Commit e38abf26 by Jason Bau

changes to make 3-27 install work

parent e2e2ee93
...@@ -41,7 +41,6 @@ ...@@ -41,7 +41,6 @@
- role: 'edxapp' - role: 'edxapp'
celery_worker: True celery_worker: True
devstack: false devstack: false
tags: celery
- role: nginx - role: nginx
nginx_sites: nginx_sites:
- xqueue - xqueue
......
...@@ -43,7 +43,6 @@ ...@@ -43,7 +43,6 @@
- role: 'edxapp' - role: 'edxapp'
celery_worker: True celery_worker: True
devstack: false devstack: false
tags: celery
- role: nginx - role: nginx
nginx_sites: nginx_sites:
- xqueue - xqueue
......
...@@ -37,25 +37,23 @@ ...@@ -37,25 +37,23 @@
- jinpa - jinpa
- gbruhns - gbruhns
tags: users tags: users
- role: 'common' - common
tags: common - supervisor
- role: 'supervisor' - role: edxapp
tags: supervisor
- role: 'edxapp'
celery_worker: True celery_worker: True
devstack: false devstack: false
tags: celery
- role: nginx - role: nginx
nginx_sites: nginx_sites:
- xqueue - xqueue
- basic-auth - basic-auth
tags: nginx tags:
- nginx
- role: xqueue - role: xqueue
xqueue_create_db: "no" xqueue_create_db: "no"
xqueue_create_users: false xqueue_create_users: false
tags: xqueue tags:
- xqueue
- datadog - datadog
#- splunkforwarder
- name: run the certificate agent on the first util machine only - name: run the certificate agent on the first util machine only
hosts: ~tag_Name_util1_prod hosts: ~tag_Name_util1_prod
......
...@@ -44,6 +44,7 @@ ...@@ -44,6 +44,7 @@
- lms - lms
- role: edxapp - role: edxapp
devstack: false devstack: false
tags: edxapp
- apache - apache
- shibboleth - shibboleth
#- datadog #- datadog
......
...@@ -42,7 +42,6 @@ ...@@ -42,7 +42,6 @@
- role: edxapp - role: edxapp
celery_worker: True celery_worker: True
devstack: false devstack: false
tags: celery
- role: nginx - role: nginx
nginx_sites: nginx_sites:
- xqueue - xqueue
......
...@@ -28,7 +28,7 @@ ...@@ -28,7 +28,7 @@
- name: Register the fact that apache role has run - name: Register the fact that apache role has run
command: echo True command: echo True
register: apache_role_run register: apache_role_run
notify: apache | restart apache notify: restart apache
tags: tags:
- apache - apache
- install - install
......
...@@ -54,7 +54,13 @@ ...@@ -54,7 +54,13 @@
- "{{ certs_app_dir }}" - "{{ certs_app_dir }}"
- "{{ certs_venvs_dir }}" - "{{ certs_venvs_dir }}"
- name: create certs gpg dir - name: destroy certs gpg dir
file: >
path="{{ certs_gpg_dir }}" state=absent
recurse="yes"
notify: restart certs
- name: recreate certs gpg dir
file: > file: >
path="{{ certs_gpg_dir }}" state=directory path="{{ certs_gpg_dir }}" state=directory
owner="{{ common_web_user }}" owner="{{ common_web_user }}"
...@@ -64,17 +70,25 @@ ...@@ -64,17 +70,25 @@
- name: copy the private gpg signing key - name: copy the private gpg signing key
copy: > copy: >
src={{ CERTS_LOCAL_PRIVATE_KEY }} src={{ CERTS_LOCAL_PRIVATE_KEY }}
dest={{ certs_app_dir }}/{{ CERTS_LOCAL_PRIVATE_KEY|basename }} dest={{ certs_gpg_dir }}/{{ CERTS_LOCAL_PRIVATE_KEY|basename }}
owner={{ common_web_user }} mode=0600 owner={{ common_web_user }} mode=0600
notify: restart certs notify: restart certs
register: certs_gpg_key register: certs_gpg_key
- name: change owner of gpg dir
file: >
path="{{ certs_gpg_dir }}" state=directory
owner="{{ common_web_user }}" group="{{ common_web_group }}"
recurse="yes"
mode=0700
notify: restart certs
- name: load the gpg key - name: load the gpg key
shell: > shell: >
/usr/bin/gpg --homedir {{ certs_gpg_dir }} --import {{ certs_app_dir }}/{{ CERTS_LOCAL_PRIVATE_KEY|basename }} /usr/bin/gpg --homedir {{ certs_gpg_dir }} --import {{ certs_gpg_dir }}/{{ CERTS_LOCAL_PRIVATE_KEY|basename }}
sudo_user: "{{ common_web_user }}" sudo_user: "{{ common_web_user }}"
when: certs_gpg_key.changed when: certs_gpg_key.changed
notify: restart certs notify: restart certs
- include: deploy.yml tags=deploy - include: deploy.yml tags=deploy,certs
...@@ -53,7 +53,7 @@ ...@@ -53,7 +53,7 @@
dest=/usr/share/datadog/agent/nginx_log_http_response_counter.py dest=/usr/share/datadog/agent/nginx_log_http_response_counter.py
owner=root group=root mode=0644 owner=root group=root mode=0644
notify: notify:
- datadog | restart the datadog service - restart the datadog service
tags: tags:
- datadog - datadog
...@@ -70,7 +70,7 @@ ...@@ -70,7 +70,7 @@
- name: datadog | enable nginx module - name: datadog | enable nginx module
template: dest=/etc/dd-agent/conf.d/nginx.yaml src=nginx.yaml.j2 owner=root group=root mode=0644 template: dest=/etc/dd-agent/conf.d/nginx.yaml src=nginx.yaml.j2 owner=root group=root mode=0644
notify: notify:
- datadog | restart the datadog service - restart the datadog service
tags: tags:
- datadog - datadog
...@@ -91,7 +91,7 @@ ...@@ -91,7 +91,7 @@
state=present state=present
"regexp=^\s*#?\s*hostname\s*:.+$" "regexp=^\s*#?\s*hostname\s*:.+$"
notify: notify:
- datadog | restart the datadog service - restart the datadog service
tags: tags:
- datadog - datadog
...@@ -102,7 +102,7 @@ ...@@ -102,7 +102,7 @@
state=present state=present
"regexp=^\s*#?\s*dogstatsd_interval\s*:.+$" "regexp=^\s*#?\s*dogstatsd_interval\s*:.+$"
notify: notify:
- datadog | restart the datadog service - restart the datadog service
tags: tags:
- datadog - datadog
...@@ -113,7 +113,7 @@ ...@@ -113,7 +113,7 @@
state=present state=present
regexp='^\s*#?\s*dogstreams\s*:.+$' regexp='^\s*#?\s*dogstreams\s*:.+$'
notify: notify:
- datadog | restart the datadog service - restart the datadog service
tags: tags:
- datadog - datadog
......
...@@ -510,6 +510,8 @@ edxapp_debian_pkgs: ...@@ -510,6 +510,8 @@ edxapp_debian_pkgs:
# Needed by the CMS to manipulate images. # Needed by the CMS to manipulate images.
- libjpeg8-dev - libjpeg8-dev
- libpng12-dev - libpng12-dev
# Postgres support
- libpq-dev
# Ruby Specific Vars # Ruby Specific Vars
edxapp_ruby_version: "1.9.3-p374" edxapp_ruby_version: "1.9.3-p374"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment