3eceba5749
This converts the reprepro configuration from our existing puppet to Ansible. This takes a more direct approach; the templating done by the puppet version started simple but over the years grew several different options to handle various use-cases. This means you not only had to understand the rather obscure reprepro configuration, but then *also* figure out how to translate that from our puppet template layers. Here the configuration files are kept directly (they were copied from the existing mirror-update.openstack.org) and deployed with some light wrapper tasks in reprepro/tasks/utils which avoids most duplication. Note the initial cron jobs are left disabled so we can run some manual testing before letting it go automatically. Change-Id: I96a9ff1efbf51c4164621028b7a3a1e2e1077d5c
31 lines
633 B
YAML
31 lines
633 B
YAML
- name: Check for input args
|
|
assert:
|
|
that: gpg_key_id is defined
|
|
|
|
- name: Check for existing key
|
|
command: |
|
|
gpg --list-keys {{ gpg_key_id }}
|
|
ignore_errors: true
|
|
register: _key_exists
|
|
|
|
- name: Install key
|
|
when: _key_exists.rc != 0
|
|
block:
|
|
|
|
- name: Look for gpg key
|
|
lineinfile:
|
|
path: '{{ gpg_key_asc }}'
|
|
regexp: '^-----BEGIN PGP PUBLIC KEY BLOCK-----$'
|
|
state: absent
|
|
check_mode: yes
|
|
changed_when: false
|
|
register: _out
|
|
|
|
- name: Check keyfile
|
|
assert:
|
|
that: _out.found
|
|
|
|
- name: Import key
|
|
command: |
|
|
gpg --import {{ gpg_key_asc }}
|