Merge branch '60-use-le-staging-for-ci' into 'master'

Resolve "Use LE staging for CI"

Closes #60

See merge request openappstack/bootstrap!28

ansible/group_vars/cluster/settings.yml.example

@@ -6,4 +6,12 @@ domain: "example.com"
 admin_email: "admin@example.com"
 # Label of this deployment.
 release_name: "test"
+# Keycloak administrator password. If you do not change this value, it gets
+# generated and stored in ./secrets/keycloak_admin_password. You can also choose
+# your own password and fill it in here instead.
 keycloak_password: "{{ lookup('password', './secrets/keycloak_admin_password') }}"
+# If this is "true" TLS certificates will be requested at the Let's Encrypt
+# staging server. If this is "false", you use Let's Encrypt's production server.
+# Note that LE's production server has stricter rate limits, so set this to
+# "true" when you are testing something.
+acme_staging: false

ansible/roles/configure_helmfile/templates/local.yaml.j2

@@ -7,3 +7,5 @@ adminEmail: "{{ admin_email }}"
 # A label for the application releases. If you have multiple deployments
 # this allows you to distinguish them.
 releaseName: "{{ release_name }}"
+# Use Let's Encrypt staging server. Set this to `"false"` to use the live server
+acmeStaging: "{{ acme_staging }}"

test/ci-bootstrap.py

@@ -177,6 +177,7 @@ if __name__ == "__main__":
     settings['ip_address'] = ip
     settings['domain'] = name + '.ci.openappstack.net'
     settings['admin_email'] = "admin@{0}".format(settings['domain'])
+    settings['acme_staging'] = "true"
 
     if not os.path.exists('./group_vars'):
         os.mkdir('./group_vars')