diff options
Diffstat (limited to 'ansible')
31 files changed, 0 insertions, 498 deletions
diff --git a/ansible/README.md b/ansible/README.md deleted file mode 100644 index db8d960..0000000 --- a/ansible/README.md +++ /dev/null @@ -1,15 +0,0 @@ -# ANSIBLE - -## How to proceed - -For each machine, **one by one** do: - - Check that cluster is healthy - - `sudo gluster peer status` - - `sudo gluster volume status all` (check Online Col, only `Y` must appear) - - Check that Nomad is healthy - - Check that Consul is healthy - - Check that Postgres is healthy - - Run `ansible-playbook -i production --limit <machine> site.yml` - - Reboot - - Check that cluster is healthy - diff --git a/ansible/README.more.md b/ansible/README.more.md deleted file mode 100644 index 0d0c607..0000000 --- a/ansible/README.more.md +++ /dev/null @@ -1,52 +0,0 @@ - -## Provisionning - - 1. Need a public IP address - 2. Deploy Debian sid/buster - 3. Add a DNS entry like xxxx.machine.deuxfleurs.fr A 0.0.0.0 in Cloudflare + Havelock - 4. Setup the fqdn in /etc/hosts (127.0.1.1 xxxx.machine.deuxfleurs.fr) - 5. Switch the SSH port to the port 110 - 6. Add the server to the ./production file - 7. Reboot machine - 8. Deploy Ansible - 9. Check that everything works as intended - 10. Update NS 1.cluster.deuxfleurs.fr - -## Useful commands - -Show every variables collected by Ansible for a given host: - -``` -ansible -i production villequin.machine.deuxfleurs.fr -m setup -``` - -Run playbook for only one host: - -``` -ansible-playbook -i production --limit villequin.machine.deuxfleurs.fr site.yml -``` - -Dump hostvars: - -``` -ansible -m debug villequin.machine.deuxfleurs.fr -i ./production -a "var=hostvars" -``` - -Deploy only one tag: - -``` -ansible-playbook -i production site.yml --tags "container" -``` - -Redeploy everything: - -``` -ansible-playbook -i production site.yml -``` - -Upgrade packages and force overwirte to fix bad packing done by GlusterFS: - -``` -apt-get -o Dpkg::Options::="--force-overwrite" dist-upgrade -y -``` - diff --git a/ansible/cluster_nodes.yml b/ansible/cluster_nodes.yml deleted file mode 100644 index ea58630..0000000 --- a/ansible/cluster_nodes.yml +++ /dev/null @@ -1,19 +0,0 @@ ---- - -- hosts: cluster_nodes - serial: 1 - roles: - - role: common - tags: base - - role: users - tags: account - - role: consul - tags: kv - - role: nomad - tags: orchestrator - - role: network - tags: net - -# UNSAFE!! This section configures glusterfs. Once done, don't run it ever again as it may break stuff. -# - role: storage -# tags: sto diff --git a/ansible/group_vars/all/.gitignore b/ansible/group_vars/all/.gitignore deleted file mode 100644 index 9271182..0000000 --- a/ansible/group_vars/all/.gitignore +++ /dev/null @@ -1 +0,0 @@ -vars_file.yml diff --git a/ansible/group_vars/all/vars_file.yml.sample b/ansible/group_vars/all/vars_file.yml.sample deleted file mode 100644 index 191f35c..0000000 --- a/ansible/group_vars/all/vars_file.yml.sample +++ /dev/null @@ -1 +0,0 @@ -consul_gossip_encrypt: 'xxx' diff --git a/ansible/production b/ansible/production deleted file mode 100644 index c8f08f2..0000000 --- a/ansible/production +++ /dev/null @@ -1,4 +0,0 @@ -[cluster_nodes] -veterini ansible_host=fbx-rennes2.machine.deuxfleurs.fr ansible_port=110 ansible_user=root public_ip=192.168.1.2 private_ip=192.168.1.2 interface=eno1 dns_server=80.67.169.40 -silicareux ansible_host=fbx-rennes2.machine.deuxfleurs.fr ansible_port=111 ansible_user=root public_ip=192.168.1.3 private_ip=192.168.1.3 interface=eno1 dns_server=80.67.169.40 -wonse ansible_host=fbx-rennes2.machine.deuxfleurs.fr ansible_port=112 ansible_user=root public_ip=192.168.1.4 private_ip=192.168.1.4 interface=eno1 dns_server=80.67.169.40 diff --git a/ansible/roles/common/tasks/main.yml b/ansible/roles/common/tasks/main.yml deleted file mode 100644 index b4d00bb..0000000 --- a/ansible/roles/common/tasks/main.yml +++ /dev/null @@ -1,51 +0,0 @@ -- name: "Check that host runs Debian buster/sid on armv7l or x86_64" - assert: - that: - - "ansible_architecture == 'aarch64' or ansible_architecture == 'armv7l' or ansible_architecture == 'x86_64'" - - "ansible_os_family == 'Debian'" - -- name: "Upgrade system" - apt: - upgrade: dist # Should we do a full uprade instead of a dist one? - update_cache: yes - cache_valid_time: 3600 - autoclean: yes - autoremove: yes - -- name: "Install base tools" - apt: - name: - - vim - - htop - - screen - - iptables - - iptables-persistent - - nftables - - iproute2 - - curl - - iputils-ping - - dnsutils - - bmon - - iftop - - iotop - - docker.io - - unzip - - tar - - tcpdump - - less - - parted - - btrfs-tools - - libnss-resolve - - net-tools - - strace - - sudo - state: present - -- name: "Passwordless sudo" - lineinfile: - path: /etc/sudoers - state: present - regexp: '^%sudo' - line: '%sudo ALL=(ALL) NOPASSWD: ALL' - validate: 'visudo -cf %s' - diff --git a/ansible/roles/consul/files/consul.service b/ansible/roles/consul/files/consul.service deleted file mode 100644 index ffaa2a3..0000000 --- a/ansible/roles/consul/files/consul.service +++ /dev/null @@ -1,10 +0,0 @@ -[Unit] -Description=Consul -After=network-online.target -Wants=network-online.target - -[Service] -ExecStart=/usr/local/bin/consul agent -config-dir=/etc/consul - -[Install] -WantedBy=multi-user.target diff --git a/ansible/roles/consul/tasks/main.yml b/ansible/roles/consul/tasks/main.yml deleted file mode 100644 index 2b77080..0000000 --- a/ansible/roles/consul/tasks/main.yml +++ /dev/null @@ -1,26 +0,0 @@ -- name: "Set consul version" - set_fact: - consul_version: 1.8.0 - -- name: "Download and install Consul for x86_64" - unarchive: - src: "https://releases.hashicorp.com/consul/{{ consul_version }}/consul_{{ consul_version }}_linux_amd64.zip" - dest: /usr/local/bin - remote_src: yes - when: - - "ansible_architecture == 'x86_64'" - -- name: "Create consul configuration directory" - file: path=/etc/consul/ state=directory - -- name: "Deploy consul configuration" - template: src=consul.json.j2 dest=/etc/consul/consul.json - -- name: "Deploy consul systemd service" - copy: src=consul.service dest=/etc/systemd/system/consul.service - -- name: "Enable consul systemd service at boot" - service: name=consul state=started enabled=yes daemon_reload=yes - -- name: "Deploy resolv.conf to use Consul" - template: src=resolv.conf.j2 dest=/etc/resolv.conf diff --git a/ansible/roles/consul/templates/consul.json.j2 b/ansible/roles/consul/templates/consul.json.j2 deleted file mode 100644 index b6c86aa..0000000 --- a/ansible/roles/consul/templates/consul.json.j2 +++ /dev/null @@ -1,30 +0,0 @@ -{ - "data_dir": "/var/lib/consul", - "bind_addr": "0.0.0.0", - "advertise_addr": "{{ public_ip }}", - "addresses": { - "dns": "0.0.0.0", - "http": "0.0.0.0" - }, - "retry_join": [ - {% for selected_host in groups['cluster_nodes']|reject("sameas", ansible_fqdn) %}{# @FIXME: Reject doesn't work #} - "{{ hostvars[selected_host]['private_ip'] }}" {{ "," if not loop.last else "" }} - {% endfor %} - ], - "bootstrap_expect": 3, - "server": true, - "ui": true, - "ports": { - "dns": 53 - }, - "recursors": [ - "{{ dns_server }}" - ], - "encrypt": "{{ consul_gossip_encrypt }}", - "domain": "2.cluster.deuxfleurs.fr", - "performance": { - "raft_multiplier": 10, - "rpc_hold_timeout": "30s", - "leave_drain_time": "30s" - } -} diff --git a/ansible/roles/consul/templates/resolv.conf.j2 b/ansible/roles/consul/templates/resolv.conf.j2 deleted file mode 100644 index 2404034..0000000 --- a/ansible/roles/consul/templates/resolv.conf.j2 +++ /dev/null @@ -1,2 +0,0 @@ -nameserver {{ private_ip }} -nameserver {{ dns_server }} diff --git a/ansible/roles/consul/vars/.gitignore b/ansible/roles/consul/vars/.gitignore deleted file mode 100644 index ff5c0bd..0000000 --- a/ansible/roles/consul/vars/.gitignore +++ /dev/null @@ -1 +0,0 @@ -main.yml diff --git a/ansible/roles/consul/vars/main.yml.sample b/ansible/roles/consul/vars/main.yml.sample deleted file mode 100644 index 9c44126..0000000 --- a/ansible/roles/consul/vars/main.yml.sample +++ /dev/null @@ -1,2 +0,0 @@ ---- -consul_gossip_encrypt: "<secret>" diff --git a/ansible/roles/network/files/rules.v6 b/ansible/roles/network/files/rules.v6 deleted file mode 100644 index 17ff71c..0000000 --- a/ansible/roles/network/files/rules.v6 +++ /dev/null @@ -1,12 +0,0 @@ -# WARNING!! When rules.{v4,v6} are changed, the whole iptables configuration is reloaded. -# This creates issues with Docker, which injects its own configuration in iptables when it starts. -# In practice, most (all?) containers will break if rules.{v4,v6} are changed, -# and docker will have to be restared. - - -*filter -:INPUT DROP [0:0] -:FORWARD DROP [0:0] -:OUTPUT ACCEPT [0:0] -COMMIT - diff --git a/ansible/roles/network/tasks/main.yml b/ansible/roles/network/tasks/main.yml deleted file mode 100644 index 1443e0c..0000000 --- a/ansible/roles/network/tasks/main.yml +++ /dev/null @@ -1,11 +0,0 @@ -- name: "Deploy iptablesv4 configuration" - template: src=rules.v4.j2 dest=/etc/iptables/rules.v4 - -- name: "Deploy iptablesv6 configuration" - copy: src=rules.v6 dest=/etc/iptables/rules.v6 - -- name: "Activate IP forwarding" - sysctl: - name: net.ipv4.ip_forward - value: "1" - sysctl_set: yes diff --git a/ansible/roles/network/templates/rules.v4.j2 b/ansible/roles/network/templates/rules.v4.j2 deleted file mode 100644 index a446139..0000000 --- a/ansible/roles/network/templates/rules.v4.j2 +++ /dev/null @@ -1,36 +0,0 @@ -*filter -:INPUT DROP [0:0] -:FORWARD DROP [0:0] -:OUTPUT ACCEPT [0:0] - -# Administration --A INPUT -p tcp --dport 22 -j ACCEPT - -# Cluster --A INPUT -s 192.168.1.254 -j ACCEPT --A INPUT -s 82.253.205.190 -j ACCEPT -{% for selected_host in groups['cluster_nodes'] %} --A INPUT -s {{ hostvars[selected_host]['public_ip'] }} -j ACCEPT --A INPUT -s {{ hostvars[selected_host]['private_ip'] }} -j ACCEPT -{% endfor %} - -# Local --A INPUT -i docker0 -j ACCEPT --A INPUT -s 127.0.0.1/8 -j ACCEPT --A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT -COMMIT - -*nat -:PREROUTING ACCEPT [0:0] -:INPUT ACCEPT [0:0] -:OUTPUT ACCEPT [0:0] -:POSTROUTING ACCEPT [0:0] -COMMIT - -*mangle -:PREROUTING ACCEPT [0:0] -:INPUT ACCEPT [0:0] -:FORWARD ACCEPT [0:0] -:OUTPUT ACCEPT [0:0] -:POSTROUTING ACCEPT [0:0] -COMMIT diff --git a/ansible/roles/nomad/files/nomad.service b/ansible/roles/nomad/files/nomad.service deleted file mode 100644 index 50116be..0000000 --- a/ansible/roles/nomad/files/nomad.service +++ /dev/null @@ -1,15 +0,0 @@ -[Unit] -Description=Nomad -After=network-online.target -After=glusterd.service -After=consul.service -Wants=network-online.target -Wants=glusterd.service -Wants=consul.service - -[Service] -ExecStart=/usr/local/bin/nomad agent -config /etc/nomad - -[Install] -WantedBy=multi-user.target - diff --git a/ansible/roles/nomad/tasks/main.yml b/ansible/roles/nomad/tasks/main.yml deleted file mode 100644 index 7c73362..0000000 --- a/ansible/roles/nomad/tasks/main.yml +++ /dev/null @@ -1,23 +0,0 @@ -- name: "Set nomad version" - set_fact: - nomad_version: 0.12.0-beta2 - -- name: "Download and install Nomad for x86_64" - unarchive: - src: "https://releases.hashicorp.com/nomad/{{ nomad_version }}/nomad_{{ nomad_version }}_linux_amd64.zip" - dest: /usr/local/bin - remote_src: yes - when: - - "ansible_architecture == 'x86_64'" - -- name: "Create Nomad configuration directory" - file: path=/etc/nomad/ state=directory - -- name: "Deploy Nomad configuration" - template: src=nomad.hcl.j2 dest=/etc/nomad/nomad.hcl - -- name: "Deploy Nomad systemd service" - copy: src=nomad.service dest=/etc/systemd/system/nomad.service - -- name: "Enable Nomad systemd service at boot" - service: name=nomad state=started enabled=yes daemon_reload=yes diff --git a/ansible/roles/nomad/templates/nomad.hcl.j2 b/ansible/roles/nomad/templates/nomad.hcl.j2 deleted file mode 100644 index b0be6a8..0000000 --- a/ansible/roles/nomad/templates/nomad.hcl.j2 +++ /dev/null @@ -1,34 +0,0 @@ -addresses { - http = "0.0.0.0" - rpc = "0.0.0.0" - serf = "0.0.0.0" -} - -advertise { - http = "{{ public_ip }}" - rpc = "{{ public_ip }}" - serf = "{{ public_ip }}" -} - -data_dir = "/var/lib/nomad" - -server { - enabled = true - bootstrap_expect = 3 -} - -consul { - address="127.0.0.1:8500" -} - -client { - enabled = true - #cpu_total_compute = 4000 - servers = ["127.0.0.1:4648"] - network_interface = "{{ interface }}" - options { - docker.privileged.enabled = "true" - docker.volumes.enabled = "true" - } -} - diff --git a/ansible/roles/storage/handlers/main.yml b/ansible/roles/storage/handlers/main.yml deleted file mode 100644 index a395c93..0000000 --- a/ansible/roles/storage/handlers/main.yml +++ /dev/null @@ -1,3 +0,0 @@ ---- -- name: umount gluster - shell: umount --force --lazy /mnt/glusterfs ; true diff --git a/ansible/roles/storage/tasks/main.yml b/ansible/roles/storage/tasks/main.yml deleted file mode 100644 index a1f2d8f..0000000 --- a/ansible/roles/storage/tasks/main.yml +++ /dev/null @@ -1,72 +0,0 @@ -- name: "Add GlusterFS Repo Key" - apt_key: - url: https://download.gluster.org/pub/gluster/glusterfs/5/rsa.pub - state: present - -- name: "Add GlusterFS official repository" - apt_repository: - repo: "deb [arch=amd64] https://download.gluster.org/pub/gluster/glusterfs/5/LATEST/Debian/buster/amd64/apt buster main" - state: present - filename: gluster - -- name: "Install GlusterFS" - apt: - name: - - glusterfs-server - - glusterfs-client - state: present - -- name: "Ensure Gluster Daemon started and enabled" - service: - name: glusterd - enabled: yes - state: started - -- name: "Create directory for GlusterFS bricks" - file: path=/mnt/storage/glusterfs/brick1 recurse=yes state=directory - -- name: "Create GlusterFS volumes" - gluster_volume: - state: present - name: donnees - bricks: /mnt/storage/glusterfs/brick1/g1 - #rebalance: yes - redundancies: 1 - disperses: 3 - #replicas: 3 - force: yes - options: - client.event-threads: "8" - server.event-threads: "8" - performance.stat-prefetch: "on" - nfs.disable: "on" - features.cache-invalidation: "on" - performance.client-io-threads: "on" - config.transport: tcp - performance.quick-read: "on" - performance.io-cache: "on" - nfs.export-volumes: "off" - cluster.lookup-optimize: "on" - - cluster: "{% for selected_host in groups['cluster_nodes'] %}{{ hostvars[selected_host]['private_ip'] }}{{ ',' if not loop.last else '' }}{% endfor %}" - run_once: true - -- name: "Create mountpoint" - file: path=/mnt/glusterfs recurse=yes state=directory - -- name: "Flush handlers (umount glusterfs and restart ganesha)" - meta: flush_handlers - -- name: "Add fstab entry" - tags: gluster-fstab - mount: - path: /mnt/glusterfs - src: "{{ private_ip }}:/donnees" - fstype: glusterfs - opts: "defaults,_netdev,noauto,x-systemd.automount" - state: present - -- name: Mount everything - command: mount -a - args: - warn: no diff --git a/ansible/roles/users/files/alex-key1.pub b/ansible/roles/users/files/alex-key1.pub deleted file mode 100644 index 