mirror of
https://github.com/ansible-middleware/keycloak.git
synced 2025-04-07 03:10:31 -07:00
48 lines
1.6 KiB
YAML
48 lines
1.6 KiB
YAML
---
|
|
- name: Prepare
|
|
hosts: all
|
|
tasks:
|
|
- name: "Display hera_home if defined."
|
|
ansible.builtin.set_fact:
|
|
hera_home: "{{ lookup('env', 'HERA_HOME') }}"
|
|
|
|
- name: "Ensure common prepare phase are set."
|
|
ansible.builtin.include_tasks: ../prepare.yml
|
|
|
|
- name: Create certificate request
|
|
ansible.builtin.command: openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -sha256 -days 365 -nodes -subj '/CN=instance'
|
|
delegate_to: localhost
|
|
changed_when: False
|
|
|
|
- name: Create conf directory # risky-file-permissions in test user account does not exist yet
|
|
become: true
|
|
ansible.builtin.file:
|
|
state: directory
|
|
path: "/opt/keycloak/certs/"
|
|
mode: 0755
|
|
|
|
- name: Make sure a jre is available (for keytool to prepare keystore)
|
|
delegate_to: localhost
|
|
ansible.builtin.package:
|
|
name: "{{ 'java-17-openjdk-headless' if hera_home | length > 0 else 'openjdk-17-jdk-headless' }}"
|
|
state: present
|
|
become: true
|
|
failed_when: false
|
|
|
|
- name: Create vault keystore
|
|
ansible.builtin.command: keytool -importpass -alias TestRealm_testalias -keystore keystore.p12 -storepass keystorepassword
|
|
delegate_to: localhost
|
|
register: keytool_cmd
|
|
changed_when: False
|
|
failed_when: not 'already exists' in keytool_cmd.stdout and keytool_cmd.rc != 0
|
|
|
|
- name: Copy certificates and vault
|
|
become: true
|
|
ansible.builtin.copy:
|
|
src: "{{ item }}"
|
|
dest: "/opt/keycloak/certs/{{ item }}"
|
|
mode: 0444
|
|
loop:
|
|
- cert.pem
|
|
- key.pem
|
|
- keystore.p12
|