evolix/ansible-roles
22
2
Fork 2
Code Issues 61 Pull requests 19 Releases 33 Wiki Activity

remove key from trusted.gpg only if file is present
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse source
This commit is contained in:
Jérémy Lecour 2021-05-06 10:42:12 +02:00 committed by Jérémy Lecour
parent 9f2125e287
commit 83705a48b8
15 changed files with 192 additions and 44 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
apt/tasks/evolix_public.yml
View file

@ -1,9 +1,17 @@
--- ---
- name: Look for /etc/apt/trusted.gpg
stat:
path: /etc/apt/trusted.gpg
register: apt_trusted_gpg
tags:
- apt
- name: Evolix GPG embedded key is absent - name: Evolix GPG embedded key is absent
apt_key: apt_key:
id: "B8612B5D" id: "B8612B5D"
state: absent state: absent
when: apt_trusted_gpg.stat.exists
tags: tags:
- apt - apt

29
elasticsearch/tasks/packages.yml
View file

@ -5,16 +5,25 @@
name: apt-transport-https name: apt-transport-https
state: present state: present
tags: tags:
- elasticsearch - elasticsearch
- packages - packages
- name: Look for /etc/apt/trusted.gpg
stat:
path: /etc/apt/trusted.gpg
register: apt_trusted_gpg
tags:
- elasticsearch
- packages
- name: Elastic GPG embedded key is absent - name: Elastic GPG embedded key is absent
apt_key: apt_key:
id: "D88E42B4" id: "D88E42B4"
state: absent state: absent
when: apt_trusted_gpg.stat.exists
tags: tags:
- elasticsearch - elasticsearch
- packages - packages
- name: Elastic GPG key is installed - name: Elastic GPG key is installed
copy: copy:
@ -23,8 +32,8 @@
force: yes force: yes
mode: "0644" mode: "0644"
tags: tags:
- elasticsearch - elasticsearch
- packages - packages
- name: Elastic sources list is available - name: Elastic sources list is available
apt_repository: apt_repository:
@ -33,16 +42,16 @@
state: present state: present
update_cache: yes update_cache: yes
tags: tags:
- elasticsearch - elasticsearch
- packages - packages
- name: Elasticsearch is installed - name: Elasticsearch is installed
apt: apt:
name: elasticsearch name: elasticsearch
state: present state: present
tags: tags:
- elasticsearch - elasticsearch
- packages - packages
- name: Elasticsearch service is enabled - name: Elasticsearch service is enabled
service: service:

15
evolinux-base/tasks/hardware.yml
View file

@ -37,10 +37,16 @@
- name: HPE Smart Storage Administrator (ssacli) is present - name: HPE Smart Storage Administrator (ssacli) is present
block: block:
- name: Look for /etc/apt/trusted.gpg
stat:
path: /etc/apt/trusted.gpg
register: apt_trusted_gpg
- name: HPE GPG is absent in embedded database - name: HPE GPG is absent in embedded database
apt_key: apt_key:
id: "26C2B797" id: "26C2B797"
state: absent state: absent
when: apt_trusted_gpg.stat.exists
- name: HPE GPG key is installed - name: HPE GPG key is installed
copy: copy:
@ -100,11 +106,18 @@
- name: MegaRAID SAS package is present - name: MegaRAID SAS package is present
block: block:
- name: Look for /etc/apt/trusted.gpg
stat:
path: /etc/apt/trusted.gpg
register: apt_trusted_gpg
- name: HWRaid GPG embedded key is absent - name: HWRaid GPG embedded key is absent
apt_key: apt_key:
id: "23B3D3B4" id: "23B3D3B4"
state: absent state: absent
when: ansible_distribution_major_version is version('9', '>=') when:
- apt_trusted_gpg.stat.exists
- ansible_distribution_major_version is version('9', '>=')
- name: HWRaid GPG key is installed - name: HWRaid GPG key is installed
copy: copy:

25
filebeat/tasks/main.yml
View file

@ -5,16 +5,25 @@
name: apt-transport-https name: apt-transport-https
state: present state: present
tags: tags:
- filebeat - filebeat
- packages - packages
- name: Look for /etc/apt/trusted.gpg
stat:
path: /etc/apt/trusted.gpg
register: apt_trusted_gpg
tags:
- filebeat
- packages
- name: Elastic GPG embedded key is absent - name: Elastic GPG embedded key is absent
apt_key: apt_key:
id: "D88E42B4" id: "D88E42B4"
state: absent state: absent
when: apt_trusted_gpg.stat.exists
tags: tags:
- filebeat - filebeat
- packages - packages
- name: Elastic GPG key is installed - name: Elastic GPG key is installed
copy: copy:
@ -23,8 +32,8 @@
force: yes force: yes
mode: "0644" mode: "0644"
tags: tags:
- filebeat - filebeat
- packages - packages
- name: Elastic sources list is available - name: Elastic sources list is available
apt_repository: apt_repository:
@ -33,8 +42,8 @@
state: present state: present
update_cache: yes update_cache: yes
tags: tags:
- filebeat - filebeat
- packages - packages
- name: Filebeat is installed - name: Filebeat is installed
apt: apt:

9
fluentd/tasks/main.yml
View file

@ -1,9 +1,18 @@
--- ---
- name: Look for /etc/apt/trusted.gpg
stat:
path: /etc/apt/trusted.gpg
register: apt_trusted_gpg
tags:
- packages
- fluentd
- name: Fluentd GPG embedded key is absent - name: Fluentd GPG embedded key is absent
apt_key: apt_key:
id: "AB97ACBE" id: "AB97ACBE"
state: absent state: absent
when: apt_trusted_gpg.stat.exists
tags: tags:
- packages - packages
- fluentd - fluentd

6
jenkins/tasks/main.yml
View file

@ -5,10 +5,16 @@
# http://mirrors.jenkins.io/.* # http://mirrors.jenkins.io/.*
# http://jenkins.mirror.isppower.de/.* # http://jenkins.mirror.isppower.de/.*
- name: Look for /etc/apt/trusted.gpg
stat:
path: /etc/apt/trusted.gpg
register: apt_trusted_gpg
- name: Jenkins GPG embedded key is absent - name: Jenkins GPG embedded key is absent
apt_key: apt_key:
id: "D50582E6" id: "D50582E6"
state: absent state: absent
when: apt_trusted_gpg.stat.exists
- name: Add Jenkins GPG key - name: Add Jenkins GPG key
copy: copy:

38
kibana/tasks/main.yml
View file

@ -5,16 +5,25 @@
name: apt-transport-https name: apt-transport-https
state: present state: present
tags: tags:
- kibana - kibana
- packages - packages
- name: Look for /etc/apt/trusted.gpg
stat:
path: /etc/apt/trusted.gpg
register: apt_trusted_gpg
tags:
- kibana
- packages
- name: Elastic GPG embedded key is absent - name: Elastic GPG embedded key is absent
apt_key: apt_key:
id: "D88E42B4" id: "D88E42B4"
state: absent state: absent
when: apt_trusted_gpg.stat.exists
tags: tags:
- kibana - kibana
- packages - packages
- name: Elastic GPG key is installed - name: Elastic GPG key is installed
copy: copy:
@ -23,8 +32,8 @@
force: yes force: yes
mode: "0644" mode: "0644"
tags: tags:
- kibana - kibana
- packages - packages
- name: Elastic sources list is available - name: Elastic sources list is available
apt_repository: apt_repository:
@ -33,14 +42,15 @@
state: present state: present
update_cache: yes update_cache: yes
tags: tags:
- kibana - kibana
- packages - packages
- name: Kibana is installed - name: Kibana is installed
apt: apt:
name: kibana name: kibana
state: present state: present
tags: tags:
- kibana
- packages - packages
- name: kibana server host configuration - name: kibana server host configuration
@ -50,6 +60,8 @@
regexp: '^server.host:' regexp: '^server.host:'
insertafter: '^#server.host:' insertafter: '^#server.host:'
notify: restart kibana notify: restart kibana
tags:
- kibana
- name: kibana server basepath configuration - name: kibana server basepath configuration
lineinfile: lineinfile:
@ -58,6 +70,8 @@
regexp: '^server.basePath:' regexp: '^server.basePath:'
insertafter: '^#server.basePath:' insertafter: '^#server.basePath:'
notify: restart kibana notify: restart kibana
tags:
- kibana
- name: kibana log destination is present - name: kibana log destination is present
file: file:
@ -66,6 +80,8 @@
group: kibana group: kibana
mode: "0750" mode: "0750"
state: directory state: directory
tags:
- kibana
- name: kibana log messages go to custom file - name: kibana log messages go to custom file
lineinfile: lineinfile:
@ -74,12 +90,16 @@
regexp: '^logging.dest:' regexp: '^logging.dest:'
insertafter: '^#logging.dest:' insertafter: '^#logging.dest:'
notify: restart kibana notify: restart kibana
tags:
- kibana
- name: Kibana service is enabled and started - name: Kibana service is enabled and started
systemd: systemd:
name: kibana name: kibana
enabled: yes enabled: yes
state: started state: started
tags:
- kibana
- name: Logrotate configuration is enabled - name: Logrotate configuration is enabled
copy: copy:
@ -88,6 +108,8 @@
mode: "0644" mode: "0644"
owner: root owner: root
group: root group: root
tags:
- kibana
# - name: Get mount options for /usr partition # - name: Get mount options for /usr partition
# shell: "mount | grep 'on /usr type'" # shell: "mount | grep 'on /usr type'"

33
logstash/tasks/main.yml
View file

@ -5,16 +5,25 @@
name: apt-transport-https name: apt-transport-https
state: present state: present
tags: tags:
- logstash - logstash
- packages - packages
- name: Look for /etc/apt/trusted.gpg
stat:
path: /etc/apt/trusted.gpg
register: apt_trusted_gpg
tags:
- logstash
- packages
- name: Elastic GPG embedded key is absent - name: Elastic GPG embedded key is absent
apt_key: apt_key:
id: "D88E42B4" id: "D88E42B4"
state: absent state: absent
when: apt_trusted_gpg.stat.exists
tags: tags:
- logstash - logstash
- packages - packages
- name: Elastic GPG key is installed - name: Elastic GPG key is installed
copy: copy:
@ -23,8 +32,8 @@
force: yes force: yes
mode: "0644" mode: "0644"
tags: tags:
- logstash - logstash
- packages - packages
- name: Elastic sources list is available - name: Elastic sources list is available
apt_repository: apt_repository:
@ -33,20 +42,23 @@
state: present state: present
update_cache: yes update_cache: yes
tags: tags:
- logstash - logstash
- packages - packages
- name: Logstash is installed - name: Logstash is installed
apt: apt:
name: logstash name: logstash
state: present state: present
tags: tags:
- logstash
- packages - packages
- name: Logstash service is enabled - name: Logstash service is enabled
systemd: systemd:
name: logstash name: logstash
enabled: yes enabled: yes
tags:
- logstash
- name: JVM Heap size (min) is set - name: JVM Heap size (min) is set
lineinfile: lineinfile:
@ -54,6 +66,7 @@
regexp: "^-Xms" regexp: "^-Xms"
line: "-Xms{{ logstash_jvm_xms }}" line: "-Xms{{ logstash_jvm_xms }}"
tags: tags:
- logstash
- config - config
- name: JVM Heap size (max) is set - name: JVM Heap size (max) is set
@ -62,6 +75,7 @@
regexp: "^-Xmx" regexp: "^-Xmx"
line: "-Xmx{{ logstash_jvm_xmx }}" line: "-Xmx{{ logstash_jvm_xmx }}"
tags: tags:
- logstash
- config - config
- name: Add a configuration - name: Add a configuration
@ -80,6 +94,9 @@
- "templates/logstash/logstash.default.conf.j2" - "templates/logstash/logstash.default.conf.j2"
- "templates/logstash.default.conf.j2" - "templates/logstash.default.conf.j2"
register: logstash_template register: logstash_template
tags:
- logstash
- config
- debug: - debug:
var: logstash_template var: logstash_template

25
metricbeat/tasks/main.yml
View file

@ -5,16 +5,25 @@
name: apt-transport-https name: apt-transport-https
state: present state: present
tags: tags:
- metricbeat - metricbeat
- packages - packages
- name: Look for /etc/apt/trusted.gpg
stat:
path: /etc/apt/trusted.gpg
register: apt_trusted_gpg
tags:
- metricbeat
- packages
- name: Elastic GPG embedded key is absent - name: Elastic GPG embedded key is absent
apt_key: apt_key:
id: "D88E42B4" id: "D88E42B4"
state: absent state: absent
when: apt_trusted_gpg.stat.exists
tags: tags:
- metricbeat - metricbeat
- packages - packages
- name: Elastic GPG key is installed - name: Elastic GPG key is installed
copy: copy:
@ -23,8 +32,8 @@
force: yes force: yes
mode: "0644" mode: "0644"
tags: tags:
- metricbeat - metricbeat
- packages - packages
- name: Elastic sources list is available - name: Elastic sources list is available
apt_repository: apt_repository:
@ -33,8 +42,8 @@
state: present state: present
update_cache: yes update_cache: yes
tags: tags:
- metricbeat - metricbeat
- packages - packages
- name: Metricbeat is installed - name: Metricbeat is installed
apt: apt:

6
mongodb/tasks/main_buster.yml
View file

@ -1,9 +1,15 @@
--- ---
- name: Look for /etc/apt/trusted.gpg
stat:
path: /etc/apt/trusted.gpg
register: apt_trusted_gpg
- name: MongoDB GPG embedded key is absent - name: MongoDB GPG embedded key is absent
apt_key: apt_key:
id: "B8612B5D" id: "B8612B5D"
state: absent state: absent
when: apt_trusted_gpg.stat.exists
- name: Add MongoDB GPG key - name: Add MongoDB GPG key
copy: copy:

6
newrelic/tasks/sources.yml
View file

@ -1,9 +1,15 @@
--- ---
- name: Look for /etc/apt/trusted.gpg
stat:
path: /etc/apt/trusted.gpg
register: apt_trusted_gpg
- name: NewRelic GPG embedded key is absent - name: NewRelic GPG embedded key is absent
apt_key: apt_key:
id: "548C16BF" id: "548C16BF"
state: absent state: absent
when: apt_trusted_gpg.stat.exists
- name: Add NewRelic GPG key - name: Add NewRelic GPG key
copy: copy:

11
nodejs/tasks/main.yml
View file

@ -7,11 +7,22 @@
tags: tags:
- system - system
- packages - packages
- nodejs
- name: Look for /etc/apt/trusted.gpg
stat:
path: /etc/apt/trusted.gpg
register: apt_trusted_gpg
tags:
- system
- packages
- nodejs
- name: NodeJS GPG embedded key is absent - name: NodeJS GPG embedded key is absent
apt_key: apt_key:
id: "68576280" id: "68576280"
state: absent state: absent
when: apt_trusted_gpg.stat.exists
tags: tags:
- system - system
- packages - packages

13
nodejs/tasks/yarn.yml
View file

@ -1,9 +1,20 @@
--- ---
- name: NodeJS GPG embedded key is absent - name: Look for /etc/apt/trusted.gpg
stat:
path: /etc/apt/trusted.gpg
register: apt_trusted_gpg
tags:
- system
- packages
- nodejs
- yarn
- name: NodeJS GPG embedded key is absent
apt_key: apt_key:
id: "86E50310" id: "86E50310"
state: absent state: absent
when: apt_trusted_gpg.stat.exists
tags: tags:
- system - system
- packages - packages

6
percona/tasks/main.yml
View file

@ -3,10 +3,16 @@
- set_fact: - set_fact:
percona__apt_config_package_file: "percona-release_latest.{{ ansible_distribution_release }}_all.deb" percona__apt_config_package_file: "percona-release_latest.{{ ansible_distribution_release }}_all.deb"
- name: Look for /etc/apt/trusted.gpg
stat:
path: /etc/apt/trusted.gpg
register: apt_trusted_gpg
- name: Percona GPG embedded key is absent - name: Percona GPG embedded key is absent
apt_key: apt_key:
id: "8507EFA5" id: "8507EFA5"
state: absent state: absent
when: apt_trusted_gpg.stat.exists
- name: Add Percona GPG key - name: Add Percona GPG key
copy: copy:

6
postgresql/tasks/pgdg-repo.yml
View file

@ -13,10 +13,16 @@
repo: "deb http://apt.postgresql.org/pub/repos/apt/ {{ansible_distribution_release}}-pgdg main" repo: "deb http://apt.postgresql.org/pub/repos/apt/ {{ansible_distribution_release}}-pgdg main"
update_cache: yes update_cache: yes
- name: Look for /etc/apt/trusted.gpg
stat:
path: /etc/apt/trusted.gpg
register: apt_trusted_gpg
- name: PGDG GPG embedded key is absent - name: PGDG GPG embedded key is absent
apt_key: apt_key:
id: "ACCC4CF8" id: "ACCC4CF8"
state: absent state: absent
when: apt_trusted_gpg.stat.exists
- name: Add PGDG GPG key - name: Add PGDG GPG key
copy: copy: