authorized_key:
user: "{{ cm_user }}"
key: "{{ item }}"
- with_items: cm_user_ssh_keys
+ with_items: "{{ cm_user_ssh_keys }}"
when: cm_user_ssh_keys is defined and
cm_user is defined
tags:
apt:
name: "{{ item }}"
state: latest
- with_items: cobbler_extra_packages
+ with_items: "{{ cobbler_extra_packages }}"
when: cobbler_extra_packages|length > 0
content: "{{ item.data }}"
dest: "{{ item.path }}"
mode: '600'
- with_items: cobbler_keys["{{ ansible_hostname }}"]
+ with_items: "{{ cobbler_keys[ansible_hostname] }}"
no_log: true
- name: Include package type specific vars.
- name: Update settings
command: cobbler setting edit --name={{ item.name }} --value={{ item.value}}
- with_items: settings
+ with_items: "{{ settings }}"
owner: root
group: root
mode: 0644
- with_items: kickstarts
+ with_items: "{{ kickstarts }}"
tags:
- kickstarts
owner: root
group: root
mode: 0644
- with_items: snippets
+ with_items: "{{ snippets }}"
tags:
- snippets
owner: root
group: root
mode: 0644
- with_items: scripts
+ with_items: "{{ scripts }}"
tags:
- scripts
owner: root
group: root
mode: 0744
- with_items: triggers
+ with_items: "{{ triggers }}"
tags:
- triggers
owner: root
group: root
mode: 0755
- with_items: utils
+ with_items: "{{ utils }}"
tags:
- utils
yum:
name: "{{ item }}"
state: latest
- with_items: cobbler_extra_packages
+ with_items: "{{ cobbler_extra_packages }}"
when: cobbler_extra_packages|length > 0
# configure red hat specific things
- name: Add missing systems to cobbler
command: cobbler system add --name={{ item.split('.')[0] }} --profile={{ default_profile }} --mac={{ hostvars[item].mac }} --ip-address={{ hostvars[item].ip }} --interface={{ hostvars[item].interface|default(interface) }} --hostname={{ item.split('.')[0] }}.{{ lab_domain }} --kopts="{{ hostvars[item].kernel_options|default(kernel_options) }}" --ksmeta="{{ hostvars[item].kickstart_metadata|default(kickstart_metadata) }}" --power-type={{ hostvars[item].power_type|default(power_type) }} --power-address={{ item.split('.')[0] }}.{{ ipmi_domain }} --power-user={{ hostvars[item].power_user|default(power_user) }} --power-pass={{ hostvars[item].power_pass|default(power_pass) }} --netboot-enabled false
- with_items: cobbler_systems_add
+ with_items: "{{ cobbler_systems_add }}"
- name: set cobbler_systems_update
set_fact:
- name: Update existing systems in cobbler
command: cobbler system edit --name={{ item.split('.')[0] }} --mac={{ hostvars[item].mac }} --ip-address={{ hostvars[item].ip }} --interface={{ hostvars[item].interface|default(interface) }} --hostname={{ item.split('.')[0] }}.{{ lab_domain }} --kopts="{{ hostvars[item].kernel_options|default(kernel_options) }}" --ksmeta="{{ hostvars[item].kickstart_metadata|default(kickstart_metadata) }}" --power-type={{ hostvars[item].power_type|default(power_type) }} --power-address={{ item.split('.')[0] }}.{{ ipmi_domain }} --power-user={{ hostvars[item].power_user|default(power_user) }} --power-pass={{ hostvars[item].power_pass|default(power_pass) }}
- with_items: cobbler_systems_update
+ with_items: "{{ cobbler_systems_update }}"
- name: Enable necessary rhsm repos
command: subscription-manager repos --enable {{ item }}
- with_items: rhsm_repos
+ with_items: "{{ rhsm_repos }}"
when: replace_repos
- name: Remove old apt-mirror repository definition.
regexp: "enabled=1"
backrefs: yes
state: present
- with_items: repos
+ with_items: "{{ repos }}"
ignore_errors: true
regexp: "enabled=0"
backrefs: yes
state: present
- with_items: repos
+ with_items: "{{ repos }}"
ignore_errors: true
file:
path: "/etc/yum.repos.d/{{ item }}.repo"
state: absent
- with_items: repos
+ with_items: "{{ repos }}"
url: "{{ item.url }}"
dest: "/etc/yum.repos.d/{{ item.name }}.repo"
force: yes
- with_items: repos
+ with_items: "{{ repos }}"
name: "{{ item }}"
state: latest
enablerepo: epel
- with_items: packages
+ with_items: "{{ packages }}"
name: "{{ item }}"
state: latest
enablerepo: epel
- with_items: packages
+ with_items: "{{ packages }}"
update_cache: true
name: "{{ item }}"
state: "{{ state }}"
- with_items: apt_packages
+ with_items: "{{ apt_packages }}"
when: apt_packages|length > 0 and
ansible_pkg_mgr == "apt"
yum:
name: "{{ item }}"
state: "{{ state }}"
- with_items: yum_packages
+ with_items: "{{ yum_packages }}"
when: yum_packages|length > 0 and
ansible_pkg_mgr == "yum"
name: "{{ item }}"
state: absent
force: yes
- with_items: ceph_packages_to_remove|list + packages_to_remove|list
+ with_items: "{{ ceph_packages_to_remove|list + packages_to_remove|list }}"
when: ceph_packages_to_remove|length > 0 or
packages_to_remove|length > 0
name: "{{ item }}"
state: latest
force: yes
- with_items: packages_to_upgrade
+ with_items: "{{ packages_to_upgrade }}"
when: packages_to_upgrade|length > 0
- name: Upgrade non aarch64 packages
name: "{{ item }}"
state: latest
force: yes
- with_items: non_aarch64_packages_to_upgrade
+ with_items: "{{ non_aarch64_packages_to_upgrade }}"
when:
non_aarch64_packages_to_upgrade|length > 0 and
ansible_architecture != "aarch64"
name: "{{ item }}"
state: present
force: yes
- with_items: packages|list + common_packages|list
+ with_items: "{{ packages|list + common_packages|list }}"
when: packages|length > 0 or
common_packages|length > 0
name: "{{ item }}"
state: present
force: yes
- with_items: non_aarch64_packages|list + non_aarch64_common_packages|list
+ with_items: "{{ non_aarch64_packages|list + non_aarch64_common_packages|list }}"
when: ansible_architecture != "aarch64"
- name: Remove custom repos
file: path=/etc/apt/sources.list.d/{{ item }} state=absent
- with_items: custom_repos.stdout_lines
+ with_items: "{{ custom_repos.stdout_lines }}"
# Ignore changes here because we will be removing repos that we end up re-adding later
changed_when: false
state: present
update_cache: no
mode: 0644
- with_items: apt_repos|list + common_apt_repos|list
+ with_items: "{{ apt_repos|list + common_apt_repos|list }}"
register: local_apt_repos
when: ansible_architecture != "aarch64"
yum:
name: "{{ item }}"
state: absent
- with_items: ceph_packages_to_remove
+ with_items: "{{ ceph_packages_to_remove }}"
tags:
- remove-ceph
yum:
name: "{{ item }}"
state: absent
- with_items: ceph_dependency_packages_to_remove
+ with_items: "{{ ceph_dependency_packages_to_remove }}"
tags:
- remove-ceph-dependency
yum:
name: "{{ item }}"
state: present
- with_items: packages
+ with_items: "{{ packages }}"
when: packages|length > 0
- name: Install epel packages
name: "{{ item }}"
state: present
enablerepo: epel
- with_items: epel_packages
+ with_items: "{{ epel_packages }}"
when: epel_packages|length > 0
- name: Remove packages
yum:
name: "{{ item }}"
state: absent
- with_items: packages_to_remove
+ with_items: "{{ packages_to_remove }}"
when: packages_to_remove|length > 0
- name: Upgrade packages
yum:
name: "{{ item }}"
state: latest
- with_items: packages_to_upgrade
+ with_items: "{{ packages_to_upgrade }}"
when: packages_to_upgrade|length > 0
groups: sudo
shell: /bin/bash
state: present
- with_items: managed_admin_users
+ with_items: "{{ managed_admin_users }}"
- name: Create all users without sudo access.
user:
name: "{{ item.name }}"
shell: /bin/bash
state: present
- with_items: managed_users
+ with_items: "{{ managed_users }}"
user:
name: "{{ item }}"
state: absent
- with_items: revoked_users
+ with_items: "{{ revoked_users }}"
- name: See which pools are defined and which are not
shell: virsh pool-info {{ item }}
- with_items: ls_libvirtpool.stdout_lines
+ with_items: "{{ ls_libvirtpool.stdout_lines }}"
register: pool_info
when: srv_libvirtpool.stat.exists
# don't bother reporting anything about this command; it's not useful