ansible/roles/odcs/base/tasks/main.yml

---
# install packages and generate shared configuration files
- name: install the packages required for ODCS
  package:
    pkg: "{{ item }}"
    state: latest
  with_items:
  - python3-psycopg2
  - python3-odcs-common
  - python3-celery
  - odcs
  - httpd
  tags:
  - odcs

- name: install the latest ODCS packagess
  package:
    pkg: "{{ item }}"
    state: latest
  with_items:
  - python3-odcs-common
  - odcs
  when: odcs_upgrade
  tags:
  - odcs

# install required packages for frontend here, as we may
# need to reload httpd in next task when host is frontend
- name: install the packages required for ODCS frontend
  package:
    pkg: "{{ item }}"
    state: present
  with_items:
  - mod_auth_openidc
  - python3-mod_wsgi
  when: inventory_hostname.startswith('odcs-frontend')
  tags:
  - odcs
  - odcs/frontend

- name: install the packages required for ODCS backend
  package:
    pkg: "{{ item }}"
    state: present
  with_items:
  - koji
  when: inventory_hostname.startswith('odcs-backend')
  tags:
  - odcs
  - odcs/backend

- name: create ODCS_TARGET_DIR
  file:
    path: "{{ odcs_target_dir }}"
    state: directory
    owner: apache
    group: apache
    mode: 0777
#    recurse: yes
    follow: no
  tags:
   - odcs
   - odcs/backend
   - odcs/frontend

# this app config is shared by backend and frontend, but has different
# owner groups on backend and frontend, and notify different handlers,
# we can have vars set for frontend and backend seperately to do that,
# but it looks a little weird to have such special vars in
# inventory/group_vars/odcs-*, also we don't want to repeat the same
# required vars in frontend and backend, so just have 2 tasks in base
# to keep it simple.
- name: generate the ODCS app config for frontend
  template:
    src: etc/odcs/config.py.j2
    dest: /etc/odcs/config.py
    owner: odcs
    group: apache
    mode: 0440
  notify:
  - restart apache
  when: inventory_hostname.startswith('odcs-frontend')
  tags:
  - odcs
  - odcs/frontend

- name: generate the ODCS app config for backend
  template:
    src: etc/odcs/config.py.j2
    dest: /etc/odcs/config.py
    owner: odcs
    group: fedmsg
    mode: 0440
  notify:
  - restart odcs-celery-backend
  when: inventory_hostname.startswith('odcs-backend')
  tags:
  - odcs
  - odcs/backend

- name: generate the ODCS raw_config_wrapper config for backend
  template:
    src: etc/odcs/raw_config_wrapper.conf.j2
    dest: /etc/odcs/raw_config_wrapper.conf
    owner: odcs
    group: fedmsg
    mode: 0440
  notify:
  - restart odcs-celery-backend
  when: inventory_hostname.startswith('odcs-backend')
  tags:
  - odcs
  - odcs/backend

- name: generate the ODCS runroot_koji config for backend
  template:
    src: etc/odcs/runroot_koji.conf.j2
    dest: /etc/odcs/runroot_koji.conf
    owner: odcs
    group: fedmsg
    mode: 0440
  notify:
  - restart odcs-celery-backend
  when: inventory_hostname.startswith('odcs-backend')
  tags:
  - odcs
  - odcs/backend

- name: Make sure the /etc/fedmsg.d/odcs.py file (provided by rpm) is absent.
  file:
    path: /etc/fedmsg.d/odcs.py
    state: absent
  tags:
  - odcs
  - odcs/backend

- name: copy the ODCS pungi config template to backend
  copy:
    src: "{{ roles_path }}/odcs/base/files/pungi.conf"
    dest: /etc/odcs/pungi.conf
    owner: odcs
    group: fedmsg
    mode: 0640
  notify:
  - restart odcs-celery-backend
  when: inventory_hostname.startswith('odcs-backend')
  tags:
  - odcs
  - odcs/backend

