DDST-681: Update devops docs

docs/devops.md

@@ -40,6 +40,7 @@ The file tree below show the files which will be used to manage sites:
 │   │   ├── ingress.yaml -> ../shared/ingress.yaml
 │   │   ├── saml.yaml
 │   │   └── values.yaml
+│   ├── extras.yaml
 │   ├── memcache
 │   │   └── affinity.yaml -> ../shared/affinity.yaml
 │   ├── postgres
@@ -75,6 +76,9 @@ script creates a list of services to run against from the `$ns/charts.yaml`
 file. The file contains an object called `charts` where the keys are the
 service/installation name and the values contains a helm chart reference.
 
+It will also create kubernetes resources found in the file `$ns/extras.yaml`.
+Any additional resources required by the site can be defined there.
+
 For example, running `update-all.sh dc` will install all the services for the
 dc site declared in the file `dc/charts.yaml`
 
@@ -125,6 +129,24 @@ multiple services. These files are stored in `$ns/shared`
 
 Below will contain explanations of the required configurations.
 
+#### extras.yaml
+
+`$siteName/extras.yaml` is not a helm configuration file but extra resources
+that will be created for the site. Currently it only contains the sites
+namespace. The name of the namespace and the `dgicloud.com/drupal.site` label
+must be updated to match the site name.
+
+Ex:
+```yaml
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  labels:
+    dgicloud.com/drupal.site: oc
+  name: oc
+```
+
 #### Shared
 
 The configurations in this directory are used by multiple services by being
@@ -312,6 +334,7 @@ installed.
 
  - [ansible](https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html)
  - [python boto 3](https://boto3.amazonaws.com/v1/documentation/api/latest/guide/quickstart.html#installation)
+ - botocore `pip install botocore`
  - [aws cli](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html)
 
 Your workstation must also be configured to access the containerprod account
@@ -352,6 +375,8 @@ beln-arca-dc.dc.sfu.ca | SUCCESS => {
 }
 ```
 
+If running ansible from a mac run `export OBJC_DISABLE_INITIALIZE_FORK_SAFETY=YES` before running the playbook.
+
 To provision the node with Ansible run replacing the hostname with that of the
 new node:
 

docs/resources/devops_scripts/update-all.sh

@@ -5,6 +5,17 @@ SCRIPTS_DIR="$(dirname -- "${BASH_SOURCE[0]}")"
 
 namespace=${1?"A namespace is required"}
 
+echo Checking if extra manifests need updates.
+if ! kubectl diff -n $namespace -f $namespace/extras.yaml; then
+  echo Updates to the extra kubernetes manifests are avilable or kubectl diff failed to run.
+  read -p "Apply Updates (y/n)?" choice
+  case "$choice" in
+    y|Y ) kubectl apply -n $namespace -f $namespace/extras.yaml;;
+    n|N ) ;;
+    * ) echo "invalid"; exit 1;;
+  esac
+fi
+
 charts_file=$namespace/charts.yaml
 if [ ! -f $charts_file ]; then
   echo Charts file $charts_file does not exist