forked from vitabaks/autobase
-
Notifications
You must be signed in to change notification settings - Fork 0
/
etcd_cluster.yml
80 lines (71 loc) · 2.62 KB
/
etcd_cluster.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
---
- name: '023 | 部署etcd集群'
hosts: etcd_cluster
become: true
become_method: sudo
any_errors_fatal: true
gather_facts: true
pre_tasks:
- name: "024 | 设置python变量"
ansible.builtin.set_fact:
ansible_python_interpreter: "/usr/bin/env python3"
when: "'python3' not in (ansible_python_interpreter | default(''))"
tags: always
- name: "025 | 加载主要变量"
ansible.builtin.include_vars: "vars/main.yml"
tags: always
- name: "026 | 加载系统变量"
ansible.builtin.include_vars: "vars/system.yml"
tags: always
- name: "027 | 加载操作系统特定变量"
ansible.builtin.include_vars: "vars/{{ ansible_os_family }}.yml"
tags: always
- name: Update apt cache
ansible.builtin.apt:
update_cache: true
cache_valid_time: 3600
register: apt_status
until: apt_status is success
delay: 5
retries: 3
environment: "{{ proxy_env | default({}) }}"
when: ansible_os_family == "Debian" and installation_method == "repo"
- name: Make sure the gnupg and apt-transport-https packages are present
ansible.builtin.apt:
pkg:
- gnupg
- apt-transport-https
state: present
register: apt_status
until: apt_status is success
delay: 5
retries: 3
environment: "{{ proxy_env | default({}) }}"
when: ansible_os_family == "Debian" and installation_method == "repo"
- name: Build a firewall_ports_dynamic_var
ansible.builtin.set_fact:
firewall_ports_dynamic_var: "{{ firewall_ports_dynamic_var | default([]) + (firewall_allowed_tcp_ports_for[item] | default([])) }}"
loop: "{{ hostvars[inventory_hostname].group_names }}"
when: firewall_enabled_at_boot | bool
tags: firewall
- name: Build a firewall_rules_dynamic_var
ansible.builtin.set_fact:
firewall_rules_dynamic_var: "{{ firewall_rules_dynamic_var | default([]) + (firewall_additional_rules_for[item] | default([])) }}"
loop: "{{ hostvars[inventory_hostname].group_names }}"
when: firewall_enabled_at_boot | bool
tags: firewall
roles:
- role: ansible-role-firewall
environment: "{{ proxy_env | default({}) }}"
vars:
firewall_allowed_tcp_ports: "{{ firewall_ports_dynamic_var | default([]) | unique }}"
firewall_additional_rules: "{{ firewall_rules_dynamic_var | default([]) | unique }}"
when: firewall_enabled_at_boot|bool
tags: firewall
- role: hostname
- role: resolv_conf
- role: etc_hosts
- role: sysctl
- role: timezone
- role: ntp
- role: etcd