71 lines
1.6 KiB
YAML
71 lines
1.6 KiB
YAML
|
---
|
||
|
|
- name: setup prerequisites
|
||
|
|
ansible.builtin.include_tasks: "prereq_{{ ansible_distribution|lower }}.yml"
|
||
|
|
|
||
|
|
- name: setup python-consul
|
||
|
|
ansible.builtin.pip:
|
||
|
|
name: python-consul
|
||
|
|
state: latest
|
||
|
|
executable: /usr/bin/pip3
|
||
|
|
become: true
|
||
|
|
|
||
|
|
- name: check if consul is the correct version
|
||
|
|
ansible.builtin.command:
|
||
|
|
cmd: "/usr/bin/consul"
|
||
|
|
register: consul_installed_version
|
||
|
|
changed_when: false
|
||
|
|
failed_when: false
|
||
|
|
|
||
|
|
- block:
|
||
|
|
- name: Include base install
|
||
|
|
include_tasks: "install_{{ ansible_distribution|lower }}_binary.yml"
|
||
|
|
when: consul_installed_version is not defined or consul_version not in consul_installed_version.stdout
|
||
|
|
|
||
|
|
- name: ensure the consul folders exist
|
||
|
|
ansible.builtin.file:
|
||
|
|
path: "{{ item }}"
|
||
|
|
state: directory
|
||
|
|
owner: consul
|
||
|
|
group: consul
|
||
|
|
mode: 0755
|
||
|
|
with_items:
|
||
|
|
- "{{ consul_install_path }}"
|
||
|
|
- "{{ consul_data_path }}"
|
||
|
|
- "/etc/consul/"
|
||
|
|
become: true
|
||
|
|
|
||
|
|
- name: touch env file
|
||
|
|
ansible.builtin.file:
|
||
|
|
path: "/etc/consul/consul.env"
|
||
|
|
state: touch
|
||
|
|
owner: consul
|
||
|
|
group: consul
|
||
|
|
mode: 0770
|
||
|
|
become: true
|
||
|
|
|
||
|
|
- name: setup key for encryption
|
||
|
|
include_tasks: "setup_encrypt_key.yml"
|
||
|
|
run_once: true
|
||
|
|
|
||
|
|
- name: setup consul ca
|
||
|
|
include_tasks: "setup_ca.yml"
|
||
|
|
run_once: true
|
||
|
|
|
||
|
|
- name: setup server cert
|
||
|
|
include_tasks: "setup_server_cert.yml"
|
||
|
|
|
||
|
|
- name: setup client cert
|
||
|
|
include_tasks: "setup_client_cert.yml"
|
||
|
|
|
||
|
|
- name: setup consul config
|
||
|
|
include_tasks: "setup_consul_config.yml"
|
||
|
|
|
||
|
|
- name: enable and start consul
|
||
|
|
ansible.builtin.service:
|
||
|
|
name: consul
|
||
|
|
enabled: true
|
||
|
|
state: restarted
|
||
|
|
async: 600
|
||
|
|
poll: 5
|
||
|
|
become: true
|