93514ab..0000000 --- a/ansible/roles/users/files/alex-key1.pub +++ /dev/null @@ -1 +0,0 @@ -ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIDdVbA9fEdqSr5UJ77NnoIqDTVp8ca5kHExhZYI4ecBExFJfonJllXMBN9KdC4ukxtY8Ug47PcMOfMaTBZQc+e+KpvDWpkBt15Xpem3RCxmMBES79sLL7LgtAdBXc5mNaCX8EOEVixWKdarjvxRyf6py6the51G5muaiMpoj5fae4ZpRGjhGTPefzc7y7zRWBUUZ8pYHW774BIaK6XT9gn3hyHV+Occjl/UODXvodktk55YtnuPi8adXTYEsHrVVz8AkFhx+cr0U/U8vtQnsTrZG+JmgQLqpXVs0RDw5bE1RefEbMuYNKxutYKUe3L+ZJtDe0M0MqOFI8a4F5TxP5 katchup@konata diff --git a/ansible/roles/users/files/alex-key2.pub b/ansible/roles/users/files/alex-key2.pub deleted file mode 100644 index 1eddcc8..0000000 --- a/ansible/roles/users/files/alex-key2.pub +++ /dev/null @@ -1 +0,0 @@ -ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJk4tAEhDkLeik9eEHIHMliyckM/gWr/k6fX/CSmayCM katchup@charlotte diff --git a/ansible/roles/users/files/florian-key1.pub b/ansible/roles/users/files/florian-key1.pub deleted file mode 100644 index 47b5593..0000000 --- a/ansible/roles/users/files/florian-key1.pub +++ /dev/null @@ -1 +0,0 @@ -ssh-rsa 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 diff --git a/ansible/roles/users/files/florian-key2.pub b/ansible/roles/users/files/florian-key2.pub deleted file mode 100644 index f9935b3..0000000 --- a/ansible/roles/users/files/florian-key2.pub +++ /dev/null @@ -1 +0,0 @@ -ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC0OcDsEZdiizsz8UIgOIqOQilnHWq0sOxuu6idOqqLVYLPZEv8owdeC5oIgQj94BcKnRzpe8UHxN13GQdEWsqCim6Zn8G5x1HdZDBC83466x3i6KBkMP0dk+h47tENxKFXBPUbh/2sR8r/lZXEhzCCo7tpVuRZpCc/r8WPbAQpLgDO2D0dR7etwf3ndgObxQU0w7WbN+7NzmaHE+VQLu/pqH0op8jZyebfb26XhZ1JnNrDhp86KYbusagn6wUwp3vaJmK9UyEMi21E5HI0ri51+FP8kaTCUpgIRmgIkKFFWiup5I56K8cpgZHcJ4NY7G3jHJeI3KBlazVMyhDVJ5glI1mV0zgdr7BRGqhn70hjf5vbkzcHbRVaMaGzGENLpTFWnaONB/EbqRghWsiVpV75BYzvxSSM8Yrx8pwKUBtLWU+FjljwuumXNLigLIc/FTxdcLvZudn51+XdJXtCBrBI1H22Q7kYXz7Pi800CDLQ8rUWkW8upQ+zu5fSRH+Ptwc= diff --git a/ansible/roles/users/files/maximilien-key1.pub b/ansible/roles/users/files/maximilien-key1.pub deleted file mode 100644 index 963b1f9..0000000 --- a/ansible/roles/users/files/maximilien-key1.pub +++ /dev/null @@ -1 +0,0 @@ -ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHMMR6zNzz8NQU80wFquhUCeiXJuGphjP+zNouKbn228GyESu8sfNBwnuZq86vblR11Lz8l2rtCM73GfAKg29qmUWUHRKWvRIYWv2vaUJcCdy0bAxIzcvCvjZX0SpnIKxe9y3Rp0LGO5WLYfw0ZFaavwFZP0Z8w1Kj9/zBmL2X2avbhkaYHi/C1yXhbvESYQysmqLa48EX/TS616MBrgR9zbI9AoTQ9NOHnR14Tve/AP/khcZoBJdm4hTttMbNkEc0wonzdylTDew263SPRs/uoqnQIpUtErdPHqU10Yup8HjXjEyFJsSwcZcM5sZOw5JKckKJwmcd0yjO/x/4/Mk5 diff --git a/ansible/roles/users/files/quentin-key1.pub b/ansible/roles/users/files/quentin-key1.pub deleted file mode 100644 index f3667e0..0000000 --- a/ansible/roles/users/files/quentin-key1.pub +++ /dev/null @@ -1 +0,0 @@ -ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT1+H08FdUSvdPpPKdcafq4+JRHvFVjfvG5Id97LAoROmFRUb/ZOMTLdNuD7FqvW0Da5CPxIMr8ZxfrFLtpGyuG7qdI030iIRZPlKpBh37epZHaV+l9F4ZwJQMIBO9cuyLPXgsyvM/s7tDtrdK1k7JTf2EVvoirrjSzBaMhAnhi7//to8zvujDtgDZzy6aby75bAaDetlYPBq2brWehtrf9yDDG9WAMYJqp//scje/WmhbRR6eSdim1HaUcWk5+4ZPt8sQJcy8iWxQ4jtgjqTvMOe5v8ZPkxJNBine/ZKoJsv7FzKem00xEH7opzktaGukyEqH0VwOwKhmBiqsX2yN quentin@dufour.io diff --git a/ansible/roles/users/files/quentin-key2.pub b/ansible/roles/users/files/quentin-key2.pub deleted file mode 100644 index c1b19fd..0000000 --- a/ansible/roles/users/files/quentin-key2.pub +++ /dev/null @@ -1 +0,0 @@ -ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBu+KUebaWwlugMC5fGbNhHc6IaQDAC6+1vMc4Ww7nVU1rs2nwI7L5qcWxOwNdhFaorZQZy/fJuCWdFbF61RCKGayBWPLZHGPsfqDuggYNEi1Qil1kpeCECfDQNjyMTK058ZBBhOWNMHBjlLWXUlRJDkRBBECY0vo4jRv22SvSaPUCAnkdJ9rbAp/kqb497PTIb2r1l1/ew8YdhINAlpYQFQezZVfkZdTKxt22n0QCjhupqjfh3gfNnbBX0z/iO+RvAOWRIZsjPFLC+jXl+n7cnu2cq1nvST5eHiYfXXeIgIwmeENLKqp+2Twr7PIdv22PnJkh6iR5kx7eTRxkNZdN quentin@deuxfleurs.fr diff --git a/ansible/roles/users/tasks/main.yml b/ansible/roles/users/tasks/main.yml deleted file mode 100644 index 990a041..0000000 --- a/ansible/roles/users/tasks/main.yml +++ /dev/null @@ -1,39 +0,0 @@ -- name: Add users in the system - user: - name: "{{ item.username }}" - #groups: docker - shell: "{{ item.shell | default('/bin/bash') }}" - append: no - loop: "{{ active_users - | selectattr('is_admin', 'defined') - | rejectattr('is_admin') - | list - | union( active_users - | selectattr('is_admin', 'undefined') - | list )}}" - -- name: Set admin rights - user: - name: "{{ item.username }}" - groups: docker, sudo - shell: "{{ item.shell | default('/bin/bash') }}" - append: no - loop: "{{ active_users - | selectattr('is_admin', 'defined') - | selectattr('is_admin') - | list }}" - -# [V How SSH Key works] magic is done by subelements, understand the trick at: -# https://docs.ansible.com/ansible/latest/user_guide/playbooks_filters.html#subelements-filter -- name: Add SSH keys - authorized_key: - user: "{{ item.0.username }}" - state: present - key: "{{ lookup('file', item.1) }}" - loop: "{{ active_users | subelements('ssh_keys', skip_missing=True) }}" - -- name: Disable old users - user: - name: "{{ item }}" - state: absent - loop: "{{ disabled_users }}" diff --git a/ansible/roles/users/vars/main.yml b/ansible/roles/users/vars/main.yml deleted file mode 100644 index 5f4df4d..0000000 --- a/ansible/roles/users/vars/main.yml +++ /dev/null @@ -1,30 +0,0 @@ ---- -active_users: - - username: 'quentin' - is_admin: true - ssh_keys: - - 'quentin-key1.pub' - - 'quentin-key2.pub' - - - username: 'alex' - is_admin: true - ssh_keys: - - 'alex-key1.pub' - - 'alex-key2.pub' - - - username: 'maximilien' - is_admin: true - ssh_keys: - - 'maximilien-key1.pub' - - - username: 'florian' - is_admin: false - ssh_keys: - - 'quentin-key1.pub' - #- 'florian-key1.pub' - #- 'florian-key2.pub' - -disabled_users: - - 'john.doe' - - 'erwan' - - 'valentin' diff --git a/ansible/site.yml b/ansible/site.yml deleted file mode 100644 index f66e019..0000000 --- a/ansible/site.yml +++ /dev/null @@ -1,2 +0,0 @@ ---- -- import_playbook: cluster_nodes.yml |