updated keycloak
This commit is contained in:
1 parent
973b52c98f
commit
56e1187614
4 files changed
+32
-154
No files matched your search
+18
-107
@@ -43,51 +43,28 @@
|
||||
|
||||
- name: check if keycloak-dir exists
|
||||
stat:
|
||||
path: /opt/keycloak/keycloak-21.0.1
|
||||
path: /opt/keycloak/keycloak-{{ keycloak_version }}
|
||||
register: keycloak_exists
|
||||
|
||||
- name: Download keycloak-zip
|
||||
ansible.builtin.get_url:
|
||||
url: https://github.com/keycloak/keycloak/releases/download/21.1.1/keycloak-21.1.1.zip
|
||||
dest: /opt/ansiblepackages/keycloak-21.1.1.zip
|
||||
url: https://github.com/keycloak/keycloak/releases/download/{{ keycloak_version }}/keycloak-{{ keycloak_version }}.zip
|
||||
dest: /opt/ansiblepackages/keycloak-{{ keycloak_version }}.zip
|
||||
mode: '0400'
|
||||
|
||||
- name: Extract keycloak-211.1.zip to /opt/keycloak
|
||||
- name: Extract keycloak-{{ keycloak_version }}.zip to /opt/keycloak
|
||||
unarchive:
|
||||
src: /opt/ansiblepackages/keycloak-21.1.1.zip
|
||||
src: /opt/ansiblepackages/keycloak-{{ keycloak_version }}.zip
|
||||
dest: /opt/keycloak
|
||||
owner: keycloak
|
||||
group: keycloak
|
||||
remote_src: yes
|
||||
when: not keycloak_exists.stat.exists or redeploy is defined
|
||||
|
||||
- name: link /opt/keycloak/keycloak-21.1.1 to /opt/keycloak/current
|
||||
file:
|
||||
state: link
|
||||
owner: keycloak
|
||||
group: keycloak
|
||||
mode: '0770'
|
||||
src: /opt/keycloak/keycloak-21.1.1
|
||||
dest: /opt/keycloak/current
|
||||
|
||||
##build once
|
||||
- name: check if /opt/keycloak/current/builtonce.txt exists
|
||||
stat:
|
||||
path: /opt/keycloak/current/builtonce.txt
|
||||
register: builtonce_exists
|
||||
|
||||
- name: build keycloak
|
||||
command: sudo -u keycloak /opt/keycloak/current/bin/kc.sh build --db=postgres
|
||||
when: not builtonce_exists.stat.exists
|
||||
|
||||
- name: create file to track build
|
||||
- name: Create a directory if it does not exist
|
||||
ansible.builtin.file:
|
||||
path: /opt/keycloak/current/builtonce.txt
|
||||
owner: keycloak
|
||||
group: keycloak
|
||||
mode: '0770'
|
||||
state: touch
|
||||
when: not builtonce_exists.stat.exists
|
||||
path: /opt/keycloak/data
|
||||
state: directory
|
||||
|
||||
- name: set permissions correct
|
||||
file:
|
||||
@@ -97,6 +74,15 @@
|
||||
# mode: "0770"
|
||||
recurse: yes
|
||||
|
||||
- name: link /opt/keycloak/data to /opt/keycloak/keycloak-version/data
|
||||
file:
|
||||
state: link
|
||||
owner: keycloak
|
||||
group: keycloak
|
||||
mode: '0770'
|
||||
src: /opt/keycloak/data
|
||||
dest: /opt/keycloak/keycloak-{{ keycloak_version }}/data
|
||||
|
||||
- name: generate /etc/systemd/system/keycloak.service
|
||||
template:
|
||||
src: keycloak.service.j2
|
||||
@@ -106,6 +92,7 @@
|
||||
mode: "0644"
|
||||
notify:
|
||||
- reload systemd
|
||||
- restart keycloak
|
||||
|
||||
- name: Flush handlers
|
||||
meta: flush_handlers
|
||||
@@ -118,82 +105,6 @@
|
||||
notify:
|
||||
restart keycloak
|
||||
|
||||
- name: Flush handlers
|
||||
meta: flush_handlers
|
||||
|
||||
##add admin user once
|
||||
- name: check if /opt/keycloak/current/adminuseradded.txt exists
|
||||
stat:
|
||||
path: /opt/keycloak/current/adminuseradded.txt
|
||||
register: adminuseradded_exists
|
||||
|
||||
- name: stop keycloak
|
||||
ansible.builtin.service:
|
||||
name: keycloak
|
||||
state: stopped
|
||||
when: not adminuseradded_exists.stat.exists
|
||||
|
||||
- name: generate /etc/systemd/system/keycloak.service
|
||||
template:
|
||||
src: keycloak.service_init.j2
|
||||
dest: /etc/systemd/system/keycloak.service
|
||||
owner: root
|
||||
group: root
|
||||
mode: "0644"
|
||||
when: not adminuseradded_exists.stat.exists
|
||||
notify:
|
||||
- reload systemd
|
||||
|
||||
- name: Flush handlers
|
||||
meta: flush_handlers
|
||||
|
||||
- name: start keycloak
|
||||
ansible.builtin.service:
|
||||
name: keycloak
|
||||
state: started
|
||||
when: not adminuseradded_exists.stat.exists
|
||||
|
||||
- name: Sleep 120 seconds
|
||||
ansible.builtin.wait_for:
|
||||
timeout: 120
|
||||
delegate_to: localhost
|
||||
when: not adminuseradded_exists.stat.exists
|
||||
|
||||
- name: stop keycloak
|
||||
ansible.builtin.service:
|
||||
name: keycloak
|
||||
state: stopped
|
||||
when: not adminuseradded_exists.stat.exists
|
||||
|
||||
- name: generate /etc/systemd/system/keycloak.service
|
||||
template:
|
||||
src: keycloak.service.j2
|
||||
dest: /etc/systemd/system/keycloak.service
|
||||
owner: root
|
||||
group: root
|
||||
mode: "0644"
|
||||
when: not adminuseradded_exists.stat.exists
|
||||
notify:
|
||||
- reload systemd
|
||||
|
||||
- name: Flush handlers
|
||||
meta: flush_handlers
|
||||
|
||||
- name: start keycloak
|
||||
ansible.builtin.service:
|
||||
name: keycloak
|
||||
state: started
|
||||
when: not adminuseradded_exists.stat.exists
|
||||
|
||||
- name: create file to track user creation
|
||||
ansible.builtin.file:
|
||||
path: /opt/keycloak/current/adminuseradded.txt
|
||||
owner: keycloak
|
||||
group: keycloak
|
||||
mode: '0770'
|
||||
state: touch
|
||||
when: not adminuseradded_exists.stat.exists
|
||||
|
||||
- name: start keycloak
|
||||
ansible.builtin.service:
|
||||
name: keycloak
|
||||
|
||||
Reference in new issue
Block a user