reactivate Create hydra clients
This commit is contained in:
parent
e88e45ac91
commit
d3f273c128
|
@ -15,7 +15,7 @@ cadoles_pod_hydra_oidc_v1_package_version: '*'
|
|||
cadoles_pod_hydra_ldap_v1_package_version: '*'
|
||||
|
||||
# Hydra database configuration
|
||||
hydra_use_external_database: no
|
||||
hydra_use_external_database: false
|
||||
hydra_database_name: hydra
|
||||
hydra_database_user: hydra
|
||||
hydra_database_password: hydra
|
||||
|
|
|
@ -0,0 +1,33 @@
|
|||
---
|
||||
|
||||
- name: Install Hydra
|
||||
ansible.builtin.apt:
|
||||
name:
|
||||
- cadoles-pod-hydra-v1={{ cadoles_pod_hydra_v1_package_version }}
|
||||
update_cache: yes
|
||||
state: present
|
||||
become: true
|
||||
|
||||
- name: Configure Hydra local database
|
||||
ansible.builtin.include_tasks: hydra-database.yml
|
||||
when: not hydra_use_external_database
|
||||
|
||||
- name: Create hydra-clients
|
||||
template:
|
||||
src: hydra-client.json.j2
|
||||
dest: "/etc/hydra/clients.d/{{ item.client_id }}.json"
|
||||
with_items: "{{ hydra_clients }}"
|
||||
notify:
|
||||
- Reload hydra clients
|
||||
become: true
|
||||
|
||||
- name: Configure cadoles-pod-hydra-v1
|
||||
template:
|
||||
src: "{{ item.src }}"
|
||||
dest: "{{ item.dest }}"
|
||||
with_items:
|
||||
- src: cadoles-pod-hydra-v1.conf.j2
|
||||
dest: /etc/cadoles-pod-hydra-v1.conf
|
||||
notify:
|
||||
- Restart cadoles-pod-hydra-v1
|
||||
become: true
|
|
@ -9,24 +9,28 @@
|
|||
update_cache: yes
|
||||
state: present
|
||||
become: true
|
||||
tags: [ install-hydra ]
|
||||
|
||||
- name: Add LetsEncrypt missing intermediate certificates
|
||||
command: "bash -c 'wget -O- --no-check-certificate https://forge.cadoles.com/Cadoles/Jenkins/raw/branch/master/resources/com/cadoles/common/add-letsencrypt-ca.sh | bash'"
|
||||
args:
|
||||
creates: /etc/ssl/certs/lets-encrypt-e1.pem.pem
|
||||
become: true
|
||||
tags: [ install-hydra ]
|
||||
|
||||
- name: Add cadoles-pod debian repository key
|
||||
ansible.builtin.apt_key:
|
||||
url: "{{ cadoles_pod_debian_repository_key_url }}"
|
||||
state: present
|
||||
become: true
|
||||
tags: [ install-hydra ]
|
||||
|
||||
- name: Configure cadoles-pod debian repository
|
||||
ansible.builtin.apt_repository:
|
||||
repo: "deb {{ cadoles_pod_debian_repository_url }} {{ cadoles_pod_debian_repository }} main"
|
||||
state: present
|
||||
become: true
|
||||
tags: [ install-hydra ]
|
||||
|
||||
- name: Ensure sysctl configuration
|
||||
ansible.posix.sysctl:
|
||||
|
@ -39,39 +43,31 @@
|
|||
- name: fs.inotify.max_user_watches
|
||||
value: 204800
|
||||
become: true
|
||||
tags: [ install-hydra ]
|
||||
|
||||
- name: Install core packages
|
||||
- name: Install HAProxy
|
||||
ansible.builtin.apt:
|
||||
name:
|
||||
- haproxy={{ haproxy_package_version }}
|
||||
- cadoles-pod-hydra-v1={{ cadoles_pod_hydra_v1_package_version }}
|
||||
- cadoles-pod-hydra-dispatcher-v1={{ cadoles_pod_hydra_dispatcher_v1_package_version }}
|
||||
update_cache: yes
|
||||
state: present
|
||||
become: true
|
||||
tags: [ install-hydra ]
|
||||
|
||||
- name: Configure Hydra local database
|
||||
ansible.builtin.include_tasks: hydra-database.yml
|
||||
when: not hydra_use_external_database
|
||||
- name: Install Hydra
|
||||
include_tasks:
|
||||
file: ./install-hydra.yml
|
||||
apply:
|
||||
tags: install-hydra
|
||||
tags:
|
||||
- install-hydra
|
||||
|
||||
- name: Create hydra-clients
|
||||
template:
|
||||
src: hydra-client.json.j2
|
||||
dest: "/etc/hydra/clients.d/{{ item.client_id }}.json"
|
||||
with_items: "{{ hydra_clients }}"
|
||||
notify:
|
||||
- Reload hydra clients
|
||||
become: true
|
||||
|
||||
- name: Configure cadoles-pod-hydra-v1
|
||||
template:
|
||||
src: "{{ item.src }}"
|
||||
dest: "{{ item.dest }}"
|
||||
with_items:
|
||||
- src: cadoles-pod-hydra-v1.conf.j2
|
||||
dest: /etc/cadoles-pod-hydra-v1.conf
|
||||
notify:
|
||||
- Restart cadoles-pod-hydra-v1
|
||||
- name: Install hydra-dispatcher
|
||||
ansible.builtin.apt:
|
||||
name:
|
||||
- cadoles-pod-hydra-dispatcher-v1={{ cadoles_pod_hydra_dispatcher_v1_package_version }}
|
||||
update_cache: yes
|
||||
state: present
|
||||
become: true
|
||||
|
||||
- name: Configure cadoles-pod-hydra-dispatcher-v1
|
||||
|
|
|
@ -21,11 +21,11 @@
|
|||
- Restart cadoles-pod-hydra-v1
|
||||
become: true
|
||||
|
||||
#- name: Create hydra-clients
|
||||
# template:
|
||||
# src: hydra-client.json.j2
|
||||
# dest: "/etc/hydra/clients.d/{{ item.client_id }}.json"
|
||||
# with_items: "{{ hydra_clients }}"
|
||||
# notify:
|
||||
# - Reload hydra clients
|
||||
# become: true
|
||||
- name: Create hydra-clients
|
||||
template:
|
||||
src: hydra-client.json.j2
|
||||
dest: "/etc/hydra/clients.d/{{ item.client_id }}.json"
|
||||
with_items: "{{ hydra_clients }}"
|
||||
notify:
|
||||
- Reload hydra clients
|
||||
become: true
|
||||
|
|
Loading…
Reference in New Issue