From eff98691fe9f752cdc4c6f6c40437ca7dbc77a38 Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Wed, 9 Nov 2022 21:35:18 -0600
Subject: [PATCH] ci: smtp: Convert to using shared library

---
 ci/smtp.jenkinsfile | 104 ++++----------------------------------------
 1 file changed, 9 insertions(+), 95 deletions(-)

diff --git a/ci/smtp.jenkinsfile b/ci/smtp.jenkinsfile
index bad51a5..aa70fe4 100644
--- a/ci/smtp.jenkinsfile
+++ b/ci/smtp.jenkinsfile
@@ -1,97 +1,11 @@
 // vim: set ft=groovy sw=4 ts=4 sts=4 et :
+@Library('cfgpol')_
 
-pipeline {
-    agent {
-        dockerfile {
-            dir 'ci'
-            args '''\
-            -v /etc/ssh/ssh_known_hosts:/etc/ssh/ssh_known_hosts:ro
-            '''
-        }
-    }
-
-    options {
-        lock 'cfgpol'
-        timeout(time: 1, unit: 'HOURS')
-    }
-
-    triggers {
-        cron 'H H * * *'
-    }
-
-    environment {
-        KRB5CCNAME = "${WORKSPACE}/.krb5cc"
-    }
-
-    stages {
-        stage('kinit') {
-            steps {
-                withCredentials([file(
-                        credentialsId: 'keytab-jenkins@pyrocufflink.blue',
-                        variable: 'KEYTAB')]) {
-                    sh 'kinit -kt "${KEYTAB}" jenkins@PYROCUFFLINK.BLUE'
-                }
-            }
-        }
-
-        stage('Remount R/W') {
-            steps {
-                withCredentials([file(
-                        credentialsId: 'vault-jenkins@pyrocufflink.blue',
-                        variable: 'SUDO_PASS_FILE')]) {
-                    ansiblePlaybook \
-                        playbook: 'remount.yml',
-                        limit: 'smtp-relay',
-                        become: true,
-                        vaultCredentialsId: 'ansible-vault',
-                        extraVars: [
-                            remount_state: 'rw',
-                        ],
-                        extras: '-e@"${SUDO_PASS_FILE}"'
-                }
-            }
-        }
-
-        stage('SMTP') {
-            steps {
-                withCredentials([file(
-                        credentialsId: 'vault-jenkins@pyrocufflink.blue',
-                        variable: 'SUDO_PASS_FILE')]) {
-                    ansiblePlaybook \
-                        playbook: 'smtp-relay.yml',
-                        become: true,
-                        vaultCredentialsId: 'ansible-vault',
-                        extras: '-e@"${SUDO_PASS_FILE}" --diff'
-                }
-            }
-        }
-
-        stage('Remount R/O') {
-            steps {
-                withCredentials([file(
-                        credentialsId: 'vault-jenkins@pyrocufflink.blue',
-                        variable: 'SUDO_PASS_FILE')]) {
-                    ansiblePlaybook \
-                        playbook: 'remount.yml',
-                        limit: 'smtp-relay',
-                        become: true,
-                        vaultCredentialsId: 'ansible-vault',
-                        extras: '-e@"${SUDO_PASS_FILE}"'
-                }
-            }
-        }
-
-    }
-
-    post {
-        always {
-            sh 'kdestroy'
-        }
-        failure {
-            emailext \
-                to: 'gyrfalcon@ebonfire.com',
-                subject: '$DEFAULT_SUBJECT',
-                body: '$DEFAULT_CONTENT'
-        }
-    }
-}
+applyConfigPolicy(
+    'smtp-relay',
+    [
+        'SMTP': [
+            'smtp-relay.yml'
+        ]
+    ]
+)