ansible/setup.yml

#
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
---
# This playbook prepares ansible configuration

- hosts: localhost
  tasks:
  # Generate hosts files
  - name: gen hosts if 'local' env is used
    local_action: template src="{{playbook_dir}}/environments/local/hosts.j2.ini" dest="{{ playbook_dir }}/environments/local/hosts"
    when: "'environments/local' in hosts_dir"

  - name: find the ip of docker-machine
    local_action: shell "docker-machine" "ip" "{{docker_machine_name | default('whisk')}}"
    register: result
    when: "'environments/docker-machine' in hosts_dir"

  - name: get the docker-machine ip
    set_fact:
      docker_machine_ip: "{{ result.stdout }}"
    when: "'environments/docker-machine' in hosts_dir"

  - name: gen hosts for docker-machine
    local_action: template src="{{playbook_dir}}/environments/docker-machine/hosts.j2.ini" dest="{{ playbook_dir }}/environments/docker-machine/hosts"
    when: "'environments/docker-machine' in hosts_dir"

  - name: gen hosts for Jenkins
    local_action: template src="{{playbook_dir}}/environments/jenkins/hosts.j2.ini" dest="{{ playbook_dir }}/environments/jenkins/hosts"
    when: "'environments/jenkins' in hosts_dir"

  - name: Refresh inventory to ensure generated hosts files are used
    meta: refresh_inventory

  # Generate db_local.ini
  - name: check if db_local.ini exists?
    tags: ini
    stat: path="{{ playbook_dir }}/db_local.ini"
    register: db_check

  - name: prepare db_local.ini
    tags: ini
    local_action: template src="db_local.ini.j2" dest="{{ playbook_dir }}/db_local.ini"
    when: not db_check.stat.exists

  # Generate nginx certificates
  - name: gen untrusted server certificate for host
    local_action: shell "{{ playbook_dir }}/files/genssl.sh" "*.{{ whisk_api_localhost_name | default(whisk_api_host_name) | default(whisk_api_localhost_name_default) }}" "server" "{{ nginx.ssl.path }}"
    when: nginx.ssl.cert == "openwhisk-server-cert.pem"

  - name: gen untrusted client certificate for host
    local_action: shell "{{ playbook_dir }}/files/genssl.sh" "*.{{ whisk_api_localhost_name | default(whisk_api_host_name) | default(whisk_api_localhost_name_default) }}" "client" "{{ nginx.ssl.path }}"
    when: nginx.ssl.client_ca_cert == "openwhisk-client-ca-cert.pem"

  # Generate Kafka certificates
  - name: clean up old kafka keystore
    file:
      path: "{{ playbook_dir }}/roles/kafka/files"
      state: absent
    become: "{{ logs.dir.become }}"
    when: kafka_protocol_for_setup == 'SSL'

  - name: ensure kafka files directory exists
    file:
      path: "{{ playbook_dir }}/roles/kafka/files/"
      state: directory
      mode: 0777
    become: "{{ logs.dir.become }}"
    when: kafka_protocol_for_setup == 'SSL'

  - name: generate kafka certificates
    local_action: shell "{{ playbook_dir }}/files/genssl.sh" "openwhisk-kafka" "server_with_JKS_keystore" "{{ playbook_dir }}/roles/kafka/files" openwhisk "kafka-" "generateKey"
    when: kafka_protocol_for_setup == 'SSL'

  # Generate Controller certificates
  - name: ensure controller files directory exists
    file:
      path: "{{ playbook_dir }}/roles/controller/files/"
      state: directory
      mode: 0777
    become: "{{ logs.dir.become }}"
    when: controller.protocol == 'https'

  - name: generate controller certificates
    when: controller.protocol == 'https'
    local_action: shell "{{ playbook_dir }}/files/genssl.sh" "{{ controller.ssl.cn }}" "server" "{{ playbook_dir }}/roles/controller/files" {{ controller.ssl.keystore.password }} {{ controller.ssl.keyPrefix }} "generateKey"

  # Generate Invoker certificates
  - name: ensure invoker files directory exists
    file:
      path: "{{ playbook_dir }}/roles/invoker/files/"
      state: directory
      mode: 0777
    become: "{{ logs.dir.become }}"
    when: invoker.protocol == 'https'

  - name: generate invoker certificates
    when: invoker.protocol == 'https'
    local_action: shell "{{ playbook_dir }}/files/genssl.sh" "{{ invoker.ssl.cn }}" "server" "{{ playbook_dir }}/roles/invoker/files" {{ invoker.ssl.keystore.password }} {{ invoker.ssl.keyPrefix }} "generateKey"