remove key from trusted.gpg only if file is present
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
This commit is contained in:
parent
9f2125e287
commit
83705a48b8
|
@ -1,9 +1,17 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
|
- name: Look for /etc/apt/trusted.gpg
|
||||||
|
stat:
|
||||||
|
path: /etc/apt/trusted.gpg
|
||||||
|
register: apt_trusted_gpg
|
||||||
|
tags:
|
||||||
|
- apt
|
||||||
|
|
||||||
- name: Evolix GPG embedded key is absent
|
- name: Evolix GPG embedded key is absent
|
||||||
apt_key:
|
apt_key:
|
||||||
id: "B8612B5D"
|
id: "B8612B5D"
|
||||||
state: absent
|
state: absent
|
||||||
|
when: apt_trusted_gpg.stat.exists
|
||||||
tags:
|
tags:
|
||||||
- apt
|
- apt
|
||||||
|
|
||||||
|
|
|
@ -8,10 +8,19 @@
|
||||||
- elasticsearch
|
- elasticsearch
|
||||||
- packages
|
- packages
|
||||||
|
|
||||||
|
- name: Look for /etc/apt/trusted.gpg
|
||||||
|
stat:
|
||||||
|
path: /etc/apt/trusted.gpg
|
||||||
|
register: apt_trusted_gpg
|
||||||
|
tags:
|
||||||
|
- elasticsearch
|
||||||
|
- packages
|
||||||
|
|
||||||
- name: Elastic GPG embedded key is absent
|
- name: Elastic GPG embedded key is absent
|
||||||
apt_key:
|
apt_key:
|
||||||
id: "D88E42B4"
|
id: "D88E42B4"
|
||||||
state: absent
|
state: absent
|
||||||
|
when: apt_trusted_gpg.stat.exists
|
||||||
tags:
|
tags:
|
||||||
- elasticsearch
|
- elasticsearch
|
||||||
- packages
|
- packages
|
||||||
|
|
|
@ -37,10 +37,16 @@
|
||||||
|
|
||||||
- name: HPE Smart Storage Administrator (ssacli) is present
|
- name: HPE Smart Storage Administrator (ssacli) is present
|
||||||
block:
|
block:
|
||||||
|
- name: Look for /etc/apt/trusted.gpg
|
||||||
|
stat:
|
||||||
|
path: /etc/apt/trusted.gpg
|
||||||
|
register: apt_trusted_gpg
|
||||||
|
|
||||||
- name: HPE GPG is absent in embedded database
|
- name: HPE GPG is absent in embedded database
|
||||||
apt_key:
|
apt_key:
|
||||||
id: "26C2B797"
|
id: "26C2B797"
|
||||||
state: absent
|
state: absent
|
||||||
|
when: apt_trusted_gpg.stat.exists
|
||||||
|
|
||||||
- name: HPE GPG key is installed
|
- name: HPE GPG key is installed
|
||||||
copy:
|
copy:
|
||||||
|
@ -100,11 +106,18 @@
|
||||||
|
|
||||||
- name: MegaRAID SAS package is present
|
- name: MegaRAID SAS package is present
|
||||||
block:
|
block:
|
||||||
|
- name: Look for /etc/apt/trusted.gpg
|
||||||
|
stat:
|
||||||
|
path: /etc/apt/trusted.gpg
|
||||||
|
register: apt_trusted_gpg
|
||||||
|
|
||||||
- name: HWRaid GPG embedded key is absent
|
- name: HWRaid GPG embedded key is absent
|
||||||
apt_key:
|
apt_key:
|
||||||
id: "23B3D3B4"
|
id: "23B3D3B4"
|
||||||
state: absent
|
state: absent
|
||||||
when: ansible_distribution_major_version is version('9', '>=')
|
when:
|
||||||
|
- apt_trusted_gpg.stat.exists
|
||||||
|
- ansible_distribution_major_version is version('9', '>=')
|
||||||
|
|
||||||
- name: HWRaid GPG key is installed
|
- name: HWRaid GPG key is installed
|
||||||
copy:
|
copy:
|
||||||
|
|
|
@ -8,10 +8,19 @@
|
||||||
- filebeat
|
- filebeat
|
||||||
- packages
|
- packages
|
||||||
|
|
||||||
|
- name: Look for /etc/apt/trusted.gpg
|
||||||
|
stat:
|
||||||
|
path: /etc/apt/trusted.gpg
|
||||||
|
register: apt_trusted_gpg
|
||||||
|
tags:
|
||||||
|
- filebeat
|
||||||
|
- packages
|
||||||
|
|
||||||
- name: Elastic GPG embedded key is absent
|
- name: Elastic GPG embedded key is absent
|
||||||
apt_key:
|
apt_key:
|
||||||
id: "D88E42B4"
|
id: "D88E42B4"
|
||||||
state: absent
|
state: absent
|
||||||
|
when: apt_trusted_gpg.stat.exists
|
||||||
tags:
|
tags:
|
||||||
- filebeat
|
- filebeat
|
||||||
- packages
|
- packages
|
||||||
|
|
|
@ -1,9 +1,18 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
|
- name: Look for /etc/apt/trusted.gpg
|
||||||
|
stat:
|
||||||
|
path: /etc/apt/trusted.gpg
|
||||||
|
register: apt_trusted_gpg
|
||||||
|
tags:
|
||||||
|
- packages
|
||||||
|
- fluentd
|
||||||
|
|
||||||
- name: Fluentd GPG embedded key is absent
|
- name: Fluentd GPG embedded key is absent
|
||||||
apt_key:
|
apt_key:
|
||||||
id: "AB97ACBE"
|
id: "AB97ACBE"
|
||||||
state: absent
|
state: absent
|
||||||
|
when: apt_trusted_gpg.stat.exists
|
||||||
tags:
|
tags:
|
||||||
- packages
|
- packages
|
||||||
- fluentd
|
- fluentd
|
||||||
|
|
|
@ -5,10 +5,16 @@
|
||||||
# http://mirrors.jenkins.io/.*
|
# http://mirrors.jenkins.io/.*
|
||||||
# http://jenkins.mirror.isppower.de/.*
|
# http://jenkins.mirror.isppower.de/.*
|
||||||
|
|
||||||
|
- name: Look for /etc/apt/trusted.gpg
|
||||||
|
stat:
|
||||||
|
path: /etc/apt/trusted.gpg
|
||||||
|
register: apt_trusted_gpg
|
||||||
|
|
||||||
- name: Jenkins GPG embedded key is absent
|
- name: Jenkins GPG embedded key is absent
|
||||||
apt_key:
|
apt_key:
|
||||||
id: "D50582E6"
|
id: "D50582E6"
|
||||||
state: absent
|
state: absent
|
||||||
|
when: apt_trusted_gpg.stat.exists
|
||||||
|
|
||||||
- name: Add Jenkins GPG key
|
- name: Add Jenkins GPG key
|
||||||
copy:
|
copy:
|
||||||
|
|
|
@ -8,10 +8,19 @@
|
||||||
- kibana
|
- kibana
|
||||||
- packages
|
- packages
|
||||||
|
|
||||||
|
- name: Look for /etc/apt/trusted.gpg
|
||||||
|
stat:
|
||||||
|
path: /etc/apt/trusted.gpg
|
||||||
|
register: apt_trusted_gpg
|
||||||
|
tags:
|
||||||
|
- kibana
|
||||||
|
- packages
|
||||||
|
|
||||||
- name: Elastic GPG embedded key is absent
|
- name: Elastic GPG embedded key is absent
|
||||||
apt_key:
|
apt_key:
|
||||||
id: "D88E42B4"
|
id: "D88E42B4"
|
||||||
state: absent
|
state: absent
|
||||||
|
when: apt_trusted_gpg.stat.exists
|
||||||
tags:
|
tags:
|
||||||
- kibana
|
- kibana
|
||||||
- packages
|
- packages
|
||||||
|
@ -41,6 +50,7 @@
|
||||||
name: kibana
|
name: kibana
|
||||||
state: present
|
state: present
|
||||||
tags:
|
tags:
|
||||||
|
- kibana
|
||||||
- packages
|
- packages
|
||||||
|
|
||||||
- name: kibana server host configuration
|
- name: kibana server host configuration
|
||||||
|
@ -50,6 +60,8 @@
|
||||||
regexp: '^server.host:'
|
regexp: '^server.host:'
|
||||||
insertafter: '^#server.host:'
|
insertafter: '^#server.host:'
|
||||||
notify: restart kibana
|
notify: restart kibana
|
||||||
|
tags:
|
||||||
|
- kibana
|
||||||
|
|
||||||
- name: kibana server basepath configuration
|
- name: kibana server basepath configuration
|
||||||
lineinfile:
|
lineinfile:
|
||||||
|
@ -58,6 +70,8 @@
|
||||||
regexp: '^server.basePath:'
|
regexp: '^server.basePath:'
|
||||||
insertafter: '^#server.basePath:'
|
insertafter: '^#server.basePath:'
|
||||||
notify: restart kibana
|
notify: restart kibana
|
||||||
|
tags:
|
||||||
|
- kibana
|
||||||
|
|
||||||
- name: kibana log destination is present
|
- name: kibana log destination is present
|
||||||
file:
|
file:
|
||||||
|
@ -66,6 +80,8 @@
|
||||||
group: kibana
|
group: kibana
|
||||||
mode: "0750"
|
mode: "0750"
|
||||||
state: directory
|
state: directory
|
||||||
|
tags:
|
||||||
|
- kibana
|
||||||
|
|
||||||
- name: kibana log messages go to custom file
|
- name: kibana log messages go to custom file
|
||||||
lineinfile:
|
lineinfile:
|
||||||
|
@ -74,12 +90,16 @@
|
||||||
regexp: '^logging.dest:'
|
regexp: '^logging.dest:'
|
||||||
insertafter: '^#logging.dest:'
|
insertafter: '^#logging.dest:'
|
||||||
notify: restart kibana
|
notify: restart kibana
|
||||||
|
tags:
|
||||||
|
- kibana
|
||||||
|
|
||||||
- name: Kibana service is enabled and started
|
- name: Kibana service is enabled and started
|
||||||
systemd:
|
systemd:
|
||||||
name: kibana
|
name: kibana
|
||||||
enabled: yes
|
enabled: yes
|
||||||
state: started
|
state: started
|
||||||
|
tags:
|
||||||
|
- kibana
|
||||||
|
|
||||||
- name: Logrotate configuration is enabled
|
- name: Logrotate configuration is enabled
|
||||||
copy:
|
copy:
|
||||||
|
@ -88,6 +108,8 @@
|
||||||
mode: "0644"
|
mode: "0644"
|
||||||
owner: root
|
owner: root
|
||||||
group: root
|
group: root
|
||||||
|
tags:
|
||||||
|
- kibana
|
||||||
|
|
||||||
# - name: Get mount options for /usr partition
|
# - name: Get mount options for /usr partition
|
||||||
# shell: "mount | grep 'on /usr type'"
|
# shell: "mount | grep 'on /usr type'"
|
||||||
|
|
|
@ -8,10 +8,19 @@
|
||||||
- logstash
|
- logstash
|
||||||
- packages
|
- packages
|
||||||
|
|
||||||
|
- name: Look for /etc/apt/trusted.gpg
|
||||||
|
stat:
|
||||||
|
path: /etc/apt/trusted.gpg
|
||||||
|
register: apt_trusted_gpg
|
||||||
|
tags:
|
||||||
|
- logstash
|
||||||
|
- packages
|
||||||
|
|
||||||
- name: Elastic GPG embedded key is absent
|
- name: Elastic GPG embedded key is absent
|
||||||
apt_key:
|
apt_key:
|
||||||
id: "D88E42B4"
|
id: "D88E42B4"
|
||||||
state: absent
|
state: absent
|
||||||
|
when: apt_trusted_gpg.stat.exists
|
||||||
tags:
|
tags:
|
||||||
- logstash
|
- logstash
|
||||||
- packages
|
- packages
|
||||||
|
@ -41,12 +50,15 @@
|
||||||
name: logstash
|
name: logstash
|
||||||
state: present
|
state: present
|
||||||
tags:
|
tags:
|
||||||
|
- logstash
|
||||||
- packages
|
- packages
|
||||||
|
|
||||||
- name: Logstash service is enabled
|
- name: Logstash service is enabled
|
||||||
systemd:
|
systemd:
|
||||||
name: logstash
|
name: logstash
|
||||||
enabled: yes
