OpenConext-deploy/provision.yml at master · DeforaNetworks/OpenConext-deploy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
---
- hosts: all
  gather_facts: no
  tasks:
  - name: Read vars from secrets file
    include_vars: "{{ secrets_file }}"
    tags:
      - always

- hosts: loadbalancer:php-apps:java-apps:storage:oidc:dbcluster
  gather_facts: yes
  become: true
  roles:
    - { role: common,   tags: ['common'] }
    - { role: '{{ inventory_dir }}/../roles/surfconext_common',   tags: ['surfconext_common'] }
    - { role: '{{ inventory_dir }}/../roles/sysadmin_common',   tags: ['sysadmin_common'] }
    - { role: users,   tags: ['users'] }
    - { role: iptables,      tags: ['iptables'] }
    - { role: rsyslog,      tags: ['rsyslog'] }
  handlers:
    - include: roles/httpd/handlers/main.yml

- hosts: loadbalancer
  gather_facts: true
  become: true
  roles:
    - { role: tls,      tags: ['tls'] }
    - { role: keepalived, tags: ['keepalived'] }
    - { role: haproxy, tags: ['lb'] }
    - { role: bind, tags: ['bind'] }

- hosts: php-apps:java-apps:oidc
  gather_facts: no
  become: true
  roles:
    - { role: httpd,     tags: ['httpd'] }

- hosts: storage
  gather_facts: no
  become: true
  roles:
    - { role: mysql, tags: ['mysql'] }

- hosts: dbcluster
  gather_facts: yes
  become: true
  roles:
    - { role: galera, tags: ['galera'] }

- hosts: dbcluster_nodes
  gather_facts: yes
  become: true
  roles:
    - { role: keepalived, tags: ['keepalived'] }

- hosts: galera_provision_host
  roles:
    - { role: galera_create_users, tags: ['galera', 'galera_create_users'] }

- hosts: mongo_servers
  gather_facts: yes
  become: true
  roles:
    - { role: mongo, tags: ['mongo'] }

- hosts: php-apps
  gather_facts: no
  become: true
  vars:
    env_lang: php
  roles:
    - { role: php56fpm,          tags: ['php'     ] }
    - { role: static,            tags: ['static'  ] }
    - { role: metadata,          tags: ['static'  ] }
    - { role: openconext-common, tags: ['eb','sr','profile'] }
    - { role: engineblock,       tags: ['eb'      ] }
    - { role: janus,             tags: ['sr'      ] }
    - { role: profile,           tags: ['profile' ] }
  handlers:
    - include: roles/httpd/handlers/main.yml

- hosts: java-apps-common
  gather_facts: true
  become: true
  vars:
    env_lang: java
  roles:
    - { role: java,             tags: ['java' ] }
    - { role: shibboleth,       tags: ['shib'   ] }
  handlers:
    - include: roles/httpd/handlers/main.yml

- hosts: java-apps
  gather_facts: true
  become: true
  vars:
    env_lang: java
  roles:
    - { role: teams-legacy,     tags: ['teams-legacy'  ] }
    - { role: teams-gui,        tags: ['teams'  ] }
    - { role: teams-server,     tags: ['teams'  ] }
    - { role: authz-server,     tags: ['oauth', 'authz-server'    ] }
    - { role: authz-admin,      tags: ['oauth', 'authz-admin'     ] }
    - { role: voot,             tags: ['oauth', 'voot'            ] }
    - { role: authz-playground, tags: ['oauth', 'authz-playground'] }
    - { role: pdp,              tags: ['pdp'] }
    - { role: metadata-exporter, tags: ['metadata-exporter']}
    - { role: remove-grouper,               tags: ['remove-grouper'] }
    - { role: attribute-aggregation-gui,    tags: ['attribute-aggregation', 'attribute-aggregation-gui'] }
    - { role: attribute-aggregation-server, tags: ['attribute-aggregation', 'attribute-aggregation-server'] }
    - { role: manage-gui,                   tags: ['manage', 'manage-gui'] }
    - { role: manage-server,                tags: ['manage', 'manage-server'] }

  handlers:
    - include: roles/httpd/handlers/main.yml

- hosts: oidc
  gather_facts: true
  become: true
  vars:
    env_lang: java
  roles:
    - { role: tomcat,           tags: ['tomcat' ] }
    - { role: oidc,            tags: ['oidc' ] }
  handlers:
    - include: roles/httpd/handlers/main.yml
    - include: roles/tomcat/handlers/main.yml