forked from cmstokoe/ihtsdo-ansible
-
Notifications
You must be signed in to change notification settings - Fork 0
/
buildserver.yml
54 lines (49 loc) · 1.73 KB
/
buildserver.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
---
- hosts: jenkins_master
sudo: true
roles:
- IHTSDO.dev_env
- IHTSDO.jenkins
- IHTSDO.nginx-std
tasks:
- file: >
dest=/var/lib/jenkins/.ssh state=directory
owner=jenkins group=nogroup mode=0700
- copy: >
src={{ inventory_dir }}/../files/ssh/jenkins.key dest=/var/lib/jenkins/.ssh/id_rsa
owner=jenkins group=nogroup mode=0600
- copy: >
src={{ inventory_dir }}/../files/ssh/jenkins_authorized_keys dest=/var/lib/jenkins/.ssh/authorized_keys
owner=jenkins group=nogroup mode=0600
- copy: >
src={{ inventory_dir }}/../files/jenkins/ssh_config dest=/var/lib/jenkins/.ssh/config
owner=jenkins group=nogroup mode=0600
- copy: >
src={{ inventory_dir }}/../files/jenkins/launch_slave dest=/var/lib/jenkins/launch_slave
owner=jenkins group=nogroup mode=0700
# - hosts: sonarqube
# sudo: true
# roles:
# - IHTSDO.sonarqube
# - IHTSDO.nginx-std
# add ansible as both jenkins and jenkins-ansible use it
- hosts: jenkins_master
sudo: true
vars:
gitcrypt_user: "jenkins"
gitcrypt_key_filename: "ihtsdo-inventory.key"
gitcrypt_key_file_src: "{{ inventory_dir }}/../files/git-crypt/{{gitcrypt_key_filename}}"
gitcrypt_key_file_dest: "/home/ansible/{{gitcrypt_key_filename}}"
roles:
- IHTSDO.ansible
- IHTSDO.git-crypt
tasks:
- copy: >
src={{ inventory_dir }}/../files/ssh/ansible.key dest=/var/lib/jenkins/.ssh/ansible.key
owner=jenkins group=nogroup mode=0400
- copy: >
src={{ inventory_dir }}/../files/ansible/ssh_config dest=/var/lib/jenkins/.ssh/config
owner=jenkins group=nogroup mode=0600
- file: >
dest=/home/ansible/workspace owner=jenkins group=ansible mode=0750
state=directory