Skip to content
GitLab
Menu
Projects
Groups
Snippets
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Menu
Open sidebar
Trust and Identity Incubator
mdx-saas-config
Commits
d083febb
Commit
d083febb
authored
Mar 15, 2022
by
Martin van Es
Browse files
Rename mdserver to mdsigner
parent
1ca680a0
Changes
9
Hide whitespace changes
Inline
Side-by-side
inventory/group_vars/all.yml
View file @
d083febb
...
...
@@ -7,7 +7,7 @@ hosts:
hostname
:
srv1
altname
:
'
server-md2.et2.com'
mds
erv
er
:
mds
ign
er
:
test
:
signer
:
hsm_signer
metadir
:
metadata/test
...
...
@@ -24,7 +24,7 @@ hosts:
hostname
:
srv2
altname
:
'
server-md2.et2.com'
mds
erv
er
:
mds
ign
er
:
edugain
:
signer
:
hsm_signer
metadir
:
metadata/edugain
...
...
@@ -50,7 +50,7 @@ hosts:
hostname
:
srv4
altname
:
'
server-md.example.com'
mds
erv
er
:
mds
ign
er
:
foobar
:
signer
:
normal_signer
metadir
:
metadata/test
...
...
inventory/inventory
View file @
d083febb
...
...
@@ -5,8 +5,8 @@ mdxcdn ansible_host=mdxcdn.pt-38.utr.surfcloud.nl ansible_user=ansible
alternative-mdx ansible_host=alternative-mdx.pt-76.utr.surfcloud.nl ansible_user=ansible ansible_ssh_private_key_file=.ssh/id_ansible
okeanos ansible_host=62.217.72.109 ansible_user=ansible ansible_ssh_private_key_file=.ssh/id_ansible
# Hosts that receive the mds
erv
er role
[mds
erv
er]
# Hosts that receive the mds
ign
er role
[mds
ign
er]
et2
mdxcdn
alternative-mdx
...
...
@@ -25,6 +25,6 @@ mdxcdn
# All hosts for base role
[all:children]
mds
erv
er
mds
ign
er
mdproxy
geodns
playbook.yml
View file @
d083febb
...
...
@@ -10,12 +10,12 @@
roles
:
-
{
role
:
geodns
,
tags
:
[
'
geodns'
]}
-
name
:
MDS
erv
er
hosts
:
mds
erv
er
-
name
:
MDS
ign
er
hosts
:
mds
ign
er
gather_facts
:
false
roles
:
-
{
role
:
apache
,
tags
:
[
'
apache'
]}
-
{
role
:
mds
erv
er
,
tags
:
[
'
mds
erv
er'
]}
-
{
role
:
mds
ign
er
,
tags
:
[
'
mds
ign
er'
]}
-
name
:
MDProxy
hosts
:
mdproxy
...
...
roles/apache/templates/md.conf.j2
View file @
d083febb
{% if hosts[inventory_hostname].get('mds
erv
er') %}
{% if hosts[inventory_hostname].get('mds
ign
er') %}
<VirtualHost *:80>
ServerName {{ hosts[inventory_hostname]['hostname'] }}-signer.{{ tld }}
{% if hosts[inventory_hostname].get('altname') %}
...
...
roles/mdserver/templates/mdserver.yaml.j2
deleted
100644 → 0
View file @
1ca680a0
---
{{ hosts[inventory_hostname]['mdserver'] | to_yaml }}
roles/mds
erv
er/handlers/main.yml
→
roles/mds
ign
er/handlers/main.yml
View file @
d083febb
---
-
name
:
enable mds
erv
er job
-
name
:
enable mds
ign
er job
systemd
:
name
:
"
mds
erv
er.service"
name
:
"
mds
ign
er.service"
enabled
:
true
state
:
"
restarted"
daemon_reload
:
true
roles/mds
erv
er/tasks/main.yml
→
roles/mds
ign
er/tasks/main.yml
View file @
d083febb
...
...
@@ -4,12 +4,12 @@
import_role
:
name
:
alternate-mdx
-
name
:
Create mds
erv
er config
-
name
:
Create mds
ign
er config
ansible.builtin.template
:
src
:
"
mds
erv
er.yaml.j2"
dest
:
"
{{
altmdx_dir
}}/mds
erv
er.yaml"
src
:
"
mds
ign
er.yaml.j2"
dest
:
"
{{
altmdx_dir
}}/mds
ign
er.yaml"
notify
:
-
"
enable
mds
erv
er
job"
-
"
enable
mds
ign
er
job"
-
name
:
Create metadata dir
ansible.builtin.file
:
...
...
@@ -22,7 +22,7 @@
path
:
"
{{
altmdx_metadir
}}/{{
item.key
}}"
state
:
directory
mode
:
'
0755'
with_dict
:
"
{{
hosts[inventory_hostname]['mds
erv
er']
}}"
with_dict
:
"
{{
hosts[inventory_hostname]['mds
ign
er']
}}"
-
name
:
Check existence of metadata signing cert
stat
:
...
...
@@ -39,9 +39,9 @@
creates
:
"
{{
altmdx_dir
}}/meta.crt"
when
:
not mdcert.stat.exists
-
name
:
Copy mds
erv
er service files
-
name
:
Copy mds
ign
er service files
ansible.builtin.template
:
src
:
"
mds
erv
er.service.j2"
dest
:
"
/etc/systemd/system/mds
erv
er.service"
src
:
"
mds
ign
er.service.j2"
dest
:
"
/etc/systemd/system/mds
ign
er.service"
notify
:
-
"
enable
mds
erv
er
job"
-
"
enable
mds
ign
er
job"
roles/mds
erv
er/templates/mds
erv
er.service.j2
→
roles/mds
ign
er/templates/mds
ign
er.service.j2
View file @
d083febb
[Unit]
Description=MDSer
ve
r
Description=MDS
ign
err
After=syslog.target network.target
[Service]
Type=simple
WorkingDirectory={{ altmdx_dir }}
ExecStart={{ altmdx_dir }}/bin/python -u mds
erv
er.py
ExecStart={{ altmdx_dir }}/bin/python -u mds
ign
er.py
ExecReload=/bin/kill -HUP $MAINPID
Restart=on-failure
RestartSec=10
SyslogIdentifier=mds
erv
er
SyslogIdentifier=mds
ign
er
[Install]
WantedBy=multi-user.target
roles/mdsigner/templates/mdsigner.yaml.j2
0 → 100644
View file @
d083febb
---
{{ hosts[inventory_hostname]['mdsigner'] | to_yaml }}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment