68 lines
2 KiB
YAML
68 lines
2 KiB
YAML
|
---
|
||
|
|
- name: Download concourse
|
||
|
|
ansible.builtin.get_url:
|
||
|
|
url: https://github.com/concourse/concourse/releases/download/v{{ concourse_version }}/concourse-{{ concourse_version }}-linux-amd64.tgz
|
||
|
|
dest: /tmp/concourse.tgz
|
||
|
|
mode: '0640'
|
||
|
|
checksum: sha1:https://github.com/concourse/concourse/releases/download/v{{ concourse_version }}/concourse-{{ concourse_version }}-linux-amd64.tgz.sha1
|
||
|
|
register: download_concourse
|
||
|
|
|
||
|
|
- name: Extract concourse
|
||
|
|
ansible.builtin.unarchive:
|
||
|
|
src: /tmp/concourse.tgz
|
||
|
|
dest: /opt/
|
||
|
|
remote_src: true
|
||
|
|
when: download_concourse.changed
|
||
|
|
|
||
|
|
- name: Create concourse user
|
||
|
|
ansible.builtin.user:
|
||
|
|
name: concourse
|
||
|
|
home: /var/lib/concourse
|
||
|
|
shell: /bin/false
|
||
|
|
groups: users,docker
|
||
|
|
|
||
|
|
- name: Create /etc/concourse
|
||
|
|
ansible.builtin.file:
|
||
|
|
path: /etc/concourse
|
||
|
|
state: directory
|
||
|
|
|
||
|
|
- name: Create /etc/concourse
|
||
|
|
ansible.builtin.file:
|
||
|
|
path: /var/lib/concourse/.ssh
|
||
|
|
state: directory
|
||
|
|
owner: concourse
|
||
|
|
|
||
|
|
- name: Deploy concourse keys
|
||
|
|
ansible.builtin.copy:
|
||
|
|
content: "{{ item.content }}"
|
||
|
|
dest: "{{ item.dest }}"
|
||
|
|
mode: '0440'
|
||
|
|
loop:
|
||
|
|
- content: "{{ concourse.worker.workerKey }}"
|
||
|
|
dest: /var/lib/concourse/.ssh/id_rsa
|
||
|
|
- content: "{{ concourse.worker.workerKeyPub }}"
|
||
|
|
dest: /var/lib/concourse/.ssh/id_rsa.pub
|
||
|
|
- content: "{{ concourse.worker.hostKeyPub }}"
|
||
|
|
dest: /var/lib/concourse/.ssh/web_key.pub
|
||
|
|
|
||
|
|
- name: Create concourse config
|
||
|
|
ansible.builtin.template:
|
||
|
|
src: concourse-cfg.j2
|
||
|
|
dest: /etc/concourse/worker
|
||
|
|
mode: '0640'
|
||
|
|
register: create_concourse_config
|
||
|
|
|
||
|
|
- name: Create concourse service file
|
||
|
|
ansible.builtin.template:
|
||
|
|
src: concourse-worker.service.j2
|
||
|
|
dest: /lib/systemd/system/concourse-worker.service
|
||
|
|
mode: '0640'
|
||
|
|
register: create_concourse_service
|
||
|
|
|
||
|
|
- name: Make sure a service unit is running
|
||
|
|
ansible.builtin.systemd:
|
||
|
|
name: concourse-worker
|
||
|
|
state: restarted
|
||
|
|
daemon_reload: true
|
||
|
|
enabled: true
|
||
|
|
when: create_concourse_service.changed or create_concourse_config.changed
|