openstack-ansible-ops/osquery/installDB.yml
Kevin Carter 926695fbf1
Update the galera_server role and change the mysqlcheck port
This change updates the galera deployment options for kolide which will
allow it to co-exist on the same host as an elasticsearch environment.

Because the galera cluster for kolide is on the backend, and not user
facing the installation and setup of a VIP for the backend galera
cluster is not needed.

Change-Id: Ia5f581ebb028bf35c00dc7606b0eb1a12ad54670
Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
2019-01-25 22:48:01 -06:00

46 lines
1.6 KiB
YAML

---
# Copyright 2018, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
- name: Install MariaDB Galera Cluster
hosts: "kolide-db_all"
become: true
user: root
gather_facts: "{{ osa_gather_facts | default(True) }}"
vars_files:
- vars/variables.yml
pre_tasks:
- name: Test for root db password
fail:
msg: >-
The root password for the galera cluster is not defined. To proceed with this
installation define the variable `kolide_galera_root_password` in line or
within a variable file.
when:
- kolide_galera_root_password is undefined
roles:
- role: galera_server
galera_cluster_members: "{{ groups['kolide-db_all'] }}"
galera_wsrep_node_name: "{{ inventory_hostname }}"
galera_cluster_name: telemetry_galera_cluster
galera_monitoring_allowed_source: "0.0.0.0/0"
galera_root_password: "{{ kolide_galera_root_password }}"
galera_monitoring_check_enabled: false
galera_monitoring_check_port: 29200
environment: "{{ deployment_environment_variables | default({}) }}"