Bertrand Lanson
7f8d8654a4
All checks were successful
development / Check commit compliance (push) Successful in 6s
This allows operators to target specific groups when deploying using the --tags flag of ansible. You can, for now, target consul, consul_servers, consul_agents, nomad, nomad_servers, nomad_clients, vault and haproxy
79 lines
3.0 KiB
YAML
79 lines
3.0 KiB
YAML
---
|
|
- name: "Consul control plane"
|
|
block:
|
|
- name: "Include ednz_cloud.hashicorp_consul"
|
|
ansible.builtin.include_role:
|
|
name: ednz_cloud.hashicorp_consul
|
|
|
|
- name: "Wait for consul cluster to initialize" # noqa: run-once[task]
|
|
block:
|
|
- name: "Wait for consul nodes to stabilize"
|
|
ansible.builtin.wait_for:
|
|
host: "{{ api_interface_address }}"
|
|
port: "{{ consul_api_port[consul_api_scheme] }}"
|
|
delay: 10
|
|
|
|
- name: "Waiting for consul api to respond"
|
|
ansible.builtin.uri:
|
|
url: "{{ consul_api_addr }}"
|
|
validate_certs: no
|
|
return_content: yes
|
|
status_code:
|
|
- 200
|
|
until: uri_output.status == 200
|
|
retries: 24
|
|
delay: 5
|
|
register: uri_output
|
|
|
|
- name: "Initialize consul cluster" # noqa: run-once[task]
|
|
community.general.consul_acl_bootstrap:
|
|
bootstrap_secret: "{{ _credentials.consul.root_token.secret_id }}"
|
|
host: "{{ api_interface_address }}"
|
|
port: "{{ consul_api_port[consul_api_scheme] }}"
|
|
scheme: "{{ consul_api_scheme }}"
|
|
state: present
|
|
register: _consul_init_secret
|
|
when:
|
|
- consul_init_server
|
|
- hashicorp_consul_configuration.acl.enabled
|
|
|
|
- name: "Create consul agents token"
|
|
when:
|
|
- consul_init_server
|
|
- hashicorp_consul_configuration.acl.enabled
|
|
block:
|
|
- name: "Create consul agents token" # noqa: run-once[task] no-handler
|
|
block:
|
|
- name: "Create consul agent policy"
|
|
community.general.consul_policy:
|
|
token: "{{ _credentials.consul.root_token.secret_id }}"
|
|
host: "{{ api_interface_address }}"
|
|
port: "{{ consul_api_port[consul_api_scheme] }}"
|
|
scheme: "{{ consul_api_scheme }}"
|
|
validate_certs: false
|
|
state: present
|
|
name: agents-policy
|
|
rules: "{{ consul_default_agent_policy }}"
|
|
register: _consul_agent_policy
|
|
|
|
- name: "Create consul agents token"
|
|
community.general.consul_token:
|
|
token: "{{ _credentials.consul.root_token.secret_id }}"
|
|
host: "{{ api_interface_address }}"
|
|
port: "{{ consul_api_port[consul_api_scheme] }}"
|
|
scheme: "{{ consul_api_scheme }}"
|
|
validate_certs: false
|
|
accessor_id: "{{ _credentials.consul.tokens.agent.accessor_id }}"
|
|
secret_id: "{{ _credentials.consul.tokens.agent.secret_id }}"
|
|
policies:
|
|
- id: "{{ _consul_agent_policy.policy.ID }}"
|
|
state: present
|
|
register: _consul_agent_token
|
|
|
|
- name: "Restart consul service" # noqa: no-handler
|
|
ansible.builtin.service:
|
|
name: "{{ hashicorp_consul_service_name }}"
|
|
state: restarted
|
|
throttle: 1
|
|
when: _consul_agent_token.changed
|