20df8986c4
- added postgres_listen_addresses to allow configuration - removed default_master_ip -> shared_service_pg_master_ip - removed default_slave_ip -> shared_service_pg_slave_ip - removed default_private_network -> shared_service_network - stage-qa: bugfix for /etc/exports, wrong ip |
4 years ago | |
|---|---|---|
| ansible-builder | 4 years ago | |
| docker/dregsy | 4 years ago | |
| group_vars | 4 years ago | |
| host_vars | 4 years ago | |
| roles | 4 years ago | |
| smardigo | 4 years ago | |
| tasks | 4 years ago | |
| templates | 4 years ago | |
| users | 4 years ago | |
| .gitignore | 4 years ago | |
| README.md | 4 years ago | |
| create-database.yml | 4 years ago | |
| create-realm.yml | 4 years ago | |
| create-server.yml | 4 years ago | |
| create-service.yml | 4 years ago | |
| elastic-certs.sh | 4 years ago | |
| import-database.yml | 4 years ago | |
| info.yml | 4 years ago | |
| poetry.lock | 4 years ago | |
| provisioning.yml | 4 years ago | |
| pyproject.toml | 4 years ago | |
| send-message.yml | 4 years ago | |
| setup.yml | 4 years ago | |
| smardigo.yml | 4 years ago | |
| stage-dev | 4 years ago | |
| stage-qa | 4 years ago | |
| update-ssh-config-file.yml | 4 years ago | |
| upload-database-dumb.yml | 4 years ago | |
README.md
Prepare ansible Installation
Option 1
-
Install ansible with Python.
-
Install library jmespath (https://jmespath.org/). Will be used to parse JSON data.
-
Install hcloud (python library for hetzner)
pip3 install ansible jmespath hcloud netaddr
Option 2
-
Install python dependencies with poetry
poetry install
Install needed ansible collections / roles
Without poetry
ansible-galaxy collection install hetzner.hcloud
ansible-galaxy collection install community.general
ansible-galaxy collection install community.kubernetes
ansible-galaxy collection install community.mysql
With poetry
poetry run ansible-galaxy collection install hetzner.hcloud
poetry run ansible-galaxy collection install community.general
poetry run ansible-galaxy collection install community.kubernetes
poetry run ansible-galaxy collection install community.mysql
Setup
Create/Start servers for stage-dev
ansible-playbook -i stage-dev provisioning.yml --vault-password-file ~/vault-pass
ansible-playbook -i stage-dev start.yml --vault-password-file ~/vault-pass
ansible-playbook -i stage-dev stop.yml --vault-password-file ~/vault-pass
with Poetry prefix with
poetry run
Provisioning
ansible-playbook -i stage-dev setup.yml --vault-password-file ~/vault-pass -u root
ansible-playbook dynamic-provisioning.yml --vault-password-file ~/vault-pass -e "stage=dev name=test node=01 service=connect"
with Poetry prefix with
poetry run
Setup Smardigo Service
Setup/Configure a Server, Database, Realm (keycloak) and Smardigo
ansible-playbook create-server.yml -e "stage='dev' tenant_id='sken' cluster_name='test01' cluster_size='1' cluster_service='connect' stage='dev'"
ansible-playbook create-database.yml -e "stage='dev' tenant_id='sken' cluster_name='test01' cluster_size='1' cluster_service='connect' stage='dev'"
ansible-playbook create-realm.yml -e "stage='dev' tenant_id='sken' cluster_name='test01' cluster_size='1' cluster_service='connect' stage='dev' current_realm_name='sken' current_realm_display_name='S-K-E-N'"
ansible-playbook create-service.yml -e "stage='dev' tenant_id='sken' cluster_name='test01' cluster_size='1' cluster_service='connect' stage='dev' current_realm_name='sken' current_realm_display_name='S-K-E-N'"
with Poetry prefix with
poetry run
TODO
IPFire 149.233.6.129 - eShelter 212.121.131.106 - Siemansdamm
Prometheus curl -X POST https://{{ prometheus-url }}/-/reload
Prometheus (Grafana) docker exec -i df4d6b176f5e sh -c 'grafana-cli plugins install grafana-piechart-panel' docker restart df4d6b176f5e
AWX -> /etc/kubernetes/k9s wget https://github.com/derailed/k9s/releases/download/v0.24.14/k9s_Linux_x86_64.tar.gz tar -xzf k9s_*.tar.gz -C . ln -s /etc/kubernetes/k9s/k9s /usr/bin/k9s kubectl taint nodes --all node-role.kubernetes.io/master-