Separate seed job Groovy script from XML

This makes the script easier to read and modify. The conversion of
special characters is done by a custom Jinja2 filter.

Add '*.pyc' to '.gitignore'.

.gitignore

@@ -1 +1,2 @@
+*.pyc
 *.retry

ansible/filter_plugins/filters.py

@@ -0,0 +1,15 @@
+def escape_to_xml(string):
+    char_to_escaped_string = [
+        ('"', '"'),
+        ("'", '''),
+        ('<', '&lt;'),
+        ('>', '&gt;')
+    ]
+    for char, escaped in char_to_escaped_string:
+        string = string.replace(char, escaped)
+    return string
+
+
+class FilterModule(object):
+    def filters(self):
+        return {'escape_to_xml': escape_to_xml}

ansible/roles/jenkins-seed-job/defaults/main.yaml

@@ -1,4 +1,7 @@
 ---
 seed_job_name: seed_job
+seed_job_script_path: "{{seed_job_name}}.groovy"
+seed_job_script: "{{ lookup('file', seed_job_script_path) }}"
+seed_job_script_xml: "{{ seed_job_script | escape_to_xml }}"
 seed_job_template: "{{seed_job_name}}_config.xml.j2"
 seed_job_target_dir: "{{jenkins_home_dir}}/jobs/{{seed_job_name}}"

ansible/roles/jenkins-seed-job/files/seed_job.groovy

@@ -0,0 +1,6 @@
+node ('master') {
+      git credentialsId: 'github-user-pass-credentials',
+          url: REPOSITORY_URL,
+          branch: REPOSITORY_COMMIT
+      jobDsl targets: JOB_DESCRIPTORS_FILES
+}

ansible/roles/jenkins-seed-job/templates/seed_job_config.xml.j2

@@ -58,13 +58,7 @@
     </org.jenkinsci.plugins.workflow.job.properties.PipelineTriggersJobProperty>
   </properties>
   <definition class="org.jenkinsci.plugins.workflow.cps.CpsFlowDefinition" plugin="[email protected]">
-    <script>
-node (&apos;master&apos;) {
-      git credentialsId: &apos;github-user-pass-credentials&apos;,
-          url: REPOSITORY_URL,
-          branch: REPOSITORY_COMMIT
-      jobDsl targets: JOB_DESCRIPTORS_FILES
-}</script>
+    <script>{{seed_job_script_xml}}</script>
     <sandbox>true</sandbox>
   </definition>
   <triggers/>