ick-workers.yml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

- hosts: workers
  remote_user: debian
  become: yes
  roles:
    - sane_debian_system
    - comfortable
    - unix_users
    - ick-worker
  tasks:
    - shell: |
        sed -i "s/'uapi_logs_id_get',/'uapi_logs_id_get','create','update','show','delete',/" /usr/bin/worker_manager
    - systemd:
        state: restarted
        name: ick-worker
  vars:
    ansible_python_interpreter: /usr/bin/python3

    sane_debian_system_version: 2
    sane_debian_system_codename: buster
    sane_debian_system_hostname: "{{ inventory_hostname }}"

    unix_users_version: 2
    unix_users:
      - username: debian
        sudo: yes
        authorized_keys: |
          {{ liw_personal_ssh_key_pub }}
      - username: _ickwm
        sudo: yes
        ssh_key: "{{ wm_ssh_key }}"
        ssh_key_pub: "{{ wm_ssh_key_pub }}"
        authorized_keys: |
          {{ liw_personal_ssh_key_pub }}

    verify_tls: no