This repository has been archived on 2025-09-14. You can view files and clone it, but cannot push or open issues or pull requests.
Files
tsg-tsg-os-buildimage/ansible/roles/firewall/tasks/main.yml
2023-11-22 10:27:23 +08:00

56 lines
1.7 KiB
YAML

---
- name: "download rpm packages: firewall"
yum:
name: "{{ item.value }}"
conf_file: "{{ rpm_repo_config_path }}"
state: present
download_only: yes
download_dir: "{{ path_download }}"
with_dict: "{{ firewall_rpm_version }}"
- name: "Install firwall that are sapp plugins"
shell: rpm -i /tmp/rpm_download/{{ item.1 }}* --prefix {{ prefix_path.sapp }}
when:
- item.1 is not search("stellar-c")
- item.1 is not search("firewall")
loop: "{{ firewall_rpm_version | dictsort }}"
- name: "Install firwall and stellar-c rpm plugins"
shell: rpm -i /tmp/rpm_download/{{ item }}* --prefix /opt/tsg/
with_items:
- "{{ firewall_rpm_version['stellar-c'] }}"
- "{{ firewall_rpm_version['firewall'] }}"
- name: "Template the tsgconf/main.conf"
template:
src: "{{ role_path }}/templates/main.conf.j2.j2"
dest: /opt/tsg/tsg-os-provision/templates/main.conf.j2
tags: template
when: runtime_env != 'TSG-X-P0906'
- name: "Template the tsgconf/maat.conf"
template:
src: "{{ role_path }}/templates/maat.conf.j2.j2"
dest: /opt/tsg/tsg-os-provision/templates/maat.conf.j2
tags: template
when: runtime_env != 'TSG-X-P0906'
- name: "Template the conf/http/http.conf"
template:
src: "{{ role_path }}/templates/http.conf.j2"
dest: /opt/tsg/sapp/conf/http/http.conf
tags: template
- name: "Template the conf/quic/main.conf"
template:
src: "{{ role_path }}/templates/quic/main.conf.j2"
dest: /opt/tsg/sapp/conf/quic/main.conf
tags: template
- name: "Template the /opt/tsg/sapp/plug/business/firewall/firewall.inf"
template:
src: "{{ role_path }}/templates/firewall.inf.j2.j2"
dest: /opt/tsg/tsg-os-provision/templates/firewall.inf.j2
tags: template
when: runtime_env != 'TSG-X-P0906'