Ansible role to manage Zookeeper
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

61 lines
2.2 KiB

# Copyright 2018 Red Hat, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
---
- hosts: all
vars:
rolename: ansible-role-zookeeper
roles:
- "{{ rolename }}"
post_tasks:
- name: Assert results are registered.
assert:
that:
- zookeeper_file_ssl_keystore
- zookeeper_file_ssl_truststore
- zookeeper_service_zookeeper
- name: Register /etc/zookeeper/ca/certs/cacert.pem
stat:
path: /etc/zookeeper/ca/certs/cacert.pem
register: _zookeeper_file_ssl_truststore_stat
- name: Assert _zookeeper_file_ssl_truststore_stat tests.
assert:
that:
- _zookeeper_file_ssl_truststore_stat.stat.exists
- _zookeeper_file_ssl_truststore_stat.stat.isreg
- _zookeeper_file_ssl_truststore_stat.stat.pw_name == 'zookeeper'
- _zookeeper_file_ssl_truststore_stat.stat.gr_name == 'zookeeper'
- _zookeeper_file_ssl_truststore_stat.stat.mode == '0644'
- name: Register /etc/zookeeper/ca/keystores/server.pem
stat:
path: /etc/zookeeper/ca/keystores/server.pem
register: _zookeeper_file_ssl_keystore_stat
- name: Assert _zookeeper_file_ssl_keystore_stat tests.
assert:
that:
- _zookeeper_file_ssl_keystore_stat.stat.exists
- _zookeeper_file_ssl_keystore_stat.stat.isreg
- _zookeeper_file_ssl_keystore_stat.stat.pw_name == 'zookeeper'
- _zookeeper_file_ssl_keystore_stat.stat.gr_name == 'zookeeper'
- _zookeeper_file_ssl_keystore_stat.stat.mode == '0600'
- name: Ensure zookeeper is running.
become: yes
shell: /usr/sbin/service zookeeper status
tags: skip_ansible_lint