Code development platform for open source projects from the European Union institutions

Skip to content
Snippets Groups Projects
Commit 680c133a authored by Joffrey STUTZ's avatar Joffrey STUTZ
Browse files

[playbook-auth-usersldap.yml] cleaned add/rm user mount tasks

parent ac37e59b
No related branches found
No related tags found
No related merge requests found
# https://intragate.ec.europa.eu/snet/wiki/index.php/Service_Support/Application_Management_Service/Snet_AAA/Account_creation_and_deletion_of_Snet_members # https://intragate.ec.europa.eu/snet/wiki/index.php/Service_Support/Application_Management_Service/Snet_AAA/Account_creation_and_deletion_of_Snet_members
# ansible-playbook-2.9 playbook-auth-usersldap.yml --extra-vars "username=xxx scrat_user=xxx" -kK --tags "add_user/rm_user, mandatory" -u snet # ansible-playbook-4.7 playbook-auth-usersldap.yml --extra-vars "username=xxx scrat_user=xxx" -kK --tags "add_user/rm_user, mandatory" -u snet
# To run specific task: # To run specific task:
# ansible-playbook-2.9 playbook-auth-usersldap.yml --extra-vars "username=xxx" -kK --tags "propagate" -u snet # ansible-playbook-4.7 playbook-auth-usersldap.yml --extra-vars "username=xxx" -kK --tags "propagate" -u snet
--- ---
- hosts: localhost - hosts: localhost
...@@ -68,11 +66,6 @@ ...@@ -68,11 +66,6 @@
whoami: "{{register_whoami.stdout}}" whoami: "{{register_whoami.stdout}}"
changed_when: False changed_when: False
# - name: check that user is known
# fail:
# msg: "whoami should not be snet or www-data not: '{{whoami}}'"
# when: "whoami in ['snet', 'www-data', 'root', 'unknown']"
- name: debug - name: debug
debug: debug:
msg: "The whoami is {{ whoami }}" msg: "The whoami is {{ whoami }}"
...@@ -82,43 +75,40 @@ ...@@ -82,43 +75,40 @@
########## ##########
#Add user# #Add user#
########## ##########
- name: Add user on Vshare - name: Add user on Vshare
block: block:
- name: allow share on fstab on vshare - name: set /opt/home_nas
replace: ansible.builtin.file:
path: /etc/fstab path: /opt/home_nas
#regexp: '#vnx2nfs-vshare-lu.snmc.cec.eu.int:/fs/home' state: directory
#replace: 'vnx2nfs-vshare-lu.snmc.cec.eu.int:/fs/home' mode: '0755'
regexp: '#unityspb-vshare-lu.snmc.cec.eu.int:/fs_home' owner: root
replace: 'unityspb-vshare-lu.snmc.cec.eu.int:/fs_home' group: root
- name: mount all - name: mount /opt/home_nas
command: mount -a mount:
path: /opt/home_nas
state: mounted
src: unityspb-vshare-lu.snmc.cec.eu.int:/fs_home
opts: defaults,rw,soft,nolock,tcp,vers=3
boot: false
fstype: nfs
- name: Create user directory in home - name: Create user directory in home
file: ansible.builtin.file:
path: /opt/new_home_vnx/{{username}} path: /opt/home_nas/{{username}}
state: directory state: directory
mode: '0755' mode: '0755'
owner: "{{username}}" owner: "{{username}}"
group: snmc group: snmc
- name: Unmount /opt/new_home_vnx - name: Unmount /opt/home_nas
mount: mount:
path: /opt/new_home_vnx path: /opt/home_nas
state: unmounted state: unmounted
- name: Disallow share on fstab on vshare
replace:
path: /etc/fstab
#regexp: 'vnx2nfs-vshare-lu.snmc.cec.eu.int:/fs/home'
#replace: '#vnx2nfs-vshare-lu.snmc.cec.eu.int:/fs/home'
