2017-08-05 02:18:11 +08:00
|
|
|
---
|
2017-09-15 06:48:53 +08:00
|
|
|
- name: set_fact crt_files
|
2017-08-05 02:18:11 +08:00
|
|
|
set_fact:
|
|
|
|
|
crt_files:
|
2018-04-03 21:20:06 +08:00
|
|
|
- "iscsi-gateway.crt"
|
|
|
|
|
- "iscsi-gateway.key"
|
|
|
|
|
- "iscsi-gateway.pem"
|
|
|
|
|
- "iscsi-gateway-pub.key"
|
2017-08-05 02:18:11 +08:00
|
|
|
|
|
|
|
|
- name: stat for crt file(s)
|
2018-11-01 19:50:31 +08:00
|
|
|
stat:
|
syntax: change local_action syntax
Use a nicer syntax for `local_action` tasks.
We used to have oneliner like this:
```
local_action: wait_for port=22 host={{ hostvars[inventory_hostname]['ansible_default_ipv4']['address'] }} state=started delay=10 timeout=500 }}
```
The usual syntax:
```
local_action:
module: wait_for
port: 22
host: "{{ hostvars[inventory_hostname]['ansible_default_ipv4']['address'] }}"
state: started
delay: 10
timeout: 500
```
is nicer and kind of way to keep consistency regarding the whole
playbook.
This also fix a potential issue about missing quotation :
```
Traceback (most recent call last):
File "/tmp/ansible_wQtWsi/ansible_module_command.py", line 213, in <module>
main()
File "/tmp/ansible_wQtWsi/ansible_module_command.py", line 185, in main
rc, out, err = module.run_command(args, executable=executable, use_unsafe_shell=shell, encoding=None, data=stdin)
File "/tmp/ansible_wQtWsi/ansible_modlib.zip/ansible/module_utils/basic.py", line 2710, in run_command
File "/usr/lib64/python2.7/shlex.py", line 279, in split
return list(lex) File "/usr/lib64/python2.7/shlex.py", line 269, in next
token = self.get_token()
File "/usr/lib64/python2.7/shlex.py", line 96, in get_token
raw = self.read_token()
File "/usr/lib64/python2.7/shlex.py", line 172, in read_token
raise ValueError, "No closing quotation"
ValueError: No closing quotation
```
writing `local_action: shell echo {{ fsid }} | tee {{ fetch_directory }}/ceph_cluster_uuid.conf`
can cause trouble because it's complaining with missing quotes, this fix solves this issue.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1510555
Signed-off-by: Guillaume Abrioux <gabrioux@redhat.com>
2018-01-31 16:23:28 +08:00
|
|
|
path: "{{ fetch_directory }}/{{ fsid }}/{{ item }}"
|
2018-11-01 19:50:31 +08:00
|
|
|
delegate_to: localhost
|
2017-08-05 02:18:11 +08:00
|
|
|
with_items: "{{ crt_files }}"
|
|
|
|
|
changed_when: false
|
|
|
|
|
failed_when: false
|
2017-10-25 22:53:34 +08:00
|
|
|
check_mode: no
|
2017-08-05 02:18:11 +08:00
|
|
|
register: crt_files_exist
|
|
|
|
|
|
2018-04-03 21:20:06 +08:00
|
|
|
- name: create ssl crt/key files
|
2018-11-01 19:50:31 +08:00
|
|
|
command: >
|
|
|
|
|
openssl req -newkey rsa:2048 -nodes -keyout {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.key
|
|
|
|
|
-x509 -days 365 -out {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.crt
|
|
|
|
|
-subj "/C=US/ST=./L=./O=RedHat/OU=Linux/CN={{ ansible_hostname }}"
|
|
|
|
|
delegate_to: localhost
|
2019-02-07 21:16:13 +08:00
|
|
|
become: False
|
2018-04-03 21:20:06 +08:00
|
|
|
run_once: True
|
|
|
|
|
with_items: "{{ crt_files_exist.results }}"
|
2019-04-01 23:46:15 +08:00
|
|
|
when: not item.stat.exists
|
2018-04-03 21:20:06 +08:00
|
|
|
|
|
|
|
|
- name: create pem
|
2018-11-01 19:50:31 +08:00
|
|
|
shell: >
|
|
|
|
|
cat {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.crt
|
|
|
|
|
{{ fetch_directory }}/{{ fsid }}/iscsi-gateway.key > {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.pem
|
|
|
|
|
delegate_to: localhost
|
2019-02-07 21:16:13 +08:00
|
|
|
become: False
|
2018-04-03 21:20:06 +08:00
|
|
|
run_once: True
|
|
|
|
|
register: pem
|
|
|
|
|
with_items: "{{ crt_files_exist.results }}"
|
2019-04-01 23:46:15 +08:00
|
|
|
when: not item.stat.exists
|
2018-04-03 21:20:06 +08:00
|
|
|
|
|
|
|
|
- name: create public key from pem
|
2018-11-01 19:50:31 +08:00
|
|
|
shell: >
|
|
|
|
|
openssl x509 -inform pem -in {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.pem
|
|
|
|
|
-pubkey -noout > {{ fetch_directory }}/{{ fsid }}/iscsi-gateway-pub.key
|
|
|
|
|
delegate_to: localhost
|
2019-02-07 21:16:13 +08:00
|
|
|
become: False
|
2018-04-03 21:20:06 +08:00
|
|
|
run_once: True
|
2019-04-01 23:46:15 +08:00
|
|
|
when: pem.changed
|
|
|
|
|
tags: skip_ansible_lint
|
2018-04-03 21:20:06 +08:00
|
|
|
|
|
|
|
|
- name: copy crt file(s) to gateway nodes
|
2017-08-05 02:18:11 +08:00
|
|
|
copy:
|
2018-04-03 21:20:06 +08:00
|
|
|
src: "{{ fetch_directory }}/{{ fsid }}/{{ item }}"
|
|
|
|
|
dest: "/etc/ceph/{{ item }}"
|
2017-08-05 02:18:11 +08:00
|
|
|
owner: root
|
|
|
|
|
group: root
|
|
|
|
|
mode: 0400
|
|
|
|
|
changed_when: false
|
2018-04-03 21:20:06 +08:00
|
|
|
with_items: "{{ crt_files }}"
|
