Skip to content
Snippets Groups Projects
Commit 233eb0b9 authored by Chris Hines's avatar Chris Hines
Browse files

Merge pull request #5 from CVL-GitHub/master

Request to merge 
parents b9d0a796 7d757c31
No related branches found
No related tags found
No related merge requests found
...@@ -24,3 +24,5 @@ Here is an example task (taken from setting up karaage): ...@@ -24,3 +24,5 @@ Here is an example task (taken from setting up karaage):
We aim to make these roles run on all common linux platforms (both RedHat and Debian derived) but at the very least they should work on a CentOS 6 install. We aim to make these roles run on all common linux platforms (both RedHat and Debian derived) but at the very least they should work on a CentOS 6 install.
Inventory is not included.
...@@ -119,5 +119,7 @@ comp-lzo ...@@ -119,5 +119,7 @@ comp-lzo
# Set log file verbosity. # Set log file verbosity.
verb 3 verb 3
log openvpn.log
# Silence repeating messages # Silence repeating messages
;mute 20 ;mute 20
--- ---
- -
copy: "src={{ ansible_env['PWD'] }}/{{ inventory_hostname }}.cert/ca.crt dest=/etc/openvpn/ca.crt mode=644 owner=root group=root" copy: "src=/tmp/{{ inventory_hostname }}/ca.crt dest=/etc/openvpn/ca.crt mode=644 owner=root group=root"
name: "Copying CA certificate" name: "Copying CA certificate"
- -
copy: "src={{ ansible_env['PWD'] }}/{{ inventory_hostname }}.cert/{{ inventory_hostname }}.crt dest=/etc/openvpn/{{ inventory_hostname }}.crt mode=644 owner=root group=root" copy: "src=/tmp/{{ inventory_hostname }}/{{ inventory_hostname }}.crt dest=/etc/openvpn/{{ inventory_hostname }}.crt mode=644 owner=root group=root"
name: "Copying Client certificate" name: "Copying Client certificate"
- -
copy: "src={{ ansible_env['PWD'] }}/{{ inventory_hostname }}.cert/{{ inventory_hostname }}.key dest=/etc/openvpn/{{ inventory_hostname }}.key mode=600 owner=root group=root" copy: "src=/tmp/{{ inventory_hostname }}/{{ inventory_hostname }}.key dest=/etc/openvpn/{{ inventory_hostname }}.key mode=600 owner=root group=root"
name: "Copying Client key" name: "Copying Client key"
- -
copy: "src=client.conf dest=/etc/openvpn/client.conf owner=root group=root mode=644" copy: "src=client.conf dest=/etc/openvpn/client.conf owner=root group=root mode=644"
...@@ -16,11 +16,11 @@ ...@@ -16,11 +16,11 @@
replace: "dest=/etc/openvpn/client.conf regexp=vm-server replace={{ server | mandatory }}" replace: "dest=/etc/openvpn/client.conf regexp=vm-server replace={{ server | mandatory }}"
- -
name: "Editing client.conf: Replacing Client Name" name: "Editing client.conf: Replacing Client Name"
replace: "dest=/etc/openvpn/client.conf regexp=vm-server replace={{ inventory_hostname }}" replace: "dest=/etc/openvpn/client.conf regexp=vm-dummy replace={{ inventory_hostname }}"
- -
name: "Starting openvpn" name: "Starting openvpn"
service: "name=openvpn enabled=yes state=started" service: "name=openvpn enabled=yes state=started"
- -
local_action: "command rm -rf {{ ansible_env['PWD'] }}/{{ inventory_hostname }}.cert" local_action: "command rm -rf /tmp/{{ inventory_hostname }}"
name: "Removing Cert Directory" name: "Removing Cert Directory"
---
key_email: shahaan.ayyub@monash.edu
key_ou: MCC-R@CMON
...@@ -11,17 +11,14 @@ ...@@ -11,17 +11,14 @@
when: "cert.stat.exists == false" when: "cert.stat.exists == false"
- -
delegate_to: "{{ server }}" delegate_to: "{{ server }}"
fetch: "src=/etc/easy-rsa/2.0/keys/{{ inventory_hostname }}.crt dest=certDir/ fail_on_missing=yes validate_md5=yes flat=yes" fetch: "src=/etc/easy-rsa/2.0/keys/{{ inventory_hostname }}.crt dest=/tmp/{{ inventory_hostname }}/ fail_on_missing=yes validate_md5=yes flat=yes"
name: "Copy the Client Certificate to the master node" name: "Copy the Client Certificate to the master node"
- -
delegate_to: "{{ server }}" delegate_to: "{{ server }}"
fetch: "src=/etc/easy-rsa/2.0/keys/{{ inventory_hostname }}.key dest=certDir/ fail_on_missing=yes validate_md5=yes flat=yes" fetch: "src=/etc/easy-rsa/2.0/keys/{{ inventory_hostname }}.key dest=/tmp/{{ inventory_hostname }}/ fail_on_missing=yes validate_md5=yes flat=yes"
name: "Copy the Client Certificate to the master node" name: "Copy the Client Certificate to the master node"
- -
delegate_to: "{{ server }}" delegate_to: "{{ server }}"
fetch: "src=/etc/easy-rsa/2.0/keys/ca.crt dest=certDir/ fail_on_missing=yes validate_md5=yes flat=yes" fetch: "src=/etc/easy-rsa/2.0/keys/ca.crt dest=/tmp/{{ inventory_hostname }}/ fail_on_missing=yes validate_md5=yes flat=yes"
name: "Copy the Client Certificate to the master node" name: "Copy the Client Certificate to the master node"
-
local_action: "command mv certDir {{ ansible_env['PWD'] }}/{{ inventory_hostname }}.cert"
name: "Moving certDir"
...@@ -8,3 +8,10 @@ ...@@ -8,3 +8,10 @@
- defaultConfig - defaultConfig
- paths: - paths:
- /mnt/nectar-nfs/root/ansible-config-root/ansible_cluster_in_a_box/roles/easy-rsa-CA/files - /mnt/nectar-nfs/root/ansible-config-root/ansible_cluster_in_a_box/roles/easy-rsa-CA/files
-
name: "Editing key_email in config file"
replace: dest=/etc/easy-rsa/2.0/vars regexp="shahaan.ayyub@monash.edu" replace={{ key_email }}
-
name: "Editing key_ou in config file"
replace: dest=/etc/easy-rsa/2.0/vars regexp="MCC-R@CMON" replace={{ key_ou }}
...@@ -2,6 +2,6 @@ ...@@ -2,6 +2,6 @@
- -
include: installEasyRsa.yml include: installEasyRsa.yml
- -
include: copyConfigurationFile.yml include: copyConfigurationFile.yml
- -
include: buildClientCert.yml include: buildClientCert.yml
---
key_email: shahaan.ayyub@monash.edu
key_ou: MCC-R@CMON
...@@ -8,3 +8,10 @@ ...@@ -8,3 +8,10 @@
- defaultConfig - defaultConfig
- paths: - paths:
- /mnt/nectar-nfs/root/ansible-config-root/ansible_cluster_in_a_box/roles/easy-rsa-CA/files - /mnt/nectar-nfs/root/ansible-config-root/ansible_cluster_in_a_box/roles/easy-rsa-CA/files
-
name: "Editing key_email in config file"
replace: dest=/etc/easy-rsa/2.0/vars regexp="shahaan.ayyub@monash.edu" replace={{ key_email }}
-
name: "Editing key_ou in config file"
replace: dest=/etc/easy-rsa/2.0/vars regexp="MCC-R@CMON" replace={{ key_ou }}
File moved
---
dependencies:
- { role: commonVars }
- { role: etcHosts }
...@@ -19,9 +19,9 @@ for group in d['groups'].keys(): ...@@ -19,9 +19,9 @@ for group in d['groups'].keys():
hosts[h] = ['%s.%s'%(h,domain),'%s-%s.%s'%(group,i,domain),'%s'%h,'%s-%s'%(group,i)] hosts[h] = ['%s.%s'%(h,domain),'%s-%s.%s'%(group,i,domain),'%s'%h,'%s-%s'%(group,i)]
i=i+1 i=i+1
for h in hosts.keys(): for h in hosts.keys():
string="%s"%(d['hostvars'][h]['ansible_eth0']['ipv4']['address']) if d['hostvars'].has_key(h):
for name in hosts[h]: string="%s"%(d['hostvars'][h]['ansible_eth0']['ipv4']['address'])
string=string+" %s"%name for name in hosts[h]:
print string string=string+" %s"%name
print string
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment