Update ansible code
Some checks reported errors
continuous-integration/drone/push Build encountered an error
Some checks reported errors
continuous-integration/drone/push Build encountered an error
This commit is contained in:
parent
2ca2ad9796
commit
eec95be2de
8 changed files with 175 additions and 175 deletions
|
|
@ -1,6 +1,6 @@
|
||||||
---
|
---
|
||||||
# Possible value: docker_ce , docker
|
# Possible value: docker_ce , docker
|
||||||
# docker_ce : official docker comunity edition
|
# docker_ce : official docker community edition
|
||||||
# docker : distribution version
|
# docker : distribution version
|
||||||
docker_ver: docker_ce
|
docker_ver: docker_ce
|
||||||
docker_swarmmode: false
|
docker_swarmmode: false
|
||||||
|
|
|
||||||
|
|
@ -13,16 +13,16 @@
|
||||||
- docker_ver == "docker_ce"
|
- docker_ver == "docker_ce"
|
||||||
|
|
||||||
- name: Add docker repository
|
- name: Add docker repository
|
||||||
apt_repository:
|
ansible.builtin.apt_repository:
|
||||||
repo: 'deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu {{ ansible_distribution_release }} stable'
|
repo: 'deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu {{ ansible_distribution_release }} stable'
|
||||||
filename: docker-ce
|
filename: docker-ce
|
||||||
state: present
|
state: present
|
||||||
update_cache: yes
|
update_cache: true
|
||||||
when:
|
when:
|
||||||
- docker_ver == "docker_ce"
|
- docker_ver == "docker_ce"
|
||||||
|
|
||||||
- name: "Ensure GRUB_CMDLINE_LINUX is updated"
|
- name: "Ensure GRUB_CMDLINE_LINUX is updated"
|
||||||
lineinfile:
|
ansible.builtin.lineinfile:
|
||||||
dest: /etc/default/grub
|
dest: /etc/default/grub
|
||||||
regexp: '^(GRUB_CMDLINE_LINUX=".*)"$'
|
regexp: '^(GRUB_CMDLINE_LINUX=".*)"$'
|
||||||
line: '\1 cgroup_enable=memory swapaccount=1"'
|
line: '\1 cgroup_enable=memory swapaccount=1"'
|
||||||
|
|
@ -31,19 +31,19 @@
|
||||||
- not docker_installed.stat.exists
|
- not docker_installed.stat.exists
|
||||||
|
|
||||||
- name: "Update grub.conf"
|
- name: "Update grub.conf"
|
||||||
command: update-grub
|
ansible.builtin.command: update-grub
|
||||||
when:
|
when:
|
||||||
- not docker_installed.stat.exists
|
- not docker_installed.stat.exists
|
||||||
|
|
||||||
- name: Check whether ufw status is active
|
- name: Check whether ufw status is active
|
||||||
shell: ufw status
|
ansible.builtin.shell: ufw status
|
||||||
changed_when: False
|
changed_when: False
|
||||||
ignore_errors: True
|
ignore_errors: True
|
||||||
register: ufw_check
|
register: ufw_check
|
||||||
check_mode: false
|
check_mode: false
|
||||||
|
|
||||||
- name: "Ensure DEFAULT_FORWARD_POLICY in /etc/default/ufw is updated"
|
- name: "Ensure DEFAULT_FORWARD_POLICY in /etc/default/ufw is updated"
|
||||||
lineinfile:
|
ansible.builtin.lineinfile:
|
||||||
dest: /etc/default/ufw
|
dest: /etc/default/ufw
|
||||||
regexp: '^(DEFAULT_FORWARD_POLICY=").*"$'
|
regexp: '^(DEFAULT_FORWARD_POLICY=").*"$'
|
||||||
line: '\1ACCEPT"'
|
line: '\1ACCEPT"'
|
||||||
|
|
|
||||||
|
|
@ -5,18 +5,18 @@
|
||||||
# description: "Docker Repository"
|
# description: "Docker Repository"
|
||||||
