system-config/playbooks/service-afs.yaml
Ian Wienand 312b9bec24 Refactor AFS groups
Both the filesevers and db servers have common key material deployed
by the openafs-server-config role.  Put both types of server in a new
group "afs-server-common" so we can define this key material in just
one group file on bridge.

Then separate out the two into afs-<file|db>-server groups for
consistent naming.

Rename afs-admin for consistent naming.

The service file is updated to reflect the new groups.

Change-Id: Ifa5f251fdfb8de737ad2ed96491d45294ce23a0c
2021-02-11 13:35:16 +11:00

27 lines
710 B
YAML

- hosts: "afs-db-server:!disabled"
name: "AFS: configure db servers"
strategy: free
roles:
- openafs-db-server
- hosts: "afs-file-server:!disabled"
name: "Configure AFS file server"
roles:
- openafs-file-server
- hosts: "mirror-update:!disabled"
name: "Create key for remote vos release"
tasks:
# Note done as root because all the update scripts run as root
- name: Create vos release keypair
openssh_keypair:
path: /root/.ssh/id_vos_release
type: ed25519
register: vos_release_keypair
# Note: relies on vos_release_keypair installed to mirror above
- hosts: "afs-file-server:!disabled"
name: "Allow remote vos_release"
roles:
- vos-release