This is an internal documentation. There is a good chance you’re looking for something else. See Disclaimer.

Ansible: Implementation Status

Implementation status of the automation via Ansible. Unless otherwise noted, this list concerns application running on OpenShift only.

Category	Resource	Create/ Manage	Delete	Notes
DNS	A/AAAA/CNAME records			No Public API
DB (main)	user	x	x
	DB	x	x
	app config	x	n/a
DB (history)	user	x	x
	DB	x	x
	schema	x	n/a
	app config	x	n/a
Solr (deprecated)	user	²	²	Account shared by all installations. Being Replaced by Elasticsearch.
	core	x	x
	app config	x	n/a
Elasticsearch	user	x	x
	index	x	x
	app config	x	n/a
Openshift/ Kubernetes	project	x	x
	config	x	n/a
	routes / ingress	x	x¹	Including DNS verification
	reCaptcha	x	n/a
	ACME	x	n/a	Let’s Encrypt integration
TeamCity	cust. project	x	x
	build config	x	x
	parameters	x	n/a
Monitoring		x	x
S3	user	x	x
	bucket	x	x
	policy	x	n/a	Grant access for developers
	app config	x	n/a
Mail	configure mx	x	n/a
	default sender	x	n/a	Fallback email addressess
	allowed sender	x	n/a	Including SPF and DKIM verification

¹ Ingresses managed by Ansible have the annotation ‘tocco.ansible-managed’ set to ‘true. Ansible

will not remove any ingresses that are missing this annotation. Hence, manually created

ingresses as well as dynamically created ingresses are never removed by Ansible.

² No dedicated user is created. Rather, one user account is shared and configured via Ansible.