From 489f9aa10157f560a1aacb7ea4affa003d7fca50 Mon Sep 17 00:00:00 2001 From: Bertrand Lanson Date: Fri, 3 May 2024 00:30:54 +0200 Subject: [PATCH] feat: add playbook to generate credentials before deploying --- playbooks/generate_credentials.yml | 31 ++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 playbooks/generate_credentials.yml diff --git a/playbooks/generate_credentials.yml b/playbooks/generate_credentials.yml new file mode 100644 index 0000000..4886fa8 --- /dev/null +++ b/playbooks/generate_credentials.yml @@ -0,0 +1,31 @@ +--- +# hashistack generate certificates playbook +- name: "Generate credentials" + hosts: localhost + strategy: linear + gather_facts: true + become: true + tasks: + - name: "Generate consul credentials" + block: + - name: "Generate consul root credentials" + ansible.builtin.set_fact: + _consul_root_token: "{{ lookup('uuid', namespace='00000000-0000-0000-0000-000000000000') }}" + + - name: "Generate consul agents credentials" + ansible.builtin.set_fact: + _consul_agents_token: "{{ lookup('uuid', namespace='00000000-0000-0000-0000-000000000000') }}" + + - name: "Generate nomad credentials" + block: + - name: "Generate nomad root credentials" + ansible.builtin.set_fact: + _nomad_root_token: "{{ lookup('uuid', namespace='00000000-0000-0000-0000-000000000000') }}" + + - name: "Write credentials file" + ansible.builtin.template: + src: credentials.yml.j2 + dest: credentials.yml + mode: '0644' + + - fail: