: type eq "DATA_DOMAIN_SYSTEM" and details.dataDomain.preferredInterfaces.ipAddress eq "{{ ddve_fqdn }}"
      when: protection_policy.id is not defined


    - debug:
        msg: "{{ protection_policy }}"
        verbosity: 0
      when: protection_policy is defined #and (protection_policy.id is not defined)

    - name: Get Protection rule with filter
      vars:
        filter: 'name eq "Kubernetes Namespace Label Rule {{ ppdm_rule }}"'
      #      filter: 'name eq "Kubernetes Namespace Label Rule ppdm_policy=PPDM_GOLD"'
      include_role:
        name: get_ppdm_protection_rules
      when: protection_policy.id is defined
    - set_fact:
        protection_rule: "{{ protection_rule[0] }}"
      when: protection_rule[0].id is defined
    - debug:
        msg: "{{ protection_rule }}"
        verbosity: 0
      when: protection_rule is defined
    - name: Create New Protection Rule
      vars:
        new_protection_rule:
          name: Kubernetes Namespace Label Rule {{ ppdm_rule }}
          category: COMPOUND
          rules:
            - category: PRIMITIVE
              conditions:
                - assetAttributeName: userTags
                  operator: EQUALS
                  assetAttributeValue: "{{ ppdm_rule }}"
                  assetAttributeValues:
                    - "{{ ppdm_rule }}"
              conditionConnector: AND
              logicalOperator: AND
              inventorySourceType: KUBERNETES
              priority: -1
              tenant:
                id: 00000000-0000-4000-a000-000000000000
          action: MOVE_TO_GROUP
          actionResult: "{{ protection_policy.id }}"
          conditions:
            - assetAttributeName: userTags
              operator: EQUALS
              assetAttributeValue: "{{ ppdm_rule }}"
              assetAttributeValues:
                - "{{ ppdm_rule }}"
          conditionConnector: OR
          logicalOperator: OR
          inventorySourceType: KUBERNETES
          priority: 1
          tenant:
            id: 00000000-0000-4000-a000-000000000000
      include_role:
        name: new_ppdm_protection_rule
      when: protection_policy.id is defined and protection_rule.id is not defined
    - debug:
        msg: "{{ protection_rule }}"
        verbosity: 0
      when: protection_rule is defined
    #    when: protection_policy.id is defined or (protection_rule is not defined and protection_policy[0].id is defined )
    - name: Run Protection Rule
      vars:
        inventorySourceType: "{{ protection_rule.inventorySourceType }}"
      include_role:
        name: run_ppdm_protection_rule
      when: protection_rule.inventorySourceType is defined
    - debug:
        msg: "{{ protection_rule_run }}"
        verbosity: 1
      when: protection_rule.inventorySourceType is defined