- name: copy the odcs-celery-backend.service file.
  template:
    src: "etc/systemd/system/odcs-celery-backend.service.j2"
    dest: /etc/systemd/system/odcs-celery-backend.service
    owner: odcs
    group: fedmsg
    mode: 0640
  notify:
  - restart odcs-celery-backend
  when: inventory_hostname.startswith('odcs-backend')
  tags:
  - odcs
  - odcs/backend

- name: enable ODCS backend (odcs-celery-backend)
  systemd:
    name: odcs-celery-backend
    enabled: yes
    daemon_reload: yes
  when: inventory_hostname.startswith('odcs-backend')
  tags:
  - odcs
  - odcs/backend

- name: copy the odcs-celery-beat.service file.
  template:
    src: "etc/systemd/system/odcs-celery-beat.service.j2"
    dest: /etc/systemd/system/odcs-celery-beat.service
    owner: odcs
    group: fedmsg
    mode: 0640
  notify:
  - restart odcs-celery-beat
  when: inventory_hostname.startswith('odcs-frontend')
  tags:
  - odcs
  - odcs/frontend

- name: copy the odcs-celery-beat.service file.
  template:
    src: "fedora-messaging.toml.j2"
    dest: /etc/fedora-messaging/config.toml
    owner: odcs
    group: apache
    mode: 0640
  tags:
  - odcs
  - odcs/frontend
  - odcs/backend

- name: enable ODCS beat (odcs-celery-beat)
  systemd:
    name: odcs-celery-beat
    enabled: yes
    daemon_reload: yes
  when: inventory_hostname.startswith('odcs-frontend')
  tags:
  - odcs
  - odcs/frontend

- name: copy the odcs-backend.conf tmpfiles.d file.
  copy:
    src: "{{ roles_path }}/odcs/base/files/tmpfiles.d/odcs-backend.conf"
    dest: /etc/tmpfiles.d/odcs-backend.conf
    owner: odcs
    group: fedmsg
    mode: 0640
  notify:
  - restart odcs-celery-backend
  when: inventory_hostname.startswith('odcs-backend')
  tags:
  - odcs
  - odcs/backend

- name: Run systemd-tmpfiles --create
  command: systemd-tmpfiles --create
  args:
    creates: /var/run/odcs-backend
  notify:
  - restart odcs-celery-backend
  when: inventory_hostname.startswith('odcs-backend')
  tags:
  - odcs
  - odcs/backend

- name: copy the odcs rabbitmq private queue crt.
  copy:
    src: "{{private}}/files/rabbitmq/{{env}}/pki/issued/odcs-private-queue{{env_suffix}}.crt"
    dest: /etc/odcs/odcs-private-queue.crt
    owner: odcs
    group: apache
    mode: 0640
  tags:
  - odcs
  - odcs/backend
  - odcs/frontend

- name: copy the odcs rabbitmq private queue key.
  copy:
    src: "{{private}}/files/rabbitmq/{{env}}/pki/private/odcs-private-queue{{env_suffix}}.key"
    dest: /etc/odcs/odcs-private-queue.key
    owner: odcs
    group: apache
    mode: 0640
  tags:
  - odcs
  - odcs/backend
  - odcs/frontend

- name: copy the odcs rabbitmq crt.
  copy:
    src: "{{private}}/files/rabbitmq/{{env}}/pki/issued/odcs{{env_suffix}}.crt"
    dest: /etc/odcs/odcs-rabbitmq.crt
    owner: odcs
    group: apache
    mode: 0640
  tags:
  - odcs
  - odcs/backend
  - odcs/frontend

- name: copy the odcs rabbitmq key.
  copy:
    src: "{{private}}/files/rabbitmq/{{env}}/pki/private/odcs{{env_suffix}}.key"
    dest: /etc/odcs/odcs-rabbitmq.key
    owner: odcs
    group: apache
    mode: 0640
  tags:
  - odcs
  - odcs/backend
  - odcs/frontend

- name: copy the odcs rabbitmq CA cert.
  copy:
    src: "{{private}}/files/rabbitmq/{{env}}/pki/ca.crt"
    dest: /etc/odcs/ca.crt
    owner: odcs
    group: apache
    mode: 0640
  tags:
  - odcs
  - odcs/backend
  - odcs/frontend