Compare commits

...

15 Commits

Author SHA1 Message Date
Marcus ca3cc077d6
Merge pull request #35 from m4rcu5nl/develop
Release v1.2.3
2020-03-13 01:35:01 +01:00
Marcus 904dcb399d Merge branch 'feature/gpg_fingerprint_variable' into develop 2020-03-09 23:19:28 +01:00
Marcus 0b9f100aa5 Use variable for gpg fingerprint
Using the fingerprint in the rpm_key module requires Ansible 2.9. Updated meta file to reflect this requirement.
2020-03-09 02:44:38 +01:00
Marcus 90167ae771
Merge pull request #30 from ClashTheBunny/pgp_key_id
Add PGP key `id` for added security
2020-03-09 02:33:09 +01:00
Marcus a84ea36b37
Merge pull request #31 from quivalen/set_fact.sh-patch-1
Update set_fact.sh to support multiple network
2020-03-09 02:28:44 +01:00
Marcus dc68166c27
Merge pull request #32 from dsteinkopf/master
fix usage of register variable function
2020-03-09 02:16:00 +01:00
Dirk Steinkopf c9339c1f3b fix usage of register variable function 2019-11-16 18:23:45 +01:00
Andrea Lora 0755fa30b2
Update set_fact.sh to support multiple network
Currently the role will fail to regather fact if $network_count > 1

That's because without the quotes echo will suppress the \n writing everything in one line. Thus wc -l will return `1`, confusing the file_content function that will lead to an incorrect json being produced
2019-07-08 11:40:05 +01:00
Randall Mason 76b57fb097 Add PGP key `id` for added security 2019-06-09 12:50:53 -05:00
Marcus 49d61b875e
Merge pull request #29 from papanito/papanito/correct-readme
Papanito/correct readme
2019-04-21 04:04:09 +02:00
papanito ffba32f382 Fix some minor typos in text 2019-04-20 20:59:35 +02:00
papanito 2b56aaf46c Correct typo in example playbook 2019-04-20 20:53:09 +02:00
Marcus Meurs 154899586e Use the same fact syntax throughout the role
Create consistency by using the ansible_facts['somefact'] syntax everywhere.
2018-12-10 23:47:16 +01:00
Marcus Meurs a9fa164ebe Merge branch 'hotfix/v1.2.2' into develop 2018-12-08 02:26:57 +01:00
Marcus Meurs a0228786d3 Merge branch 'release/v1.2.1' into develop 2018-12-07 23:48:30 +01:00
9 changed files with 27 additions and 24 deletions

View File

@ -13,7 +13,6 @@ Technically this role has no requirements. If it's ran without any variables set
[**zerotier_network_id**](#zerotier_network_id): when set hosts are told to join this network. [**zerotier_network_id**](#zerotier_network_id): when set hosts are told to join this network.
[**zerotier_api_accesstoken**](#zerotier_api_accesstoken): when set the role can handle member authentication and configuration using the ZeroTier API. [**zerotier_api_accesstoken**](#zerotier_api_accesstoken): when set the role can handle member authentication and configuration using the ZeroTier API.
Role Variables Role Variables
-------------- --------------
@ -35,7 +34,7 @@ Role Variables
### zerotier_member_description ### zerotier_member_description
*Type*: string *Type*: string
*Default value*: `""` *Default value*: `""`
*Description*: Optional desription for a member. *Description*: Optional description for a member.
### zerotier_api_accesstoken ### zerotier_api_accesstoken
*Type*: string *Type*: string
@ -50,7 +49,7 @@ Role Variables
### zerotier_api_delegate ### zerotier_api_delegate
*Type*: string *Type*: string
*Default value*: `localhost` *Default value*: `localhost`
*Description*: Option to delegate tasks for Zerotier API calls. This is usefull in a situation where API calls can only be made from a whitelisted management server, for example. *Description*: Option to delegate tasks for Zerotier API calls. This is useful in a situation where API calls can only be made from a white-listed management server, for example.
Example Playbook Example Playbook
---------------- ----------------
@ -59,7 +58,7 @@ Example Playbook
- hosts: servers - hosts: servers
vars: vars:
zerotier_network_id: 1234567890qwerty zerotier_network_id: 1234567890qwerty
zerotier_accesstoken: "{{ vault_zerotier_accesstoken }}" zerotier_api_accesstoken: "{{ vault_zerotier_accesstoken }}"
zerotier_register_short_hostname: true zerotier_register_short_hostname: true
roles: roles:

View File

@ -6,7 +6,7 @@ NETWORKS=$(zerotier-cli listnetworks | tail -n+2)
function file_content { function file_content {
if [ ! -z "$NETWORKS" ]; then if [ ! -z "$NETWORKS" ]; then
network_count=$(echo $NETWORKS |wc -l) network_count=$(echo "$NETWORKS" |wc -l)
counter=1 counter=1
echo "{" echo "{"

View File

@ -16,7 +16,7 @@ galaxy_info:
# - CC-BY # - CC-BY
license: GPLv3 license: GPLv3
min_ansible_version: 2.4 min_ansible_version: 2.9
# If this a Container Enabled role, provide the minimum Ansible Container version. # If this a Container Enabled role, provide the minimum Ansible Container version.
# min_ansible_container_version: # min_ansible_container_version:

View File

@ -2,7 +2,7 @@
- block: - block:
- name: Authorize new members to network - name: Authorize new members to network
uri: uri:
url: "{{ zerotier_api_url }}/api/network/{{ zerotier_network_id }}/member/{{ ansible_local.zerotier.node_id }}" url: "{{ zerotier_api_url }}/api/network/{{ zerotier_network_id }}/member/{{ ansible_local['zerotier']['node_id'] }}"
method: POST method: POST
headers: headers:
Authorization: bearer {{ zerotier_api_accesstoken }} Authorization: bearer {{ zerotier_api_accesstoken }}
@ -14,11 +14,12 @@
register: auth_apiresult register: auth_apiresult
delegate_to: "{{ zerotier_api_delegate }}" delegate_to: "{{ zerotier_api_delegate }}"
when: when:
- ansible_local.zerotier.networks[zerotier_network_id] is not defined or ansible_local.zerotier.networks[zerotier_network_id].status != 'OK' - ansible_local['zerotier']['networks'][zerotier_network_id] is not defined or
ansible_local['zerotier']['networks'][zerotier_network_id]['status'] != 'OK'
- name: Configure members in network - name: Configure members in network
uri: uri:
url: "{{ zerotier_api_url }}/api/network/{{ zerotier_network_id }}/member/{{ ansible_local.zerotier.node_id }}" url: "{{ zerotier_api_url }}/api/network/{{ zerotier_network_id }}/member/{{ ansible_local['zerotier']['node_id'] }}"
method: POST method: POST
headers: headers:
Authorization: bearer {{ zerotier_api_accesstoken }} Authorization: bearer {{ zerotier_api_accesstoken }}

View File

@ -1,6 +1,6 @@
--- ---
- include_tasks: install/{{ ansible_os_family }}.yml - include_tasks: install/{{ ansible_facts['os_family'] }}.yml
tags: tags:
- installation - installation
- repositories - repositories

View File

@ -1,6 +1,7 @@
- name: Add ZeroTier PGP key - name: Add ZeroTier PGP key
apt_key: apt_key:
url: "{{ zerotier_gpg_url }}" url: "{{ zerotier_gpg_url }}"
id: "{{ zerotier_gpg_fingerprint }}"
- name: Check if Ubuntu release has dedicated repo - name: Check if Ubuntu release has dedicated repo
uri: uri:

View File

@ -2,6 +2,7 @@
rpm_key: rpm_key:
state: present state: present
key: "{{ zerotier_gpg_url }}" key: "{{ zerotier_gpg_url }}"
fingerprint: "{{ zerotier_gpg_fingerprint }}"
- name: Add ZeroTier repo for RHEL/CentOS - name: Add ZeroTier repo for RHEL/CentOS
yum_repository: yum_repository:
@ -11,7 +12,7 @@
gpgcheck: yes gpgcheck: yes
enabled: yes enabled: yes
register: zerotier_repo register: zerotier_repo
when: ansible_distribution != "Fedora" when: ansible_facts['distribution'] != "Fedora"
- name: Add zerotier repo for Fedora - name: Add zerotier repo for Fedora
yum_repository: yum_repository:
@ -21,4 +22,4 @@
gpgcheck: yes gpgcheck: yes
enabled: yes enabled: yes
register: zerotier_repo register: zerotier_repo
when: ansible_distribution == "Fedora" when: ansible_facts['distribution'] == "Fedora"

View File

@ -8,14 +8,14 @@
- name: Update ansible_local facts - name: Update ansible_local facts
script: set_facts.sh script: set_facts.sh
- name: Re-gather facts - name: Re-gather ansible_local facts
setup: ~ setup: filter=ansible_local
- import_tasks: authorize_node.yml - import_tasks: authorize_node.yml
when: when:
- zerotier_api_accesstoken | length > 0 - zerotier_api_accesstoken | length > 0
- ansible_local.zerotier.node_id is defined - ansible_local['zerotier']['node_id'] is defined
- import_tasks: join_network.yml - import_tasks: join_network.yml
when: when:

View File

@ -3,3 +3,4 @@
zerotier_download_base_url: http://download.zerotier.com zerotier_download_base_url: http://download.zerotier.com
zerotier_deb_release_repo: "{{ ansible_facts['distribution_release'] }}" zerotier_deb_release_repo: "{{ ansible_facts['distribution_release'] }}"
zerotier_gpg_url: https://download.zerotier.com/contact@zerotier.com.gpg zerotier_gpg_url: https://download.zerotier.com/contact@zerotier.com.gpg
zerotier_gpg_fingerprint: 74A5E9C458E1A431F1DA57A71657198823E52A61