Skip to content
Snippets Groups Projects
Commit 233eb0b9 authored by Chris Hines's avatar Chris Hines
Browse files

Merge pull request #5 from CVL-GitHub/master

Request to merge 
parents b9d0a796 7d757c31
No related branches found
No related tags found
No related merge requests found
......@@ -24,3 +24,5 @@ Here is an example task (taken from setting up karaage):
We aim to make these roles run on all common linux platforms (both RedHat and Debian derived) but at the very least they should work on a CentOS 6 install.
Inventory is not included.
......@@ -119,5 +119,7 @@ comp-lzo
# Set log file verbosity.
verb 3
log openvpn.log
# Silence repeating messages
;mute 20
---
-
copy: "src={{ ansible_env['PWD'] }}/{{ inventory_hostname }}.cert/ca.crt dest=/etc/openvpn/ca.crt mode=644 owner=root group=root"
copy: "src=/tmp/{{ inventory_hostname }}/ca.crt dest=/etc/openvpn/ca.crt mode=644 owner=root group=root"
name: "Copying CA certificate"
-
copy: "src={{ ansible_env['PWD'] }}/{{ inventory_hostname }}.cert/{{ inventory_hostname }}.crt dest=/etc/openvpn/{{ inventory_hostname }}.crt mode=644 owner=root group=root"
copy: "src=/tmp/{{ inventory_hostname }}/{{ inventory_hostname }}.crt dest=/etc/openvpn/{{ inventory_hostname }}.crt mode=644 owner=root group=root"
name: "Copying Client certificate"
-
copy: "src={{ ansible_env['PWD'] }}/{{ inventory_hostname }}.cert/{{ inventory_hostname }}.key dest=/etc/openvpn/{{ inventory_hostname }}.key mode=600 owner=root group=root"
copy: "src=/tmp/{{ inventory_hostname }}/{{ inventory_hostname }}.key dest=/etc/openvpn/{{ inventory_hostname }}.key mode=600 owner=root group=root"
name: "Copying Client key"
-
copy: "src=client.conf dest=/etc/openvpn/client.conf owner=root group=root mode=644"
......@@ -16,11 +16,11 @@
replace: "dest=/etc/openvpn/client.conf regexp=vm-server replace={{ server | mandatory }}"
-
name: "Editing client.conf: Replacing Client Name"
replace: "dest=/etc/openvpn/client.conf regexp=vm-server replace={{ inventory_hostname }}"
replace: "dest=/etc/openvpn/client.conf regexp=vm-dummy replace={{ inventory_hostname }}"
-
name: "Starting openvpn"
service: "name=openvpn enabled=yes state=started"
-
local_action: "command rm -rf {{ ansible_env['PWD'] }}/{{ inventory_hostname }}.cert"
local_action: "command rm -rf /tmp/{{ inventory_hostname }}"
name: "Removing Cert Directory"
---
key_email: shahaan.ayyub@monash.edu
key_ou: MCC-R@CMON
......@@ -11,17 +11,14 @@
when: "cert.stat.exists == false"
-
delegate_to: "{{ server }}"
fetch: "src=/etc/easy-rsa/2.0/keys/{{ inventory_hostname }}.crt dest=certDir/ fail_on_missing=yes validate_md5=yes flat=yes"
fetch: "src=/etc/easy-rsa/2.0/keys/{{ inventory_hostname }}.crt dest=/tmp/{{ inventory_hostname }}/ fail_on_missing=yes validate_md5=yes flat=yes"
name: "Copy the Client Certificate to the master node"
-
delegate_to: "{{ server }}"
fetch: "src=/etc/easy-rsa/2.0/keys/{{ inventory_hostname }}.key dest=certDir/ fail_on_missing=yes validate_md5=yes flat=yes"
fetch: "src=/etc/easy-rsa/2.0/keys/{{ inventory_hostname }}.key dest=/tmp/{{ inventory_hostname }}/ fail_on_missing=yes validate_md5=yes flat=yes"
name: "Copy the Client Certificate to the master node"
-
delegate_to: "{{ server }}"
fetch: "src=/etc/easy-rsa/2.0/keys/ca.crt dest=certDir/ fail_on_missing=yes validate_md5=yes flat=yes"
fetch: "src=/etc/easy-rsa/2.0/keys/ca.crt dest=/tmp/{{ inventory_hostname }}/ fail_on_missing=yes validate_md5=yes flat=yes"
name: "Copy the Client Certificate to the master node"
-
local_action: "command mv certDir {{ ansible_env['PWD'] }}/{{ inventory_hostname }}.cert"
name: "Moving certDir"
......@@ -8,3 +8,10 @@
- defaultConfig
- paths:
- /mnt/nectar-nfs/root/ansible-config-root/ansible_cluster_in_a_box/roles/easy-rsa-CA/files
-
name: "Editing key_email in config file"
replace: dest=/etc/easy-rsa/2.0/vars regexp="shahaan.ayyub@monash.edu" replace={{ key_email }}
-
name: "Editing key_ou in config file"
replace: dest=/etc/easy-rsa/2.0/vars regexp="MCC-R@CMON" replace={{ key_ou }}
......@@ -2,6 +2,6 @@
-
include: installEasyRsa.yml
-
include: copyConfigurationFile.yml
include: copyConfigurationFile.yml
-
include: buildClientCert.yml
---
key_email: shahaan.ayyub@monash.edu
key_ou: MCC-R@CMON
......@@ -8,3 +8,10 @@
- defaultConfig
- paths:
- /mnt/nectar-nfs/root/ansible-config-root/ansible_cluster_in_a_box/roles/easy-rsa-CA/files
-
name: "Editing key_email in config file"
replace: dest=/etc/easy-rsa/2.0/vars regexp="shahaan.ayyub@monash.edu" replace={{ key_email }}
-
name: "Editing key_ou in config file"
replace: dest=/etc/easy-rsa/2.0/vars regexp="MCC-R@CMON" replace={{ key_ou }}
File moved
---
dependencies:
- { role: commonVars }
- { role: etcHosts }
......@@ -19,9 +19,9 @@ for group in d['groups'].keys():
hosts[h] = ['%s.%s'%(h,domain),'%s-%s.%s'%(group,i,domain),'%s'%h,'%s-%s'%(group,i)]
i=i+1
for h in hosts.keys():
string="%s"%(d['hostvars'][h]['ansible_eth0']['ipv4']['address'])
for name in hosts[h]:
string=string+" %s"%name
print string
if d['hostvars'].has_key(h):
string="%s"%(d['hostvars'][h]['ansible_eth0']['ipv4']['address'])
for name in hosts[h]:
string=string+" %s"%name
print string
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment