Change: split roles to be one per component

2 files changed, 69 insertions, 0 deletions

diff --git a/roles/ick-worker/tasks/main.yml b/roles/ick-worker/tasks/main.yml
new file mode 100644
index 0000000..19a01c9
--- /dev/null
+++ b/roles/ick-worker/tasks/main.yml
@@ -0,0 +1,59 @@
+- name: install ick worker manager
+  apt:
+    name: "{{ item }}"
+  with_items:
+    - ick-worker
+    - debootstrap
+    - jq
+    - less
+    - htop
+    - locales-all
+    - systemd-container
+
+- name: create config dirs
+  file:
+    state: directory
+    path: "{{ item }}"
+    owner: root
+    group: root
+    mode: 0755
+  with_items:
+    - /etc/ick
+
+- name: install worker-manager config
+  template:
+    src: worker.yaml.j2
+    dest: /etc/ick/worker.yaml
+    owner: root
+    group: root
+    mode: 0644
+
+- name: install token signing private key
+  copy:
+    content: "{{ token_private_key }}"
+    dest: /etc/ick/token_key
+    owner: _ickwm
+    group: _ickwm
+    mode: 0600
+
+- name: install token signing public key
+  copy:
+    content: "{{ token_public_key }}"
+    dest: /etc/ick/token_key.pub
+    owner: _ickwm
+    group: _ickwm
+    mode: 0644
+
+- name: enable and start units
+  service:
+    name: "{{ item }}"
+    state: restarted
+    enabled: yes
+  with_items:
+    - ick-worker
+
+- name: configure ssh client with StrictHostKeyChecking=no
+  lineinfile:
+    dest: /etc/ssh/ssh_config
+    state: present
+    line: "StrictHostKeyChecking no"
diff --git a/roles/ick-worker/templates/worker.yaml.j2 b/roles/ick-worker/templates/worker.yaml.j2
new file mode 100644
index 0000000..d742a42
--- /dev/null
+++ b/roles/ick-worker/templates/worker.yaml.j2
@@ -0,0 +1,10 @@
+config:
+  controller: "{{ controller_url }}"
+  name: worker1
+  log: /var/log/ickwm/worker_manager.log
+  log-level: debug
+  log-max: 10M
+  log-keep: 10
+  token-key: /etc/ick/token_key
+  token-key-pub: /etc/ick/token_key.pub
+  workspace: /var/lib/ick/workspace