From 9325449dbe8c9590d6391bb1603f8f6377c181ae Mon Sep 17 00:00:00 2001
From: Trygve Laugstøl <trygvis@inamo.no>
Date: Fri, 21 Dec 2018 13:11:52 +0100
Subject: minio malabaricus

---
 ansible/host_vars/malabaricus/minio-secret.yml | 13 ++++++++
 ansible/host_vars/malabaricus/minio.yml        |  3 ++
 ansible/minio.yml                              |  3 +-
 ansible/roles/minio-server/defaults/main.yml   |  2 ++
 ansible/roles/minio-server/tasks/main.yml      | 43 +++++++++++++++++++++++---
 5 files changed, 57 insertions(+), 7 deletions(-)
 create mode 100644 ansible/host_vars/malabaricus/minio-secret.yml
 create mode 100644 ansible/roles/minio-server/defaults/main.yml

(limited to 'ansible')

diff --git a/ansible/host_vars/malabaricus/minio-secret.yml b/ansible/host_vars/malabaricus/minio-secret.yml
new file mode 100644
index 0000000..5a03a18
--- /dev/null
+++ b/ansible/host_vars/malabaricus/minio-secret.yml
@@ -0,0 +1,13 @@
+$ANSIBLE_VAULT;1.1;AES256
+63396232623465333162353734366431373230363438316637396465326337383834313463343731
+6532633063393762613637326438663332626264353834310a326163303831356164353261643966
+66313632636434303634303432663230333531343363643865373039633532356266643037653433
+6338303332633762380a376435383931646563356230376663656362316537646635653666633837
+65396335323431653930323931626666656534626230323962363861343630396666663765623534
+62376331313834653532613439323863363265396565306263376264666638336563316430396137
+66316166363030323336356563613061656362613136316336313362336335633163396434653035
+36656133393161376266663162376161343935376665386635316533643064303030626665333632
+61663739353764636434366535366266383836656634393264346265626561363134613332633531
+66356636646431643835646230633038396665316336643436383333643938623233376565613739
+32336161666161626636646433313732303462633263363232623435386465376333646133333933
+61376662636239363463
diff --git a/ansible/host_vars/malabaricus/minio.yml b/ansible/host_vars/malabaricus/minio.yml
index 0289be1..0711856 100644
--- a/ansible/host_vars/malabaricus/minio.yml
+++ b/ansible/host_vars/malabaricus/minio.yml
@@ -1 +1,4 @@
 minio_bin__minio_state: present
+
+minio_server__data:
+  - /data1/minio
diff --git a/ansible/minio.yml b/ansible/minio.yml
index ceaa44d..20faae9 100644
--- a/ansible/minio.yml
+++ b/ansible/minio.yml
@@ -2,10 +2,9 @@
     - birgitte
     - malabaricus
   roles:
-    - minio-bin
     - minio-server
 
 - hosts:
-    - all
+    - all !malabaricus # no binaries for arm
   roles:
     - minio-bin
diff --git a/ansible/roles/minio-server/defaults/main.yml b/ansible/roles/minio-server/defaults/main.yml
new file mode 100644
index 0000000..fd2b966
--- /dev/null
+++ b/ansible/roles/minio-server/defaults/main.yml
@@ -0,0 +1,2 @@
+minio_server__user: minio
+minio_server__group: minio
diff --git a/ansible/roles/minio-server/tasks/main.yml b/ansible/roles/minio-server/tasks/main.yml
index 2b2602c..f2df91d 100644
--- a/ansible/roles/minio-server/tasks/main.yml
+++ b/ansible/roles/minio-server/tasks/main.yml
@@ -1,19 +1,47 @@
 - become: yes
   tags:
     - minio-server
+  vars:
+    config_dir: /etc/minio
+    env_path: /etc/minio/env
+    user: "{{ minio_server__user }}"
+    group: "{{ minio_server__group }}"
   block:
     - name: /etc/minio directory
       file:
-        dest: /etc/minio
+        dest: "{{ env_path | dirname }}"
         state: directory
 
     - name: environment file
       no_log: yes
       copy:
-        dest: /etc/minio/env
+        dest: "{{ env_path }}"
         content: |
-          MINIO_ACCESS_KEY={{ minio__access_key }}
-          MINIO_SECRET_KEY={{ minio__secret_key }}
+          MINIO_ACCESS_KEY={{ minio_server__access_key }}
+          MINIO_SECRET_KEY={{ minio_server__secret_key }}
+
+    - file:
+        path: "{{ config_dir }}/certs"
+        owner: "{{ user }}"
+        group: "{{ group }}"
+        state: directory
+        recurse: yes
+
+    - group:
+        name: "{{ group }}"
+        system: yes
+
+    - user:
+        name: "{{ user }}"
+        group: "{{ group }}"
+        system: yes
+
+    - file:
+        path: "{{ item }}"
+        owner: "{{ user }}"
+        group: "{{ group }}"
+        state: directory
+      with_items: "{{ minio_server__data }}"
 
     - name: Install systemd service
       notify: systemd restart minio
@@ -24,10 +52,14 @@
           After=network.target
 
           [Service]
-          ExecStart=/usr/local/bin/minio server --config-dir /etc/minio /dropbox/minio
+          ExecStart=/usr/local/bin/minio server --config-dir {{ config_dir }} {{ minio_server__data | join(' ') }}
+          EnvironmentFile={{ env_path }}
+          User={{ user }}
+          Group={{ group }}
 
           [Install]
           WantedBy=multi-user.target
+# '
 
     - name: systemd enable minio
       become: yes
@@ -35,3 +67,4 @@
         service: minio
         state: restarted
         enabled: yes
+        daemon_reload: yes
-- 
cgit v1.2.3