chuckersjp

---
- name: Configure dnsmasq
  hosts: all
  tasks:

  - name: Install dnsmasq
    yum:
      name: dnsmasq
      state: latest

chuckersjp

---
- name: Setup Docker for all hosts
  hosts: all
  become: true
  tasks:

  - name: Install some base packages
    yum:
      name: "{{ item }}"
      state: latest

chuckersjp

---
- name: Create partitions on master
  hosts: masters
  become: yes
  tasks:

  - name: Create LVEtcd logical volume
    lvol:
      lv: LVEtcd
      size: 10g

chuckersjp

---
- name: playbook to install fluentd agent
  hosts: all
  become: true
  vars:
    log_server: LOG_SERVER.EXAMPLE.COM
    log_port: 10405  # Defaults to 514 if not set

  tasks:

chuckersjp

ansible -i inventory all -m authorized_key -a "user=ansible key={{ lookup('file', '/home/ansible/.ssh/id_rsa.pub') }}" -k

chuckersjp

---
# copied from https://gist.github.com/shirou/6928012
- hosts: all
  gather_facts: no
  sudo: no
  tasks:
  - name: run ssh-keyscan to add keys to known_hosts
    local_action: shell ssh-keyscan {{ ansible_ssh_host }} >> ~/.ssh/known_hosts

chuckersjp

#!/usr/bin/python
import sys, json, base64

file_list = json.load(sys.stdin)['storage']['files']

for files in file_list:
  print files['path'] + "\n" + base64.b64decode(files['contents']['source'].split(',')[1])

chuckersjp

#!/usr/bin/python
import sys, json, base64
from cryptography import x509
from cryptography.hazmat.backends import default_backend

file_list = json.load(sys.stdin)['storage']['files']

#for files in file_list:
#  print files['path'] + "\n" + base64.b64decode(files['contents']['source'].split(',')[1])

chuckersjp

- name: retrieve pullsecret
# Newer version of Ansible call this module k8s_info
  k8s_facts:
    api: v1
    kind: Secret
    name: pull-secret-chuck
    namespace: openshift-config
  register: pullsecret

- name: Get the original cred secrets

chuckersjp

- name: Create htpass-secret secret in openshift-config name space for backdoor htpasswd user registry
  k8s:
    kubeconfig: kubeconfig
    state: present
    definition:
      apiVersion: v1
      data:
        htpasswd: "{{ htpasswdtoken }}"
      kind: Secret
      metadata: