updated keycloak

This commit is contained in:
DigitalInfinity committed 2025-01-24 19:11:15 +01:00
1 parent 973b52c98f
commit 56e1187614
4 files changed
+32 -154

No files matched your search

+18 -107
View File
@@ -43,51 +43,28 @@
- name: check if keycloak-dir exists
stat:
path: /opt/keycloak/keycloak-21.0.1
path: /opt/keycloak/keycloak-{{ keycloak_version }}
register: keycloak_exists
- name: Download keycloak-zip
ansible.builtin.get_url:
url: https://github.com/keycloak/keycloak/releases/download/21.1.1/keycloak-21.1.1.zip
dest: /opt/ansiblepackages/keycloak-21.1.1.zip
url: https://github.com/keycloak/keycloak/releases/download/{{ keycloak_version }}/keycloak-{{ keycloak_version }}.zip
dest: /opt/ansiblepackages/keycloak-{{ keycloak_version }}.zip
mode: '0400'
- name: Extract keycloak-211.1.zip to /opt/keycloak
- name: Extract keycloak-{{ keycloak_version }}.zip to /opt/keycloak
unarchive:
src: /opt/ansiblepackages/keycloak-21.1.1.zip
src: /opt/ansiblepackages/keycloak-{{ keycloak_version }}.zip
dest: /opt/keycloak
owner: keycloak
group: keycloak
remote_src: yes
when: not keycloak_exists.stat.exists or redeploy is defined
- name: link /opt/keycloak/keycloak-21.1.1 to /opt/keycloak/current
file:
state: link
owner: keycloak
group: keycloak
mode: '0770'
src: /opt/keycloak/keycloak-21.1.1
dest: /opt/keycloak/current
##build once
- name: check if /opt/keycloak/current/builtonce.txt exists
stat:
path: /opt/keycloak/current/builtonce.txt
register: builtonce_exists
- name: build keycloak
command: sudo -u keycloak /opt/keycloak/current/bin/kc.sh build --db=postgres
when: not builtonce_exists.stat.exists
- name: create file to track build
- name: Create a directory if it does not exist
ansible.builtin.file:
path: /opt/keycloak/current/builtonce.txt
owner: keycloak
group: keycloak
mode: '0770'
state: touch
when: not builtonce_exists.stat.exists
path: /opt/keycloak/data
state: directory
- name: set permissions correct
file:
@@ -97,6 +74,15 @@
# mode: "0770"
recurse: yes
- name: link /opt/keycloak/data to /opt/keycloak/keycloak-version/data
file:
state: link
owner: keycloak
group: keycloak
mode: '0770'
src: /opt/keycloak/data
dest: /opt/keycloak/keycloak-{{ keycloak_version }}/data
- name: generate /etc/systemd/system/keycloak.service
template:
src: keycloak.service.j2
@@ -106,6 +92,7 @@
mode: "0644"
notify:
- reload systemd
- restart keycloak
- name: Flush handlers
meta: flush_handlers
@@ -118,82 +105,6 @@
notify:
restart keycloak
- name: Flush handlers
meta: flush_handlers
##add admin user once
- name: check if /opt/keycloak/current/adminuseradded.txt exists
stat:
path: /opt/keycloak/current/adminuseradded.txt
register: adminuseradded_exists
- name: stop keycloak
ansible.builtin.service:
name: keycloak
state: stopped
when: not adminuseradded_exists.stat.exists
- name: generate /etc/systemd/system/keycloak.service
template:
src: keycloak.service_init.j2
dest: /etc/systemd/system/keycloak.service
owner: root
group: root
mode: "0644"
when: not adminuseradded_exists.stat.exists
notify:
- reload systemd
- name: Flush handlers
meta: flush_handlers
- name: start keycloak
ansible.builtin.service:
name: keycloak
state: started
when: not adminuseradded_exists.stat.exists
- name: Sleep 120 seconds
ansible.builtin.wait_for:
timeout: 120
delegate_to: localhost
when: not adminuseradded_exists.stat.exists
- name: stop keycloak
ansible.builtin.service:
name: keycloak
state: stopped
when: not adminuseradded_exists.stat.exists
- name: generate /etc/systemd/system/keycloak.service
template:
src: keycloak.service.j2
dest: /etc/systemd/system/keycloak.service
owner: root
group: root
mode: "0644"
when: not adminuseradded_exists.stat.exists
notify:
- reload systemd
- name: Flush handlers
meta: flush_handlers
- name: start keycloak
ansible.builtin.service:
name: keycloak
state: started
when: not adminuseradded_exists.stat.exists
- name: create file to track user creation
ansible.builtin.file:
path: /opt/keycloak/current/adminuseradded.txt
owner: keycloak
group: keycloak
mode: '0770'
state: touch
when: not adminuseradded_exists.stat.exists
- name: start keycloak
ansible.builtin.service:
name: keycloak