ansible-role-atos-hsm/tasks/main.yaml
Douglas Mendizábal dd4a795e3a Unpin ansible-lint
This patch unpins ansible-lint to fix the failing gate.  All lint
errors have been fixed.

Change-Id: I8d8b67ba5db19464470fc4c3887fd8dd78800e7a
2023-09-22 12:55:43 -04:00

78 lines
2.2 KiB
YAML

---
- name: Create working directory
ansible.builtin.file:
path: "{{ atos_client_working_dir }}"
state: directory
mode: '755'
- name: Download ATOS client ISO
ansible.builtin.get_url:
url: "{{ atos_client_iso_location }}"
dest: "{{ atos_client_working_dir }}/{{ atos_client_iso_name }}"
mode: '644'
force: false
- name: Mount the iso for ATOS
ansible.posix.mount:
path: /mnt/atos_iso
src: "{{ atos_client_working_dir }}/{{ atos_client_iso_name }}"
fstype: iso9660
state: mounted
- name: Check for client software installation
ansible.builtin.stat:
path: /etc/proteccio/proteccio.rc.example
register: atos_client
- name: Install client software
ansible.builtin.expect:
chdir: /mnt/atos_iso/Linux
command: ./install.sh
responses:
"Select Language: enter f \\(french\\) or e \\(english\\) \\[f\\]": "e"
"Do you want to install the TrustWay Proteccio Administration Application \\(y/n\\)\\? \\[n\\]": "n"
"Press the <Enter> key to exit the installation program": "\n"
when: not atos_client.stat.exists
- name: Allow using legacy variables for backwards compatibility
ansible.builtin.set_fact:
atos_hsms:
- name: Legacy variables HSM
server_cert_location: "{{ atos_server_cert_location }}"
ip: "{{ atos_hsm_ip_address }}"
when: atos_hsms is not defined and atos_hsm_ip_address is defined
notify: Legacy vars warning
- name: Create proteccio.rc
ansible.builtin.template:
src: proteccio.rc.j2
dest: /etc/proteccio/proteccio.rc
mode: '644'
- name: Get the client cert
ansible.builtin.get_url:
url: "{{ atos_client_cert_location }}"
dest: /etc/proteccio/proteccio_client.crt
mode: '644'
force: false
- name: Get the client key
ansible.builtin.get_url:
url: "{{ atos_client_key_location }}"
dest: /etc/proteccio/proteccio_client.key
mode: '644'
force: false
- name: Get the server cert
ansible.builtin.get_url:
url: "{{ item.server_cert_location }}"
dest: "/etc/proteccio/{{ item.ip | replace('.', '_') }}.CRT"
mode: '644'
force: false
loop: "{{ atos_hsms }}"
- name: Run nethsmstatus to confirm connection
ansible.builtin.command: nethsmstatus
register: out
changed_when: out.rc != 0