# baseurl: https://yum.dockerproject.org/repo/main/centos/$releasever/
|
# baseurl: https://yum.dockerproject.org/repo/main/centos/$releasever/
|
||||||
# gpgcheck: yes
|
# gpgcheck: yes
|
||||||
# enabled: yes
|
# enabled: true
|
||||||
# gpgkey: https://yum.dockerproject.org/gpg
|
# gpgkey: https://yum.dockerproject.org/gpg
|
||||||
# state: present
|
# state: present
|
||||||
|
|
||||||
- name: Add Official docker's repo
|
- name: Add Official docker's repo
|
||||||
get_url:
|
ansible.builtin.get_url:
|
||||||
url: https://download.docker.com/linux/centos/docker-ce.repo
|
url: https://download.docker.com/linux/centos/docker-ce.repo
|
||||||
dest: /etc/yum.repos.d/docker-ce.repo
|
dest: /etc/yum.repos.d/docker-ce.repo
|
||||||
mode: 0644
|
mode: 0644
|
||||||
|
|
||||||
- name: Register docker firewalld service
|
- name: Register docker firewalld service
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "etc/firewalld/services/docker-swarm.xml.j2"
|
src: "etc/firewalld/services/docker-swarm.xml.j2"
|
||||||
dest: "/etc/firewalld/services/docker-swarm.xml"
|
dest: "/etc/firewalld/services/docker-swarm.xml"
|
||||||
group: root
|
group: root
|
||||||
|
|
@ -25,18 +25,18 @@
|
||||||
register: need_firewalld_reload
|
register: need_firewalld_reload
|
||||||
|
|
||||||
# - name: Reload firewalld configuration
|
# - name: Reload firewalld configuration
|
||||||
# service:
|
# ansible.builtin.service:
|
||||||
# name: firewalld
|
# name: firewalld
|
||||||
# state: reloaded
|
# state: reloaded
|
||||||
# enabled: yes
|
# enabled: true
|
||||||
- name: reload firewalld to refresh service list
|
- name: reload firewalld to refresh service list
|
||||||
command: firewall-cmd --reload
|
ansible.builtin.command: firewall-cmd --reload
|
||||||
when:
|
when:
|
||||||
- need_firewalld_reload is changed
|
- need_firewalld_reload is changed
|
||||||
|
|
||||||
# Définir interface
|
# Définir interface
|
||||||
# - name: Open Firewalld
|
# - name: Open Firewalld
|
||||||
# firewalld:
|
# ansible.posix.firewalld:
|
||||||
# service: docker-swarm
|
# service: docker-swarm
|
||||||
# permanent: true
|
# permanent: true
|
||||||
# state: enabled
|
# state: enabled
|
||||||
|
|
|
||||||
|
|
@ -1,34 +1,34 @@
|
||||||
---
|
---
|
||||||
- name: Include vars for {{ ansible_os_family }}
|
- name: Include vars for {{ ansible_os_family }}
|
||||||
include_vars: "{{ ansible_os_family }}_{{ docker_ver }}.yml"
|
ansible.builtin.include_vars: "{{ ansible_os_family }}_{{ docker_ver }}.yml"
|
||||||
|
|
||||||
- name: See if docker is installed
|
- name: See if docker is installed
|
||||||
stat: path=/usr/bin/docker
|
stat: path=/usr/bin/docker
|
||||||
register: docker_installed
|
register: docker_installed
|
||||||
|
|
||||||
- name: Install docker rules for {{ ansible_os_family }} OS family
|
- name: Install docker rules for {{ ansible_os_family }} OS family
|
||||||
include_tasks: "{{ ansible_os_family }}.yml"
|
ansible.builtin.include_tasks: "{{ ansible_os_family }}.yml"
|
||||||
|
|
||||||
- name: Remove all other's docker version packages
|
- name: Remove all other's docker version packages
|
||||||
package:
|
ansible.builtin.package:
|
||||||
name: "{{ docker_remove_packages_name }}"
|
name: "{{ docker_remove_packages_name }}"
|
||||||
state: absent
|
state: absent
|
||||||
update_cache: yes
|
update_cache: true
|
||||||
|
|
||||||
- name: Install docker
|
- name: Install docker
|
||||||
package:
|
ansible.builtin.package:
|
||||||
name: "{{ docker_package_name }}"
|
name: "{{ docker_package_name }}"
|
||||||
state: present
|
state: present
|
||||||
update_cache: yes
|
update_cache: true
|
||||||
# when:
|
# when:
|
||||||
# - not docker_installed.stat.exists
|
# - not docker_installed.stat.exists
|
||||||
notify: Restart docker
|
notify: Restart docker
|
||||||
|
|
||||||
- name: Enable docker on boot
|
- name: Enable docker on boot
|
||||||
service:
|
ansible.builtin.service:
|
||||||
name: docker
|
name: docker
|
||||||
state: started
|
state: started
|
||||||
enabled: yes
|
enabled: true
|
||||||
|
|
||||||
# Create docker group if needed
|
# Create docker group if needed
|
||||||
|
|
||||||
|
|
@ -36,7 +36,7 @@
|
||||||
|
|
||||||
# Configuration dans /etc/docker/daemon.json
|
# Configuration dans /etc/docker/daemon.json
|
||||||
- name: Config_docker | Ensuring /etc/docker Folder Exists
|
- name: Config_docker | Ensuring /etc/docker Folder Exists
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: "/etc/docker"
|
path: "/etc/docker"
|
||||||
state: "directory"
|
state: "directory"
|
||||||
group: root
|
group: root
|
||||||
|
|
@ -44,7 +44,7 @@
|
||||||
mode: 0700
|
mode: 0700
|
||||||
|
|
||||||
# - name: Config_docker | Configuring Docker
|
# - name: Config_docker | Configuring Docker
|
||||||
# template:
|
# ansible.builtin.template:
|
||||||
# src: "etc/docker/daemon.json.j2"
|
# src: "etc/docker/daemon.json.j2"
|
||||||
# dest: "/etc/docker/daemon.json"
|
# dest: "/etc/docker/daemon.json"
|
||||||
# group: root
|
# group: root
|
||||||
|
|
@ -63,12 +63,12 @@
|
||||||
# - interfaces docker0 and docker_gwbridge ? firewall-cmd --change-zone=docker0 --zone=trusted --permanent; firewall-cmd --change-zone=docker_gwbridge --zone=trusted --permanent
|
# - interfaces docker0 and docker_gwbridge ? firewall-cmd --change-zone=docker0 --zone=trusted --permanent; firewall-cmd --change-zone=docker_gwbridge --zone=trusted --permanent
|
||||||
|
|
||||||
- name: Install python library for docker
|
- name: Install python library for docker
|
||||||
package:
|
ansible.builtin.package:
|
||||||
name: "{{ docker_python_lib }}"
|
name: "{{ docker_python_lib }}"
|
||||||
state: present
|
state: present
|
||||||
update_cache: yes
|
update_cache: true
|
||||||
|
|
||||||
# - name: Enable swarm mode
|
# - name: Enable swarm mode
|
||||||
# include_tasks: swarm.yml
|
# ansible.builtin.include_tasks: swarm.yml
|
||||||
# when:
|
# when:
|
||||||
# - docker_swarmmode
|
# - docker_swarmmode
|
||||||
|
|
|
||||||
|
|
@ -5,10 +5,10 @@
|
||||||
- docker_swarmmode
|
- docker_swarmmode
|
||||||
|
|
||||||
- name: Checking Swarm Mode Status
|
- name: Checking Swarm Mode Status
|
||||||
command: "docker info"
|
ansible.builtin.command: "docker info"
|
||||||
register: "docker_info"
|
register: "docker_info"
|
||||||
changed_when: false
|
changed_when: false
|
||||||
check_mode: no
|