regexp: 'unityspb-vshare-lu.snmc.cec.eu.int:/fs_home'
replace: '#unityspb-vshare-lu.snmc.cec.eu.int:/fs_home'
become: true become: true
delegate_to: vshare-jmo.snmc.cec.eu.int delegate_to: vshare-bx.snmc.cec.eu.int
tags: tags:
- add_user - add_user
- add_user_vshare - add_user_vshare
...@@ -129,48 +119,45 @@ ...@@ -129,48 +119,45 @@
- name: Remove user on Vshare - name: Remove user on Vshare
block: block:
- name: allow share on fstab on vshare - name: set /opt/home_nas
replace: ansible.builtin.file:
path: /etc/fstab path: /opt/home_nas
#regexp: '#vnx2nfs-vshare-lu.snmc.cec.eu.int:/fs/home' state: directory
#replace: 'vnx2nfs-vshare-lu.snmc.cec.eu.int:/fs/home' mode: '0755'
regexp: '#unityspb-vshare-lu.snmc.cec.eu.int:/fs_home' owner: root
replace: 'unityspb-vshare-lu.snmc.cec.eu.int:/fs_home' group: root
- name: mount all
shell:
cmd: "mount -a"
- name: stat /opt/new_home_vnx/{{username}} - name: mount /opt/home_nas
mount:
path: /opt/home_nas
state: mounted
src: unityspb-vshare-lu.snmc.cec.eu.int:/fs_home
opts: defaults,rw,soft,nolock,tcp,vers=3
boot: false
fstype: nfs
- name: stat /opt/home_nas/{{username}}
stat: stat:
path: /opt/new_home_vnx/{{username}} path: /opt/home_nas/{{username}}
register: user_folder register: user_folder
- name: Compress and archive - name: Compress and archive
shell: shell:
cmd: tar -jcf /opt/new_home_vnx/_OLD/{{username}}.tbz /opt/new_home_vnx/{{username}} cmd: tar -jcf /opt/home_nas/_OLD/{{username}}.tbz /opt/home_nas/{{username}}
when: user_folder.stat.exists when: user_folder.stat.exists
- name: Delete user directory in home - name: Delete user directory in home
file: file:
path: /opt/new_home_vnx/{{username}} path: /opt/home_nas/{{username}}
state: absent state: absent
- name: Unmount /opt/new_home_vnx - name: Unmount /opt/home_nas
mount: mount:
path: /opt/new_home_vnx path: /opt/home_nas
state: unmounted state: unmounted
- name: Disallow share on fstab on vshare
replace:
path: /etc/fstab
#regexp: 'vnx2nfs-vshare-lu.snmc.cec.eu.int:/fs/home'
#replace: '#vnx2nfs-vshare-lu.snmc.cec.eu.int:/fs/home'
regexp: 'unityspb-vshare-lu.snmc.cec.eu.int:/fs_home'
replace: '#unityspb-vshare-lu.snmc.cec.eu.int:/fs_home'
become: true become: true
delegate_to: vshare-jmo.snmc.cec.eu.int delegate_to: vshare-bx.snmc.cec.eu.int
tags: tags:
- rm_user - rm_user
- rm_user_vshare - rm_user_vshare
...@@ -199,7 +186,6 @@ ...@@ -199,7 +186,6 @@
tags: tags:
- mandatory - mandatory
- propagate - propagate
#when: false
- name: Launch propagate users on leankit - name: Launch propagate users on leankit
shell: shell:
...@@ -218,12 +204,14 @@ ...@@ -218,12 +204,14 @@
tags: tags:
- mandatory - mandatory
- propagate - propagate
#when: false
- name: Launch redmine LDAP sync - name: Launch redmine LDAP sync
shell: shell:
cmd: sudo -u www-data /usr/local/sbin/snet-redmine-ldapsync cmd: /usr/local/sbin/sync_users
delegate_to: vcodebox-lu.snmc.cec.eu.int become: true
become_method: sudo
delegate_to: "{{ item }}"
loop: "{{ groups['vredmine_prd'] }}"
tags: tags:
- mandatory - mandatory
- redmine - redmine
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment