pipeline.yml

resources:
- name: config-repo
  type: git
  source:
    uri: ((git_repo_uri))
    branch: ((git_repo_branch))
    # only watch for changes in config directory
    paths: ["ci", "((config_dir))"]
- name: time-trigger
  type: time
  source:
    interval: ((time-trigger))

jobs:
- name: create-orgs
  plan:
  - get: config-repo
    trigger: true
  - task: create-orgs
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: create-orgs

- name: shared-domains
  plan:
  - get: config-repo
    trigger: true
  - task: shared-domains
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: shared-domains

- name: create-security-groups
  plan:
  - get: config-repo
    trigger: true
  - task: create-security-groups
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: create-security-groups

- name: assign-default-security-groups
  plan:
  - get: config-repo
    trigger: true
    passed: [create-security-groups]
  - task: assign-default-security-groups
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: assign-default-security-groups

- name: delete-orgs
  plan:
  - get: config-repo
    trigger: true
    passed: [create-orgs]
  - get: time-trigger
    trigger: true
  - task: delete-orgs
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: delete-orgs

- name: update-orgs-metadata
  plan:
  - get: config-repo
    passed: [create-orgs]
    trigger: true
  - task: update-orgs-metadata
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: update-orgs-metadata

- name: create-org-private-domains
  plan:
  - get: config-repo
    passed: [create-orgs]
    trigger: true
  - task: create-org-private-domains
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: create-org-private-domains

- name: service-access
  plan:
  - get: config-repo
    passed: [create-orgs]
    trigger: true
  - task: service-access
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: service-access

- name: share-org-private-domains
  plan:
  - get: config-repo
    passed: [create-org-private-domains]
    trigger: true
  - task: share-org-private-domains
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: share-org-private-domains

- name: create-spaces
  plan:
  - get: config-repo
    passed: [create-orgs, update-org-users]
    trigger: true
  - task: create-spaces
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: create-spaces

- name: delete-spaces
  plan:
  - get: config-repo
    passed: [create-orgs, create-spaces]
    trigger: true
  - get: time-trigger
    trigger: true
  - task: delete-spaces
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: delete-spaces

- name: update-spaces
  plan:
  - get: config-repo
    passed: [create-spaces]
    trigger: true
  - get: time-trigger
    trigger: true
  - task: update-spaces
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: update-spaces

- name: update-spaces-metadata
  plan:
  - get: config-repo
    passed: [create-spaces]
    trigger: true
  - task: update-spaces-metadata
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: update-spaces-metadata

- name: update-space-users
  plan:
  - get: config-repo
    passed: [create-spaces]
    trigger: true
  - get: time-trigger
    trigger: true
  - task: update-space-users
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LDAP_USER: ((ldap_user))
      LDAP_PASSWORD: ((ldap_password))
      LDAP_SERVER: ((ldap_server))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: update-space-users

- name: update-space-quotas
  plan:
  - get: config-repo
    passed: [create-spaces]
    trigger: true
  - task: update-space-quotas
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: update-space-quotas

- name: update-space-security-groups
  plan:
  - get: config-repo
    passed: [create-spaces,create-security-groups]
    trigger: true
  - task: update-space-security-groups
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: update-space-security-groups

- name: update-org-users
  plan:
  - get: config-repo
    passed: [create-orgs]
    trigger: true
  - get: time-trigger
    trigger: true
  - task: update-org-users
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LDAP_USER: ((ldap_user))
      LDAP_PASSWORD: ((ldap_password))
      LDAP_SERVER: ((ldap_server))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: update-org-users

- name: update-org-quotas
  plan:
  - get: config-repo
    passed: [create-orgs]
    trigger: true
  - task: update-org-quotas
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: update-org-quotas

- name: isolation-segments
  plan:
  - get: config-repo
    trigger: true
    passed: [create-orgs, create-spaces]
  - get: time-trigger
    trigger: true
  - task: isolation-segments
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      CLIENT_SECRET: ((client_secret))
      CONFIG_DIR: ((config_dir))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: isolation-segments

- name: cleanup-org-users
  plan:
  - get: config-repo
    passed: [update-org-users,update-space-users]
    trigger: true
  - get: time-trigger
    trigger: true
  - task: cleanup-org-users
    file: config-repo/ci/tasks/cf-mgmt.yml
    params:
      SYSTEM_DOMAIN: ((system_domain))
      USER_ID: ((user_id))
      PASSWORD: ((password))
      CONFIG_DIR: ((config_dir))
      CLIENT_SECRET: ((client_secret))
      LOG_LEVEL: ((log_level))
      CF_MGMT_COMMAND: cleanup-org-users