eacff93232
This adds TLS support for zookeeper Change-Id: I08c847d1d47a2ebd81f089befbef9a54ea1f6d4c Signed-off-by: Paul Belanger <pabelanger@redhat.com>
62 lines
2.2 KiB
YAML
62 lines
2.2 KiB
YAML
# Copyright 2018 Red Hat, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
---
|
|
- hosts: all
|
|
vars:
|
|
rolename: ansible-role-zookeeper
|
|
|
|
roles:
|
|
- "{{ rolename }}"
|
|
|
|
post_tasks:
|
|
- name: Assert results are registered.
|
|
assert:
|
|
that:
|
|
- zookeeper_file_ssl_keystore
|
|
- zookeeper_file_ssl_truststore
|
|
- zookeeper_service_zookeeper
|
|
|
|
- name: Register /etc/zookeeper/ca/certs/cacert.pem
|
|
stat:
|
|
path: /etc/zookeeper/ca/certs/cacert.pem
|
|
register: _zookeeper_file_ssl_truststore_stat
|
|
|
|
- name: Assert _zookeeper_file_ssl_truststore_stat tests.
|
|
assert:
|
|
that:
|
|
- _zookeeper_file_ssl_truststore_stat.stat.exists
|
|
- _zookeeper_file_ssl_truststore_stat.stat.isreg
|
|
- _zookeeper_file_ssl_truststore_stat.stat.pw_name == 'zookeeper'
|
|
- _zookeeper_file_ssl_truststore_stat.stat.gr_name == 'zookeeper'
|
|
- _zookeeper_file_ssl_truststore_stat.stat.mode == '0644'
|
|
|
|
- name: Register /etc/zookeeper/ca/keystores/server.pem
|
|
stat:
|
|
path: /etc/zookeeper/ca/keystores/server.pem
|
|
register: _zookeeper_file_ssl_keystore_stat
|
|
|
|
- name: Assert _zookeeper_file_ssl_keystore_stat tests.
|
|
assert:
|
|
that:
|
|
- _zookeeper_file_ssl_keystore_stat.stat.exists
|
|
- _zookeeper_file_ssl_keystore_stat.stat.isreg
|
|
- _zookeeper_file_ssl_keystore_stat.stat.pw_name == 'zookeeper'
|
|
- _zookeeper_file_ssl_keystore_stat.stat.gr_name == 'zookeeper'
|
|
- _zookeeper_file_ssl_keystore_stat.stat.mode == '0600'
|
|
|
|
- name: Ensure zookeeper is running.
|
|
become: yes
|
|
shell: /usr/sbin/service zookeeper status
|
|
tags: skip_ansible_lint
|