infra-status/ansible
Jakub Sokołowski a2788b0f0b
requirements: bump nim-waku and certbot
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-08-11 15:05:03 +02:00
..
files Initial commit 2023-09-08 14:11:02 +02:00
group_vars boot: increase consul check interval, warning threshold 2024-08-11 15:00:14 +02:00
inventory rename the shards.test fleet to status.prod 2024-07-24 12:13:50 +02:00
lookup_plugins lookup_plugins/bitwarden: ignore stderr 2024-05-07 14:55:51 +02:00
README.md Initial commit 2023-09-08 14:11:02 +02:00
bootstrap.yml ansible: add roles.py script to manage roles 2024-06-13 17:17:56 +02:00
main.yml ansible: add roles.py script to manage roles 2024-06-13 17:17:56 +02:00
requirements.yml requirements: bump nim-waku and certbot 2024-08-11 15:05:03 +02:00
roles.py ansible: apply roles.py fixes 2024-07-05 11:44:42 +02:00
terraform.py Initial commit 2023-09-08 14:11:02 +02:00
upgrade.yml Initial commit 2023-09-08 14:11:02 +02:00

README.md

Description

Herein lie all ansible related files except for ansible.cfg at the root of the repo for easier usage without having to cd here.

Usage

Simply run the play related to the specific type of configuration you want to deploy:

 > ls -1 ansible/*.yml 
ansible/bootstrap.yml
ansible/upgrade.yml
ansible/main.yml
ansible-playbook ansible/main.yml

Bootstrap

All hosts are bootstraped right after provisioning using these roles:

If you want to re-run any bootstrap step you can do it like so:

ansible-playbook ansible/bootstrap.yml -t role::bootstrap:hostname

In this case only the hostname set of tasks will be executed due to the role::bootstrap:hostname tag.

Inventory

The inventory we use is crated by Terraform via the terraform-provider-ansible which generates the necessary data structures in the Consul Key/Value store that is later used by the terraform.py script to provide hosts and their variables to Ansible.

Some ways to view existing hosts:

ansible localhost -m debug -a 'var=groups'
ansible all -o -m debug -a 'var=ansible_host' | columns -t

Variables

Ansible variables can be provided to Ansible using the --extra-vars/-e flag. An example of such a flag is

compose_state: 'present'
compose_recreate: 'smart'
compose_restart: false

These are used in every role that starts docker containers. You can use them to change the behaviour of roles. For example to re-create all metric related containers use:

ansible-playbook ansible/main.yml -e compose_recreate=always

Secrets

Secrets are stored and provided in two ways: