ansible/playbooks/groups/ipa.yml
Patrick Uiterwijk a16153d7ad Combine keytabs together
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-20 05:13:49 +00:00

71 lines
1.5 KiB
YAML

- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=ipa:ipa-stg"
- name: make the box be real
hosts: ipa:ipa-stg
user: root
gather_facts: True
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
roles:
- base
- rkhunter
- nagios/client
- hosts
- fas_client
- rsyncd
- sudo
- { role: openvpn/client,
when: env != "staging" }
- mod_wsgi
tasks:
- include: "{{ tasks }}/yumrepos.yml"
- include: "{{ tasks }}/2fa_client.yml"
- include: "{{ tasks }}/motd.yml"
handlers:
- include: "{{ handlers }}/restart_services.yml"
- name: deploy ipa itself
hosts: ipa:ipa-stg
user: root
gather_facts: True
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml"
roles:
- ipa/server
- role: keytab/service
owner_user: apache
owner_group: apache
service: HTTP
host: "id{{env_suffix}}.fedoraproject.org"
notify:
- combine IPA http keytabs
handlers:
- include: "{{ handlers }}/restart_services.yml"
- include: "{{ handlers }}/ipa.yml"
- name: do base role once more to revert any resolvconf changes
hosts: ipa:ipa-stg
user: root
gather_facts: True
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml"
roles:
- base
handlers:
- include: "{{ handlers }}/restart_services.yml"