vault-cluster

1
---
2
- name: Create consul_s*.json file
3
  hosts: consul-clients
4
  become: true
5
  gather_facts: false
6

7
  vars:
8
    retry_join: "{{ groups['consul-servers'] | to_json }}"
9

10
  tasks:
11

12
    - name: Create consul config directory
13
      file:
14
        path: /etc/consul
15
        state: directory
16
        owner: consul
17
        group: consul
18
        mode: '0750'
19

20
    - name: Ensure consul_c*.json file exists
21
      copy:
22
        content: |
23
          {
24
            "server": false,
25
            "node_name": "{{ inventory_hostname }}",
26
            "datacenter": "{{ datacenter }}",
27
            "data_dir": "/home/consul/client/data",
28
            "bind_addr": "{{ ansible_host }}",
29
            "client_addr": "127.0.0.1",
30
            "retry_join": {{ retry_join }},
31
            "log_level": "DEBUG",
32
            "enable_syslog": true,
33
            "encrypt": "{{ encrypt }}",
34
          }
35
        dest: "/etc/consul/{{ inventory_hostname | replace('-', '_') }}.json"
36
        owner: consul
37
        group: consul
38
        mode: '0600'
39

40
    - name: Create consul service file
41
      copy:
42
        content: |
43
          [Unit]
44
          Description=Consul client agent
45
          Requires=network-online.target
46
          After=network-online.target
47
          
48
          [Service]
49
          User=consul
50
          Group=consul
51
          PIDFile=/var/run/consul/consul_agent.pid
52
          PermissionsStartOnly=true
53
          ExecStartPre=-/bin/mkdir -p /var/run/consul
54
          ExecStartPre=/bin/chown -R consul:consul /var/run/consul
55
          ExecStart=/bin/consul agent \
56
              -config-file=/etc/consul/{{ inventory_hostname | replace('-', '_') }}.json \
57
              -pid-file=/var/run/consul/consul_agent.pid
58
          ExecReload=/bin/kill -HUP $MAINPID
59
          KillMode=process
60
          KillSignal=SIGTERM
61
          Restart=on-failure
62
          RestartSec=42s
63
          
64
          [Install]
65
          WantedBy=multi-user.target
66

67
        dest: "/etc/systemd/system/{{ inventory_hostname | replace('-', '_') }}.service"
68
        owner: root
69
        group: root
70
        mode: '0644'
71

72
    - name: Enable and start consul service
73
      systemd:
74
        name: "{{ inventory_hostname | replace('-', '_') }}"
75
        enabled: yes
76
        state: restarted
77
        daemon_reload: yes
78