OpenConext-deploy/provision-test2.yml at master · quartje/OpenConext-deploy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
---
- hosts: all
  gather_facts: no
  tasks:
  - name: Read vars from secrets file
    include_vars: "{{ secrets_file }}"
    tags:
      - always

- hosts: loadbalancer
  gather_facts: yes
  sudo: true
  roles:
    - common
    - hosts
    - iptables
    - { role: tls, tags: ['tls'] }
  handlers:
    - include: roles/httpd/handlers/main.yml

- hosts: loadbalancer
  gather_facts: true
  sudo: true
  roles:
    - { role: haproxy, tags: ['lb'] }
    - { role: nginx,   tags: ['lb'] }


- hosts: php-apps:java-apps-centos7
  gather_facts: yes
  sudo: true
  roles:
    - httpd
  handlers:
    - include: roles/httpd/handlers/main.yml
    - include: roles/nginx/handlers/main.yml

- hosts: storage
  gather_facts: yes
  sudo: true
  roles:
    - { role: mysql, tags: ['mysql'] }
    - { role: ldap,  tags: ['ldap' ] }
    - vm_only_provision_eb_sr

- hosts: php-apps
  gather_facts: yes
  sudo: true
  vars:
    env_lang: php
  roles:
    - { role: php56fpm,          tags: ['php56fpm'] }
    - { role: static,            tags: ['static'] }
    - { role: openconext-common, tags: ['eb5','sr'] }
    - { role: engineblock5,       tags: ['eb5'     ] }
    - { role: vm_only_bootstrap_ldap_attributes,       tags: ['ldap'     ] }
    - { role: janus,             tags: ['sr'     ] }
    - { role: vm_only_bootstrap_ldap_attributes,       tags: ['ldap'     ] }
  handlers:
    - include: roles/httpd/handlers/main.yml
    - include: roles/nginx/handlers/main.yml

- hosts: java-apps-centos7
  gather_facts: true
  sudo: true
  vars:
    env_lang: java
  roles:
    - { role: tomcat, tags: ['tomcat'] }
    - { role: java,   tags: ['java'] }
    - { role: shibboleth,       tags: ['shib'   ] }
    - { role: grouper,          tags: ['grouper'] }
    - { role: metadata-exporter, tags: ['metadata-exporter'] }
    - { role: teams,            tags: ['teams'  ] }
    - { role: mujina-idp,       tags: ['legacy' ] }
    - { role: mujina-sp,        tags: ['legacy' ] }
    - { role: authz-server,     tags: ['oauth', 'authz-server'    ] }
    - { role: authz-admin,      tags: ['oauth', 'authz-admin'     ] }
    - { role: voot,             tags: ['oauth', 'voot'            ] }
    - { role: authz-playground, tags: ['oauth', 'authz-playground'] }
    - { role: pdp,              tags: ['pdp'] }
    - { role: oidc,              tags: ['oidc'] }
    - { role: aa,              tags: ['aa'] }
    - { role: pdp,             tags: ['pdp'] }
  handlers:
    - include: roles/httpd/handlers/main.yml
    - include: roles/nginx/handlers/main.yml