check_mode: false
|
||||||
|
|
||||||
- name: Create Master Swarm group
|
- name: Create Master Swarm group
|
||||||
group_by: key=MasterSwarm
|
group_by: key=MasterSwarm
|
||||||
|
|
@ -17,7 +17,7 @@
|
||||||
- '" Is Manager: true" in docker_info.stdout'
|
- '" Is Manager: true" in docker_info.stdout'
|
||||||
|
|
||||||
- name: Init Docker Swarm Mode On First Manager
|
- name: Init Docker Swarm Mode On First Manager
|
||||||
command: >
|
ansible.builtin.command: >
|
||||||
docker swarm init
|
docker swarm init
|
||||||
--listen-addr {{ internal_interface }}:{{ docker_swarm_port }}
|
--listen-addr {{ internal_interface }}:{{ docker_swarm_port }}
|
||||||
--advertise-addr {{ internal_interface }}
|
--advertise-addr {{ internal_interface }}
|
||||||
|
|
@ -35,7 +35,7 @@
|
||||||
- inventory_hostname == groups['ClusterSwarm'][0]
|
- inventory_hostname == groups['ClusterSwarm'][0]
|
||||||
|
|
||||||
# - name: cluster | Capturing Docker Swarm Worker join-token
|
# - name: cluster | Capturing Docker Swarm Worker join-token
|
||||||
# command: "docker swarm join-token -q worker"
|
# ansible.builtin.command: "docker swarm join-token -q worker"
|
||||||
# changed_when: false
|
# changed_when: false
|
||||||
# register: "docker_swarm_worker_token"
|
# register: "docker_swarm_worker_token"
|
||||||
# delegate_to: groups['MasterSwarm'][0]
|
# delegate_to: groups['MasterSwarm'][0]
|
||||||
|
|
@ -44,37 +44,37 @@
|
||||||
# - '"Swarm: inactive" in docker_info.stdout'
|
# - '"Swarm: inactive" in docker_info.stdout'
|
||||||
|
|
||||||
# - name: cluster | Capturing Docker Swarm Manager join-token
|
# - name: cluster | Capturing Docker Swarm Manager join-token
|
||||||
# command: "docker swarm join-token -q manager"
|
# ansible.builtin.command: "docker swarm join-token -q manager"
|
||||||
# changed_when: false
|
# changed_when: false
|
||||||
# register: "docker_swarm_manager_token"
|
# register: "docker_swarm_manager_token"
|
||||||
# when: >
|
# when: >
|
||||||
# inventory_hostname == groups['MasterSwarm'][0]
|
# inventory_hostname == groups['MasterSwarm'][0]
|
||||||
# - name: cluster | Defining Docker Swarm Manager Address
|
# - name: cluster | Defining Docker Swarm Manager Address
|
||||||
# set_fact:
|
# ansible.builtin.set_fact:
|
||||||
# docker_swarm_manager_address: "{{ docker_swarm_addr }}:{{ docker_swarm_port }}"
|
# docker_swarm_manager_address: "{{ docker_swarm_addr }}:{{ docker_swarm_port }}"
|
||||||
# changed_when: false
|
# changed_when: false
|
||||||
# when: >
|
# when: >
|
||||||
# inventory_hostname == groups['MasterSwarm'][0]
|
# inventory_hostname == groups['MasterSwarm'][0]
|
||||||
# - name: cluster | Defining Docker Swarm Manager Address
|
# - name: cluster | Defining Docker Swarm Manager Address
|
||||||
# set_fact:
|
# ansible.builtin.set_fact:
|
||||||
# docker_swarm_manager_address: "{{ hostvars[docker_swarm_primary_manager]['docker_swarm_manager_address'] }}"
|
# docker_swarm_manager_address: "{{ hostvars[docker_swarm_primary_manager]['docker_swarm_manager_address'] }}"
|
||||||
# changed_when: false
|
# changed_when: false
|
||||||
# when: >
|
# when: >
|
||||||
# inventory_hostname != docker_swarm_primary_manager
|
# inventory_hostname != docker_swarm_primary_manager
|
||||||
# - name: cluster | Defining Docker Swarm Manager join-token
|
# - name: cluster | Defining Docker Swarm Manager join-token
|
||||||
# set_fact:
|
# ansible.builtin.set_fact:
|
||||||
# docker_swarm_manager_token: "{{ hostvars[docker_swarm_primary_manager]['docker_swarm_manager_token'] }}"
|
# docker_swarm_manager_token: "{{ hostvars[docker_swarm_primary_manager]['docker_swarm_manager_token'] }}"
|
||||||
# changed_when: false
|
# changed_when: false
|
||||||
# when: >
|
# when: >
|
||||||
# inventory_hostname != docker_swarm_primary_manager
|
# inventory_hostname != docker_swarm_primary_manager
|
||||||
# - name: cluster | Defining Docker Swarm Worker join-token
|
# - name: cluster | Defining Docker Swarm Worker join-token
|
||||||
# set_fact:
|
# ansible.builtin.set_fact:
|
||||||
# docker_swarm_worker_token: "{{ hostvars[docker_swarm_primary_manager]['docker_swarm_worker_token'] }}"
|
# docker_swarm_worker_token: "{{ hostvars[docker_swarm_primary_manager]['docker_swarm_worker_token'] }}"
|
||||||
# changed_when: false
|
# changed_when: false
|
||||||
# when: >
|
# when: >
|
||||||
# inventory_hostname != docker_swarm_primary_manager
|
# inventory_hostname != docker_swarm_primary_manager
|
||||||
# - name: cluster | Joining Additional Docker Swarm Managers To Cluster
|
# - name: cluster | Joining Additional Docker Swarm Managers To Cluster
|
||||||
# command: >
|
# ansible.builtin.command: >
|
||||||
# docker swarm join
|
# docker swarm join
|
||||||
# --listen-addr {{ docker_swarm_addr }}:{{ docker_swarm_port }}
|
# --listen-addr {{ docker_swarm_addr }}:{{ docker_swarm_port }}
|
||||||
# --advertise-addr {{ docker_swarm_addr }}
|
# --advertise-addr {{ docker_swarm_addr }}
|
||||||
|
|
@ -86,7 +86,7 @@
|
||||||
# 'Swarm: active' not in docker_info.stdout and
|
# 'Swarm: active' not in docker_info.stdout and
|
||||||
# 'Swarm: pending' not in docker_info.stdout
|
# 'Swarm: pending' not in docker_info.stdout
|
||||||
# - name: cluster | Joining Docker Swarm Workers To Cluster
|
# - name: cluster | Joining Docker Swarm Workers To Cluster
|
||||||
# command: >
|
# ansible.builtin.command: >
|
||||||
# docker swarm join
|
# docker swarm join
|
||||||
# --listen-addr {{ docker_swarm_addr }}:{{ docker_swarm_port }}
|
# --listen-addr {{ docker_swarm_addr }}:{{ docker_swarm_port }}
|
||||||
# --advertise-addr {{ docker_swarm_addr }}
|
# --advertise-addr {{ docker_swarm_addr }}
|
||||||
|
|
@ -102,8 +102,8 @@
|
||||||
# hosts: swarm-master
|
# hosts: swarm-master
|
||||||
# gather_facts: yes
|
# gather_facts: yes
|
||||||
# tasks:
|
# tasks:
|
||||||
# - command: "docker swarm init --advertise-addr {{inventory_hostname}}"
|
# - ansible.builtin.command: "docker swarm init --advertise-addr {{inventory_hostname}}"
|
||||||
# - command: "docker swarm join-token -q worker"
|
# - ansible.builtin.command: "docker swarm join-token -q worker"
|
||||||
# register: swarm_token
|
# register: swarm_token
|
||||||
# - set_fact: swarmtoken="{{swarm_token.stdout}}"
|
# - set_fact: swarmtoken="{{swarm_token.stdout}}"
|
||||||
#
|
#
|
||||||
|
|
@ -111,13 +111,13 @@
|
||||||
# hosts: swarm-nodes
|
# hosts: swarm-nodes
|
||||||
# gather_facts: yes
|
# gather_facts: yes
|
||||||
# tasks:
|
# tasks:
|
||||||
# - command: "docker swarm join --advertise-addr {{inventory_hostname}} --token {{hostvars[groups['swarm-master'][0]].swarmtoken}} {{hostvars[groups['swarm-master'][0]].inventory_hostname}}:2377"
|
# - ansible.builtin.command: "docker swarm join --advertise-addr {{inventory_hostname}} --token {{hostvars[groups['swarm-master'][0]].swarmtoken}} {{hostvars[groups['swarm-master'][0]].inventory_hostname}}:2377"
|
||||||
#
|
#
|
||||||
## - name: Leave Swarm
|
## - name: Leave Swarm
|
||||||
## hosts: swarm-master:swarm-nodes
|
## hosts: swarm-master:swarm-nodes
|
||||||
## gather_facts: yes
|
## gather_facts: yes
|
||||||
## tasks:
|
## tasks:
|
||||||
## - command: "docker swarm leave --force"
|
## - ansible.builtin.command: "docker swarm leave --force"
|
||||||
#
|
#
|
||||||
## - name: docker_swarm | Managing Docker Swarm Networks
|
## - name: docker_swarm | Managing Docker Swarm Networks
|
||||||
## docker_network:
|
## docker_network:
|
||||||
|
|
|
||||||
|
|
@ -1,24 +1,24 @@
|
||||||
---
|
---
|
||||||
- name: Disable docker service
|
- name: Disable docker service
|
||||||
service:
|
ansible.builtin.service:
|
||||||
name: docker
|
name: docker
|
||||||
state: stopped
|
state: stopped
|
||||||
enabled: no
|
enabled: false
|
||||||
|
|
||||||
- name: Remove all other's docker version packages
|
- name: Remove all other's docker version packages
|
||||||
package:
|
ansible.builtin.package:
|
||||||
name: "{{ docker_remove_packages_name }}"
|
name: "{{ docker_remove_packages_name }}"
|
||||||
state: absent
|
state: absent
|
||||||
update_cache: yes
|
update_cache: true
|
||||||
|
|
||||||
- name: Remove docker
|
- name: Remove docker
|
||||||
package:
|
ansible.builtin.package:
|
||||||
name: "{{ docker_package_name }}"
|
name: "{{ docker_package_name }}"
|
||||||
state: absent
|
state: absent
|
||||||
update_cache: yes
|
update_cache: true
|
||||||
|
|
||||||
- name: Remove files and directories
|
- name: Remove files and directories
|
||||||
file:
|
ansible.builtin.file:
|
||||||
force: yes
|
force: yes
|
||||||
recurse: yes
|
recurse: yes
|
||||||
path: "{{ item }}"
|
path: "{{ item }}"
|
||||||
|
|
@ -30,13 +30,13 @@
|
||||||
- /etc/yum.repos.d/docker-ce.repo
|
- /etc/yum.repos.d/docker-ce.repo
|
||||||
|
|
||||||
- name: Register docker firewalld service
|
- name: Register docker firewalld service
|
||||||
file:
|
ansible.builtin.file:
|
||||||
force: yes
|
force: yes
|
||||||
path: "/etc/firewalld/services/docker-swarm.xml"
|
path: "/etc/firewalld/services/docker-swarm.xml"
|
||||||
state: absent
|
state: absent
|
||||||
register: need_firewalld_reload
|
register: need_firewalld_reload
|
||||||
|
|
||||||
- name: reload firewalld to refresh service list
|
- name: reload firewalld to refresh service list
|
||||||
command: firewall-cmd --reload
|
ansible.builtin.command: firewall-cmd --reload
|
||||||
when:
|
when:
|
||||||
- need_firewalld_reload is changed
|
- need_firewalld_reload is changed
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue