main.yml #2

  • //
  • guest/
  • russell_jackson/
  • ansible-sdp/
  • roles/
  • perforce-sdp-install/
  • defaults/
  • main.yml
  • View
  • Commits
  • Open Download .zip Download (2 KB)
---
# defaults file for ansible-perforce_sdp_install-role
perforce_sdp_file: "sdp.tgz"
perforce_sdp_volume: "{{ perforce_log_volume }}"
perforce_checkpoint_volume: "{{ perforce_data_volume }}"

# Template vars
perforce_complainfrom: '${SSL_PREFIX}${P4DNSNAME}:${P4_PORT}_P4Review\@${COMPLAINFROM_DOMAIN}'
perforce_complainfrom_domain: "${DOMAIN}"
perforce_shareddata: "{{ 'TRUE' if perforce_depots_use_nfs else 'FALSE' }}"
sdp_upgrade: "{{ 'TRUE' if update_perforce else 'FALSE' }}"
install_broker: false
new_p4d: false
update_dependencies: false

# Uninstall vars
perforce_clean_commands:
  - "systemctl stop {{ perforce_service }}"
  - "rm -f /etc/systemd/system/{{ perforce_service }}.service"
  - "systemctl daemon-reload"
  - "rm -rf /{{ perforce_online_metadata_volume }}/p4"
  - "rm -rf /{{ perforce_offline_metadata_volume }}/p4"
  - "rm -rf /{{ perforce_data_volume }}/p4/{{ perforce_id }}/checkpoints.{{ perforce_master_id }}"
  - "rm -rf /{{ perforce_log_volume }}/p4"
  - "rm -rf /{{ perforce_common_volume }}/common"
  - "rm -rf /{{ perforce_log_volume }}/sdp"
  - "rm -rf /p4"
  - "crontab -u {{ perforce_user }} -r"
  - "userdel -rf {{ perforce_user }}"
  - "groupdel {{ perforce_group }}"
  - "rm -rf /p4"

network_clean_redhat:
  - "ifdown dummy0"
  - "rm -f /etc/sysconfig/network-scripts/ifcfg-dummy0"

network_clean_debian:
  - "ifconfig dummy0 down"
  - "rm -f /etc/systemd/network/10-dummy0.netdev"
  - "rm -f /etc/systemd/network/20-dummy0.network"
  - "systemctl restart systemd-networkd"

list_of_packages:
  - atop
  - python3
  - python3-setuptools
  - screen
  - ca-certificates
  - curl
  - htop
  - rsync
  - util-linux
  - jq
  - iperf3
  - openssl
  - acl
  - vim
  - net-tools
  - make
  - wget
  - git

list_of_debian_packages:
  - libuser
  - python3-virtualenv
  - python3-venv
  - rdiff-backup
  - php
  - php-sqlite3
  - libjson-perl
  - libjson-xs-perl
  - openssh-client
  - openssh-server
  - openssh-sftp-server
  - libssl-dev
  - build-essential
  - zlib1g-dev
  - libbz2-dev
  - libreadline-dev
  - libsqlite3-dev
  - llvm
  - libncurses5-dev
  - libncursesw5-dev
  - xz-utils
  - tk-dev
  - libffi-dev
  - liblzma-dev
  - python3-openssl
  - iputils-ping
  - mailutils

list_of_redhat_packages:
  - iputils
  - mailx

list_of_packages_to_remove:
  - apache2
# Change User Description Committed
#2 32492 Russell C. Jackson (Rusty) Fix bugs, remove orphaned files, and apply best practices to ansible-sdp

- Fix broken Jinja2 filter syntax (|bool|) in main-playbook.yml
- Fix target_server logic comparing string literals instead of variables
- Fix package install failing on RedHat due to missing OS family guard
- Split packages into OS-agnostic and Debian-specific lists, remove duplicates
- Switch all binary downloads from HTTP to HTTPS
- Remove 7 orphaned files (unused templates, scripts, configs)
- Replace hardcoded emails in cron with template variables
- Fix inconsistent journal rotations (06:00/08:00) to use rotate_journal.sh
- Parameterize admin sudoers and perforce user password
- Fix ansible.cfg malformed vars block
- Fix ansibleuser sudo group for RedHat (wheel) vs Debian (sudo)
- Remove redundant triple broker start/restart in install.yml
- Replace shell sed with ansible.builtin.replace in monitoring role
- Fix duplicate handler and undefined variable in monitoring handlers
- Use notify handlers instead of inline commands for sysctl/THP
- Add idempotency (creates:) to pyenv install
#1 32488 Russell C. Jackson (Rusty) Ansible scaffolding for the sdp - Needs work.