ansible-koji/deploy.yaml
Rénich Bon Ćirić 89d6f66be8
feat: Integración de Siguldry PKCS#11 y spooler de firmas
* Implementación del rol de Ansible 'siguldry' para CentOS Stream 10
* Migración del plugin de firmas de Koji Hub a un spooler asíncrono
* Modificación de roles para utilizar empaquetamiento RPM nativo de siguldry-pkcs11
* Documentación de decisiones (ADRs) y roadmap en docs/technical/
* Limpieza de binarios locales pesados de PKCS#11 en Ansible

Co-developed-by: Gemini AI <renich+gemini@woralelandia.com>
Signed-off-by: Rénich Bon Ćirić <renich@woralelandia.com>
2026-06-16 10:06:44 -06:00

91 lines
1.9 KiB
YAML

---
- name: "Setup: Common and Certificates"
hosts: localhost
vars_files:
- vars/default.yaml
- vars/credentials.yaml
connection: local
gather_facts: true
roles:
- role: common
tags: common
- name: "Setup: Common on all hosts"
hosts: all
vars_files:
- vars/default.yaml
roles:
- role: common
tags: common
- name: "Setup: NFS Server"
hosts: kojifs
vars_files:
- vars/default.yaml
roles:
- role: nfs_server
tags: nfs_server
- name: "Setup: Database Server"
hosts: kojidb
vars_files:
- vars/default.yaml
- vars/credentials.yaml
roles:
- role: postgresql
tags: postgresql
- name: "Setup: NFS Client"
hosts: koji_nodes
vars_files:
- vars/default.yaml
pre_tasks:
- name: Gather facts for kojifs host
ansible.builtin.setup:
delegate_to: "{{ item }}"
delegate_facts: true
run_once: true
when: groups['kojifs'] is defined and inventory_hostname in groups['koji_nodes'] # Only gather if kojifs exists and if we're running on a koji_node
loop: "{{ groups['kojifs'] }}"
roles:
- role: nfs_client
tags: nfs_client
- name: "Deploy: Koji Hub, Kojira, and Mock Sigul Server"
hosts: kojihub
vars_files:
- vars/default.yaml
- vars/credentials.yaml
roles:
- role: koji_hub
tags: koji_hub
- role: kojira
tags: kojira
- role: siguldry
tags: siguldry
- name: "Deploy: Koji Builders"
hosts: kojibuilders
vars_files:
- vars/default.yaml
- vars/credentials.yaml
pre_tasks:
- name: Gather facts for kojihub host
ansible.builtin.setup:
delegate_to: "{{ item }}"
delegate_facts: true
run_once: true
when: groups['kojihub'] is defined
loop: "{{ groups['kojihub'] }}"
roles:
- role: kojid
tags: kojid
- name: "Deploy: Dist-Git Server"
hosts: dist-git
vars_files:
- vars/default.yaml
roles:
- role: dist_git
tags: dist_git
...