From 6d1a5f4908ebe693c5b8fc38b23869258c616674 Mon Sep 17 00:00:00 2001 From: Lars Wirzenius Date: Fri, 6 Apr 2018 19:02:25 +0300 Subject: Add: install Qvisqve host in ick-cluster.yml --- ick-cluster.yml | 49 +++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) (limited to 'ick-cluster.yml') diff --git a/ick-cluster.yml b/ick-cluster.yml index 3121ee8..b23c43c 100644 --- a/ick-cluster.yml +++ b/ick-cluster.yml @@ -38,3 +38,52 @@ - ick-controller vars: hostname: controller + +- hosts: qvisqve + remote_user: root + become: yes + roles: + - sane_debian_system + - letsencrypt + - haproxy + - qvisqve + vars: + letsencrypt_domain: "{{ qvisqve_domain }}" + qvisqve_token_public_key: "{{ lookup('pipe', 'pass show ick2/token_key.pub') }}" + qvisqve_token_private_key: "{{ lookup('pipe', 'pass show ick2/token_key') }}" + qvisqve_client_hash: "{{ lookup('pipe', 'pass show ick2/liw_hash') }}" + qvisqve_client_salt: "{{ lookup('pipe', 'pass show ick2/liw_salt') }}" + qvisqve_clients: + liw: + allowed_scopes: + - uapi_version_get + client_secret: + hash: "{{ lookup('pipe', 'pass show ick2/liw_hash') }}" + salt: "{{ lookup('pipe', 'pass show ick2/liw_salt') }}" + N: 16384 + key_len: 128 + p: 1 + r: 8 + version: 1 + worker1: + allowed_scopes: + - uapi_version_get + client_secret: + hash: "{{ lookup('pipe', 'pass show ick2/worker1_hash') }}" + salt: "{{ lookup('pipe', 'pass show ick2/worker1_salt') }}" + N: 16384 + key_len: 128 + p: 1 + r: 8 + version: 1 + worker2: + allowed_scopes: + - uapi_version_get + client_secret: + hash: "{{ lookup('pipe', 'pass show ick2/worker2_hash') }}" + salt: "{{ lookup('pipe', 'pass show ick2/worker2_salt') }}" + N: 16384 + key_len: 128 + p: 1 + r: 8 + version: 1 -- cgit v1.2.1