st_deploy_master.yml

 # The playbook builds an EC deployment with PostgreSQL EC, 2 cores, 2 edges and a shared storage
 # This is intended to be used just as a reference and an example.
 # If you are using this to deploy SecureTransport, please review, validate and test all tasks and roles.
 # This is provided as-is, and you should run it at your own risk.
 # This is provided in order to provide usage examples and Axway cannot guarantee it is fit for production,
 # or provide ongoing support for it.
 # Author: Hristina Stoykova <hstoykova@axway.com>

- name: Build a SecureTransport 2 x 2 EC
  hosts: st_deployment
  vars_files:
    - files/external_vars.yml
    - files/download_links.yml
  pre_tasks:
    - name: Store the hostname of each node as a variable
      ansible.builtin.set_fact:
        node_hostname: "{{ hostvars[inventory_hostname]['ansible_fqdn'] }}"
    - name: Print the task start
      ansible.builtin.debug:
        msg: Starting to prepare the shared storage
    - name: Install and configure NFS server
      ansible.builtin.import_tasks: storage_install_tasks.yml
      when: inventory_hostname in groups["storage"]
  handlers:
    - name: NFS server restart
      ansible.builtin.service:
        name: nfs-server
        state: restarted
        enabled: true

- name: Build the Postgres database
  hosts: database
  become: true
  vars_files:
    - files/external_vars.yml
  roles:
    - role: postgres-config
      when: not skip_pgsql_install

- name: Prepare the OS
  ansible.builtin.import_playbook: os_install.yml
  vars:
    storage_hostname: "{{ hostvars['nfs_storage']['node_hostname'] }}"

- name: Build the ST nodes
  vars:
    storage_hostname: "{{ hostvars['nfs_storage']['node_hostname'] }}"
    edge_primary_hostname: "{{ hostvars['edge_primary']['node_hostname'] }}"
    edge_primary_ip: "{{ hostvars['edge_primary']['ansible_default_ipv4']['address'] }}"
    edge_secondary_ip: "{{ hostvars['edge_secondary']['ansible_default_ipv4']['address'] }}"
    edge_secondary_cidr: "{{ hostvars['edge_secondary']['ansible_default_ipv4']['address'] }}/32"
  hosts: ST_NODES
  become: true
  become_user: "{{ ST_USER }}"
  vars_files:
    - files/external_vars.yml
    - files/services_vars.yml
    - files/download_links.yml
  roles:
    - st_install

- name: Configure ST Cluster
  hosts: ST_NODES
  become: true
  become_user: "{{ ST_USER }}"
  roles:
    - st_configuration
  vars_files:
    - files/external_vars.yml
    - files/services_vars.yml

- name: Optimizing the ST nodes
  hosts: ST_NODES
  become: true
  roles:
    - st_optimization
  vars_files:
    - files/external_vars.yml
    - files/services_vars.yml

#- name: Sanity restart of all services
#  become: true
#  become_user: "{{ ST_USER }}"
#  hosts: ST_NODES
#  vars_files:
#    - files/external_vars.yml
#  tasks:
#    - name: Stop all
#      ansible.builtin.shell:
#        cmd: "sh {{ FILEDRIVEHOME }}/bin/stop_all -f"
#        executable: /usr/bin/bash
#      changed_when: true
#
#    - name: Start all
#      ansible.builtin.shell:
#        cmd: "sh {{ FILEDRIVEHOME }}/bin/start_all"
#        executable: /usr/bin/bash
#      changed_when: true

- name: Cleanup local files
  hosts: 127.0.0.1
  connection: local
  tasks:
    - name: Delete local directory
      ansible.builtin.file:
        path: "files/{{ item }}"
        state: absent
      with_items:
        - certs/core_primary.pem
        - certs/edge_primary.pem
        - core/taeh
        - edge/taeh
      tags:
        - cleanup_local