|
enabled: yes
|
||||||
|
tags:
|
||||||
|
- logstash
|
||||||
|
|
||||||
- name: JVM Heap size (min) is set
|
- name: JVM Heap size (min) is set
|
||||||
lineinfile:
|
lineinfile:
|
||||||
|
@ -54,6 +66,7 @@
|
||||||
regexp: "^-Xms"
|
regexp: "^-Xms"
|
||||||
line: "-Xms{{ logstash_jvm_xms }}"
|
line: "-Xms{{ logstash_jvm_xms }}"
|
||||||
tags:
|
tags:
|
||||||
|
- logstash
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: JVM Heap size (max) is set
|
- name: JVM Heap size (max) is set
|
||||||
|
@ -62,6 +75,7 @@
|
||||||
regexp: "^-Xmx"
|
regexp: "^-Xmx"
|
||||||
line: "-Xmx{{ logstash_jvm_xmx }}"
|
line: "-Xmx{{ logstash_jvm_xmx }}"
|
||||||
tags:
|
tags:
|
||||||
|
- logstash
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: Add a configuration
|
- name: Add a configuration
|
||||||
|
@ -80,6 +94,9 @@
|
||||||
- "templates/logstash/logstash.default.conf.j2"
|
- "templates/logstash/logstash.default.conf.j2"
|
||||||
- "templates/logstash.default.conf.j2"
|
- "templates/logstash.default.conf.j2"
|
||||||
register: logstash_template
|
register: logstash_template
|
||||||
|
tags:
|
||||||
|
- logstash
|
||||||
|
- config
|
||||||
|
|
||||||
- debug:
|
- debug:
|
||||||
var: logstash_template
|
var: logstash_template
|
||||||
|
|
|
@ -8,10 +8,19 @@
|
||||||
- metricbeat
|
- metricbeat
|
||||||
- packages
|
- packages
|
||||||
|
|
||||||
|
- name: Look for /etc/apt/trusted.gpg
|
||||||
|
stat:
|
||||||
|
path: /etc/apt/trusted.gpg
|
||||||
|
register: apt_trusted_gpg
|
||||||
|
tags:
|
||||||
|
- metricbeat
|
||||||
|
- packages
|
||||||
|
|
||||||
- name: Elastic GPG embedded key is absent
|
- name: Elastic GPG embedded key is absent
|
||||||
apt_key:
|
apt_key:
|
||||||
id: "D88E42B4"
|
id: "D88E42B4"
|
||||||
state: absent
|
state: absent
|
||||||
|
when: apt_trusted_gpg.stat.exists
|
||||||
tags:
|
tags:
|
||||||
- metricbeat
|
- metricbeat
|
||||||
- packages
|
- packages
|
||||||
|
|
|
@ -1,9 +1,15 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
|
- name: Look for /etc/apt/trusted.gpg
|
||||||
|
stat:
|
||||||
|
path: /etc/apt/trusted.gpg
|
||||||
|
register: apt_trusted_gpg
|
||||||
|
|
||||||
- name: MongoDB GPG embedded key is absent
|
- name: MongoDB GPG embedded key is absent
|
||||||
apt_key:
|
apt_key:
|
||||||
id: "B8612B5D"
|
id: "B8612B5D"
|
||||||
state: absent
|
state: absent
|
||||||
|
when: apt_trusted_gpg.stat.exists
|
||||||
|
|
||||||
- name: Add MongoDB GPG key
|
- name: Add MongoDB GPG key
|
||||||
copy:
|
copy:
|
||||||
|
|
|
@ -1,9 +1,15 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
|
- name: Look for /etc/apt/trusted.gpg
|
||||||
|
stat:
|
||||||
|
path: /etc/apt/trusted.gpg
|
||||||
|
register: apt_trusted_gpg
|
||||||
|
|
||||||
- name: NewRelic GPG embedded key is absent
|
- name: NewRelic GPG embedded key is absent
|
||||||
apt_key:
|
apt_key:
|
||||||
id: "548C16BF"
|
id: "548C16BF"
|
||||||
state: absent
|
state: absent
|
||||||
|
when: apt_trusted_gpg.stat.exists
|
||||||
|
|
||||||
- name: Add NewRelic GPG key
|
- name: Add NewRelic GPG key
|
||||||
copy:
|
copy:
|
||||||
|
|
|
@ -7,11 +7,22 @@
|
||||||
tags:
|
tags:
|
||||||
- system
|
- system
|
||||||
- packages
|
- packages
|
||||||
|
- nodejs
|
||||||
|
|
||||||
|
- name: Look for /etc/apt/trusted.gpg
|
||||||
|
stat:
|
||||||
|
path: /etc/apt/trusted.gpg
|
||||||
|
register: apt_trusted_gpg
|
||||||
|
tags:
|
||||||
|
- system
|
||||||
|
- packages
|
||||||
|
- nodejs
|
||||||
|
|
||||||
- name: NodeJS GPG embedded key is absent
|
- name: NodeJS GPG embedded key is absent
|
||||||
apt_key:
|
apt_key:
|
||||||
id: "68576280"
|
id: "68576280"
|
||||||
state: absent
|
state: absent
|
||||||
|
when: apt_trusted_gpg.stat.exists
|
||||||
tags:
|
tags:
|
||||||
- system
|
- system
|
||||||
- packages
|
- packages
|
||||||
|
|
|
@ -1,9 +1,20 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
|
- name: Look for /etc/apt/trusted.gpg
|
||||||
|
stat:
|
||||||
|
path: /etc/apt/trusted.gpg
|
||||||
|
register: apt_trusted_gpg
|
||||||
|
tags:
|
||||||
|
- system
|
||||||
|
- packages
|
||||||
|
- nodejs
|
||||||
|
- yarn
|
||||||
|
|
||||||
- name: NodeJS GPG embedded key is absent
|
- name: NodeJS GPG embedded key is absent
|
||||||
apt_key:
|
apt_key:
|
||||||
id: "86E50310"
|
id: "86E50310"
|
||||||
state: absent
|
state: absent
|
||||||
|
when: apt_trusted_gpg.stat.exists
|
||||||
tags:
|
tags:
|
||||||
- system
|
- system
|
||||||
- packages
|
- packages
|
||||||
|
|
|
@ -3,10 +3,16 @@
|
||||||
- set_fact:
|
- set_fact:
|
||||||
percona__apt_config_package_file: "percona-release_latest.{{ ansible_distribution_release }}_all.deb"
|
percona__apt_config_package_file: "percona-release_latest.{{ ansible_distribution_release }}_all.deb"
|
||||||
|
|
||||||
|
- name: Look for /etc/apt/trusted.gpg
|
||||||
|
stat:
|
||||||
|
path: /etc/apt/trusted.gpg
|
||||||
|
register: apt_trusted_gpg
|
||||||
|
|
||||||
- name: Percona GPG embedded key is absent
|
- name: Percona GPG embedded key is absent
|
||||||
apt_key:
|
apt_key:
|
||||||
id: "8507EFA5"
|
id: "8507EFA5"
|
||||||
state: absent
|
state: absent
|
||||||
|
when: apt_trusted_gpg.stat.exists
|
||||||
|
|
||||||
- name: Add Percona GPG key
|
- name: Add Percona GPG key
|
||||||
copy:
|
copy:
|
||||||
|
|
|
@ -13,10 +13,16 @@
|
||||||
repo: "deb http://apt.postgresql.org/pub/repos/apt/ {{ansible_distribution_release}}-pgdg main"
|
repo: "deb http://apt.postgresql.org/pub/repos/apt/ {{ansible_distribution_release}}-pgdg main"
|
||||||
update_cache: yes
|
update_cache: yes
|
||||||
|
|
||||||
|
- name: Look for /etc/apt/trusted.gpg
|
||||||
|
stat:
|
||||||
|
path: /etc/apt/trusted.gpg
|
||||||
|
register: apt_trusted_gpg
|
||||||
|
|
||||||
- name: PGDG GPG embedded key is absent
|
- name: PGDG GPG embedded key is absent
|
||||||
apt_key:
|
apt_key:
|
||||||
id: "ACCC4CF8"
|
id: "ACCC4CF8"
|
||||||
state: absent
|
state: absent
|
||||||
|
when: apt_trusted_gpg.stat.exists
|
||||||
|
|
||||||
- name: Add PGDG GPG key
|
- name: Add PGDG GPG key
|
||||||
copy:
|
copy:
|
||||||
|
|
Loading…
Reference in a new issue