group_vars/docker.yml

@@ -1,17 +1,4 @@
 ---
-### mgrote_minio_configure
-minio_url: https://s3.mgrote.net
-minio_root_access_key: "{{ lookup('viczem.keepass.keepass', 'minio_root_access_key', 'password') }}"
-minio_root_secret_key: "{{ lookup('viczem.keepass.keepass', 'minio_root_secret_key', 'password') }}"
-minio_users:
-  - name: testuser
-    secret: "{{ lookup('viczem.keepass.keepass', 'minio_testuser_secret_key', 'password') }}"
-    state: present
-    policy: testbucket_rw
-minio_buckets:
-  - name: testbucket
-    state: present
-
 ### mrlesmithjr.manage_lvm
 lvm_groups:
   - vgname: vg_docker
@@ -32,7 +19,6 @@ pvresize_to_max: true
 pip_package: python3-pip
 pip_install_packages:
   - name: docker # für munin-plugin docker_
-  - name: minio # für ansible-minio_configure-Rolle
 
 ### mgrote.apt_manage_packages
 apt_packages_extra:

roles/mgrote_minio_configure/defaults/main.yml

@@ -1,19 +1,15 @@
 ---
-# Client
+minio_root_access_key: pfiDnpEL3rL1CmIedZbD # händisch zu erstellen beium ersten minio aufsetzen
+minio_root_secret_key: Bc2eyAiTxLok0RawYguQJUB0hC8HtvCA7RjYRAfV # händisch zu erstellen beium ersten minio aufsetzen
+minio_root_alias: minio_ansible_root
+minio_url: https://s3.mgrote.net
+minio_config_dir: /etc/minio
 minio_client_release: ""
 minio_client_bin: /usr/local/bin/mc
+minio_print_keys: true # zeige secret in playbook
 
-# Allgemeines
-minio_config_dir: /etc/minio
-minio_root_alias: minio_ansible_root
+# --dp ausschreiben
 
-minio_url: https://s3.mgrote.net
-
-# Secrets
-minio_root_access_key: pfiDnXXXXXedZbD
-minio_root_secret_key: Bc2exxxxxxxxxxxxxYRAfV
-
-# User
 minio_users:
   - name: testuser5
     secret: hallowelt
@@ -28,10 +24,13 @@ minio_users:
     state: absent
     policy: testbucket3_ro
 
-# Buckets
 # Anzulegende Buckets, pro Bucket wird eine RW + RO Policy erstellt
 minio_buckets:
   - name: testbucket1
     state: present
   - name: testbucket3
     state: absent
+
+
+# auf docker10 aufraumen
+# und irtantu

roles/mgrote_minio_configure/tasks/main.yml

@@ -13,6 +13,9 @@
     secret_key: "{{ minio_root_secret_key }}"
     state: present
 
+# bug:delegate to geht nciht
+# linter
+
 - name: include policy tasks
   ansible.builtin.include_tasks: policy.yml
 
@@ -31,6 +34,3 @@
     state: "{{ item.state | default('present') }}"
   loop: "{{ minio_users }}"
   no_log: true
-
-# Bug: delegate_to: localhost
-# in ansible-devspace wird das Python Paket "minio" nicht gefunden

roles/mgrote_minio_configure/tasks/policy.yml

@@ -27,12 +27,12 @@
   loop: "{{ minio_buckets }}"
 
 - name: "setup policies (ro)"
-  ansible.builtin.command: "{{ minio_client_bin }} --disable-pager admin policy create {{ minio_root_alias }} {{ item.name }}_ro {{ minio_config_dir }}/{{ item.name }}_ro"
+  ansible.builtin.command: "{{ minio_client_bin }} --dp admin policy create {{ minio_root_alias }} {{ item.name }}_ro {{ minio_config_dir }}/{{ item.name }}_ro"
   loop: "{{ minio_buckets }}"
   changed_when: false # Befehl gibt immer "Created policy `testbucket3_ro` successfully." aus, unabhängig ob sie schon existiert oder nicht.
 
 - name: "setup policies (rw)"
-  ansible.builtin.command: "{{ minio_client_bin }} --disable-pager admin policy create {{ minio_root_alias }} {{ item.name }}_rw {{ minio_config_dir }}/{{ item.name }}_rw"
+  ansible.builtin.command: "{{ minio_client_bin }} --dp admin policy create {{ minio_root_alias }} {{ item.name }}_rw {{ minio_config_dir }}/{{ item.name }}_rw"
   loop: "{{ minio_buckets }}"
   changed_when: false # Befehl gibt immer "Created policy `testbucket3_ro` successfully." aus, unabhängig ob sie schon existiert oder nicht.
 
@@ -42,3 +42,5 @@
     state: absent
   loop: "{{ minio_buckets }}"
   when: '"absent" in item.state'
+
+# deletata to localhost