org-management.yml

resources:
- name: config-repo
  type: git
  source:
    uri: https://corp.domain.int/gitrepo/project/config-repo.git
    branch: master
    paths:
    - config-repo/orgs/
    username: ''
    password: ''
- name: cf-mgmt
  type: docker-image
  source:
    repository: containers.corp.internal/cf-mgmt
    tag: 1.0.48
    ca_certs:
    - |-
      -----BEGIN CERTIFICATE-----
      MIIJmjCCCIKgAwIBAgIRAL/xDYYTb2E9AwAAAADMF94wDQYJKoZIhvcNAQELBQAw
      QjELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczET
      MBEGA1UEAxMKR1RTIENBIDFPMTAeFw0yMTA1MTAwMTM0MTlaFw0yMTA4MDIwMTM0
      MThaMGYxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQH
      Ew1Nb3VudGFpbiBWaWV3MRMwEQYDVQQKEwpHb29nbGUgTExDMRUwEwYDVQQDDAwq
      Lmdvb2dsZS5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAT3HY4ZXCbP8EmS
      uTMztlqKS/sr2+HeKFDLvhaAWgSYy1lNk7RfeCDhXsRNEyQd+1bJUaEubiiQ8HV8
      w2scpCBHo4IHMDCCBywwDgYDVR0PAQH/BAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUF
      BwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEjM9LfE4bLZW7kQF/Z80L8HiYqe
      MB8GA1UdIwQYMBaAFJjR+G4Q68+b7GCfGJAboOt9Cf0rMGgGCCsGAQUFBwEBBFww
      WjArBggrBgEFBQcwAYYfaHR0cDovL29jc3AucGtpLmdvb2cvZ3RzMW8xY29yZTAr
      BggrBgEFBQcwAoYfaHR0cDovL3BraS5nb29nL2dzcjIvR1RTMU8xLmNydDCCBOwG
      A1UdEQSCBOMwggTfggwqLmdvb2dsZS5jb22CFiouYXBwZW5naW5lLmdvb2dsZS5j
      b22CCSouYmRuLmRldoISKi5jbG91ZC5nb29nbGUuY29tghgqLmNyb3dkc291cmNl
      Lmdvb2dsZS5jb22CGCouZGF0YWNvbXB1dGUuZ29vZ2xlLmNvbYILKi5nb29nbGUu
      Y2GCCyouZ29vZ2xlLmNsgg4qLmdvb2dsZS5jby5pboIOKi5nb29nbGUuY28uanCC
      DiouZ29vZ2xlLmNvLnVrgg8qLmdvb2dsZS5jb20uYXKCDyouZ29vZ2xlLmNvbS5h
      dYIPKi5nb29nbGUuY29tLmJygg8qLmdvb2dsZS5jb20uY2+CDyouZ29vZ2xlLmNv
      bS5teIIPKi5nb29nbGUuY29tLnRygg8qLmdvb2dsZS5jb20udm6CCyouZ29vZ2xl
      LmRlggsqLmdvb2dsZS5lc4ILKi5nb29nbGUuZnKCCyouZ29vZ2xlLmh1ggsqLmdv
      b2dsZS5pdIILKi5nb29nbGUubmyCCyouZ29vZ2xlLnBsggsqLmdvb2dsZS5wdIIS
      Ki5nb29nbGVhZGFwaXMuY29tgg8qLmdvb2dsZWFwaXMuY26CESouZ29vZ2xldmlk
      ZW8uY29tggwqLmdzdGF0aWMuY26CEiouZ3N0YXRpY2NuYXBwcy5jboIPZ29vZ2xl
      Y25hcHBzLmNughEqLmdvb2dsZWNuYXBwcy5jboIMZ2tlY25hcHBzLmNugg4qLmdr
      ZWNuYXBwcy5jboISZ29vZ2xlZG93bmxvYWRzLmNughQqLmdvb2dsZWRvd25sb2Fk
      cy5jboINKi5nc3RhdGljLmNvbYIUKi5tZXRyaWMuZ3N0YXRpYy5jb22CCiouZ3Z0
      MS5jb22CESouZ2NwY2RuLmd2dDEuY29tggoqLmd2dDIuY29tgg4qLmdjcC5ndnQy
      LmNvbYIQKi51cmwuZ29vZ2xlLmNvbYIWKi55b3V0dWJlLW5vY29va2llLmNvbYIL
      Ki55dGltZy5jb22CC2FuZHJvaWQuY29tgg0qLmFuZHJvaWQuY29tghMqLmZsYXNo
      LmFuZHJvaWQuY29tggRnLmNvggYqLmcuY2+CBmdvby5nbIIKd3d3Lmdvby5nbIIU
      Z29vZ2xlLWFuYWx5dGljcy5jb22CFiouZ29vZ2xlLWFuYWx5dGljcy5jb22CCmdv
      b2dsZS5jb22CEmdvb2dsZWNvbW1lcmNlLmNvbYIUKi5nb29nbGVjb21tZXJjZS5j
      b22CCGdncGh0LmNuggoqLmdncGh0LmNuggp1cmNoaW4uY29tggwqLnVyY2hpbi5j
      b22CCHlvdXR1LmJlggt5b3V0dWJlLmNvbYINKi55b3V0dWJlLmNvbYIUeW91dHVi
      ZWVkdWNhdGlvbi5jb22CFioueW91dHViZWVkdWNhdGlvbi5jb22CD3lvdXR1YmVr
      aWRzLmNvbYIRKi55b3V0dWJla2lkcy5jb22CBXl0LmJlggcqLnl0LmJlghphbmRy
      b2lkLmNsaWVudHMuZ29vZ2xlLmNvbYIbZGV2ZWxvcGVyLmFuZHJvaWQuZ29vZ2xl
      LmNughxkZXZlbG9wZXJzLmFuZHJvaWQuZ29vZ2xlLmNughhzb3VyY2UuYW5kcm9p
      ZC5nb29nbGUuY24wIQYDVR0gBBowGDAIBgZngQwBAgIwDAYKKwYBBAHWeQIFAzAz
      BgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLnBraS5nb29nL0dUUzFPMWNvcmUu
      Y3JsMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAfT7y+I//iFVoJMLAyp5SiXkr
      xQ54CX8uapdomX4i8NcAAAF5VCAbewAABAMARzBFAiBXDRzognNWKhYyge+x0WeI
      p0CQC0i/ok7Rj6/j1gSU2gIhAPjdlCZkvaRnjLbKciE2wNd0blViO8vc5/0LHm0y
      dsLlAHUAXNxDkv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe5vbHDsoAAAF5VCAUEQAA
      BAMARjBEAiAaU7AUVpk5Czd0JKsi0Jm3S+R7RdKx/93v3eMElNIvdgIgJiqgG5ad
      NpaiolZl16lN3Bp7MrW+N42I3W2j1xdlD6kwDQYJKoZIhvcNAQELBQADggEBAEiU
      WneuRlP17O5BWRoLzA4agOzdOLGV2X4QEguCXq0RqV1uF7Spchu/sB7AQmbe31dw
      6A1KBEGYLU2AGiwE8YQpOAfUqM1c8Z9E6uy+0kLj6thNEaHlnz5LwZM0BS9/K8Kv
      v9mvTjQYIsBiQf6Na8rPMdcEKSQW3UIwmmj2kZpA1HuGRPkjZ5aNkLMrhgK2b5PL
      DDiy6qDkuTeD0qX/t407+XlzBIJjSVxgBPXR/wEjDg+cXEDYdcqeSaM2s0UvopZ9
      cPUmbAwRrxZSmNBSXoxspw/yW4B8vtnueHkU4+/bxD1VlkWiGOfuidjXcAoEHuOV
      GT2sI1kAlNjK33DYTEs=
      -----END CERTIFICATE-----
- name: time-trigger
  type: time
  source:
    interval: 1h
jobs:
- name: create-orgs
  plan:
  - get: config-repo
    trigger: true
  - get: time-trigger
    trigger: true
  - task: create-orgs
    image: cf-mgmt
    config:
      platform: linux
      inputs:
      - name: config-repo
      params:
        SYSTEM_DOMAIN: system.cf.us-east-dev.corp.internal
        USER_ID: cf-super-admin
        PASSWORD: ''
        CONFIG_DIR: config-repo/orgs/
        CLIENT_SECRET: ''
        LOG_LEVEL: info
        CF_MGMT_COMMAND: create-orgs
      run:
        path: config-repo/ci/tasks/cf-mgmt.sh
- name: shared-domains
  plan:
  - get: config-repo
    trigger: true
  - get: time-trigger
    trigger: true
  - task: shared-domains
    image: cf-mgmt
    config:
      platform: linux
      inputs:
      - name: config-repo
      params:
        SYSTEM_DOMAIN: system.cf.us-east-dev.corp.internal
        USER_ID: cf-super-admin
        PASSWORD: ''
        CONFIG_DIR: config-repo/orgs/
        CLIENT_SECRET: ''
        LOG_LEVEL: info
        CF_MGMT_COMMAND: shared-domains
      run:
        path: config-repo/ci/tasks/cf-mgmt.sh
- name: create-security-groups
  plan:
  - get: config-repo
    trigger: true
  - get: time-trigger
    trigger: true
  - task: create-security-groups
    image: cf-mgmt
    config:
      platform: linux
      inputs:
      - name: config-repo
      params:
        SYSTEM_DOMAIN: system.cf.us-east-dev.corp.internal
        USER_ID: cf-super-admin
        PASSWORD: ''
        CONFIG_DIR: config-repo/orgs/
        CLIENT_SECRET: ''
        LOG_LEVEL: info
        CF_MGMT_COMMAND: create-security-groups
      run:
        path: config-repo/ci/tasks/cf-mgmt.sh
- name: assign-default-security-groups
  plan:
  - get: config-repo
    passed:
    - create-security-groups
    trigger: true
  - get: time-trigger
    trigger: true
  - task: assign-default-security-groups
    image: cf-mgmt
    config:
      platform: linux
      inputs:
      - name: config-repo
      params:
        SYSTEM_DOMAIN: system.cf.us-east-dev.corp.internal
        USER_ID: cf-super-admin
        PASSWORD: ''
        CONFIG_DIR: config-repo/orgs/
        CLIENT_SECRET: ''
        LOG_LEVEL: info
        CF_MGMT_COMMAND: assign-default-security-groups
      run:
        path: config-repo/ci/tasks/cf-mgmt.sh