eacff93232
This adds TLS support for zookeeper Change-Id: I08c847d1d47a2ebd81f089befbef9a54ea1f6d4c Signed-off-by: Paul Belanger <pabelanger@redhat.com>
89 lines
3.5 KiB
YAML
89 lines
3.5 KiB
YAML
# Copyright 2015 Red Hat, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
---
|
|
# tasks/main.yaml
|
|
zookeeper_task_manager:
|
|
- pre
|
|
- install
|
|
- config
|
|
- service
|
|
|
|
# tasks/config.yaml
|
|
zookeeper_user_name: zookeeper
|
|
zookeeper_user_group: zookeeper
|
|
zookeeper_user_home: /var/lib/zookeeper
|
|
zookeeper_user_home_mode: 0750
|
|
# zookeeper_user_shell:
|
|
|
|
zookeeper_file_log4j_properties_dest: /etc/zookeeper/conf/log4j.properties
|
|
zookeeper_file_log4j_properties_group: zookeeper
|
|
zookeeper_file_log4j_properties_mode: 0644
|
|
zookeeper_file_log4j_properties_owner: zookeeper
|
|
zookeeper_file_log4j_properties_src: etc/zookeeper/conf/log4j.properties
|
|
|
|
zookeeper_file_myid_group: zookeeper
|
|
zookeeper_file_myid_mode: 0644
|
|
zookeeper_file_myid_owner: zookeeper
|
|
|
|
zookeeper_file_zoo_conf_group: zookeeper
|
|
zookeeper_file_zoo_conf_mode: 0644
|
|
zookeeper_file_zoo_conf_owner: zookeeper
|
|
|
|
zookeeper_file_ssl_truststore_content:
|
|
zookeeper_file_ssl_truststore_dest: /etc/zookeeper/ca/certs/cacert.pem
|
|
zookeeper_file_ssl_truststore_group: "{{ zookeeper_user_group }}"
|
|
zookeeper_file_ssl_truststore_mode: 0644
|
|
zookeeper_file_ssl_truststore_owner: "{{ zookeeper_user_name }}"
|
|
zookeeper_file_ssl_truststore_src: etc/zookeeper/ca/certs/cacert.pem
|
|
|
|
zookeeper_file_ssl_keystore_content:
|
|
zookeeper_file_ssl_keystore_dest: /etc/zookeeper/ca/keystores/server.pem
|
|
zookeeper_file_ssl_keystore_group: "{{ zookeeper_user_group }}"
|
|
zookeeper_file_ssl_keystore_mode: 0600
|
|
zookeeper_file_ssl_keystore_owner: "{{ zookeeper_user_name }}"
|
|
zookeeper_file_ssl_keystore_src: etc/zookeeper/ca/keystores/server.pem
|
|
|
|
# tasks/install.yaml
|
|
zookeeper_package_state: present
|
|
|
|
zookeeper_install_method: package
|
|
|
|
zookeeper_tarball_creates: "{{ zookeeper_tarball_dest }}/apache-zookeeper-{{ zookeeper_tarball_version }}-bin"
|
|
zookeeper_tarball_dest: "/opt/tarballs"
|
|
zookeeper_tarball_remote_src: true
|
|
zookeeper_tarball_src: "https://archive.apache.org/dist/zookeeper/zookeeper-{{ zookeeper_tarball_version }}/apache-zookeeper-{{ zookeeper_tarball_version }}-bin.tar.gz"
|
|
zookeeper_tarball_symlink: /opt/zookeeper
|
|
zookeeper_tarball_version:
|
|
|
|
# tasks/service.yaml
|
|
zookeeper_file_zookeeper_service_dest: /etc/systemd/system/zookeeper.service
|
|
zookeeper_file_zookeeper_service_group: root
|
|
zookeeper_file_zookeeper_service_manage: true
|
|
zookeeper_file_zookeeper_service_mode: 0644
|
|
zookeeper_file_zookeeper_service_owner: root
|
|
zookeeper_file_zookeeper_service_src: etc/systemd/system/zookeeper.service
|
|
|
|
zookeeper_file_zookeeper_service_config_dest: /etc/systemd/system/zookeeper.service.d/override.conf
|
|
zookeeper_file_zookeeper_service_config_group: root
|
|
zookeeper_file_zookeeper_service_config_manage: true
|
|
zookeeper_file_zookeeper_service_config_mode: 0644
|
|
zookeeper_file_zookeeper_service_config_owner: root
|
|
zookeeper_file_zookeeper_service_config_src: etc/systemd/system/zookeeper.service.d/override.conf
|
|
|
|
zookeeper_service_zookeeper_daemon_reload: true
|
|
zookeeper_service_zookeeper_enabled: yes
|
|
zookeeper_service_zookeeper_manage: true
|
|
zookeeper_service_zookeeper_name: zookeeper
|
|
zookeeper_service_zookeeper_state: started
|