-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathstockcheckerapp.yml
183 lines (169 loc) · 5.16 KB
/
stockcheckerapp.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
---
- name: Create stockchecker instances
hosts: localhost
gather_facts: False
vars_files:
- gce_vars/auth
- gce_vars/machines
- gce_vars/zone
tasks:
- name: create a disk mapped for Stockchecker App instance 1 - Centos 8
gcp_compute_disk:
name: stockcheck-disk-instance1
size_gb: 50
type: pd-ssd
source_image: "{{ image }}"
zone: "{{ zone.za }}"
project: "{{ gcp_project }}"
auth_kind: "{{ gcp_cred_kind }}"
service_account_file: "{{ gcp_cred_file }}"
state: present
register: disk_instance1
- name: create a disk mapped for Stockchecker App instance 2 - Centos 8
gcp_compute_disk:
name: stockcheck-disk-instance2
size_gb: 50
type: pd-ssd
source_image: "{{ image }}"
zone: "{{ zone.za }}"
project: "{{ gcp_project }}"
auth_kind: "{{ gcp_cred_kind }}"
service_account_file: "{{ gcp_cred_file }}"
state: present
register: disk_instance2
- name: create a VPC stockcheck network
gcp_compute_network:
name: stockchecker-subnetwork
auto_create_subnetworks: 'true'
project: "{{ gcp_project }}"
auth_kind: "{{ gcp_cred_kind }}"
service_account_file: "{{ gcp_cred_file }}"
state: present
register: network
- name: create a firewall rules for healthcheck app
gcp_compute_firewall:
name: fw-allow-health-check
network: "{{ network }}"
allowed:
- ip_protocol: tcp
ports:
- '80'
- '443'
target_tags:
- stockcheck
- shoplauncher
- management
- greeneagle
source_ranges:
- '130.211.0.0/22'
- '35.191.0.0/16'
project: "{{ gcp_project }}"
auth_kind: "{{ gcp_cred_kind }}"
service_account_file: "{{ gcp_cred_file }}"
state: present
register: fwhealthcheck
- name: create a firewall rules for stockcheck app
gcp_compute_firewall:
name: stockcheckapp-fw-ports
network: "{{ network }}"
allowed:
- ip_protocol: icmp
- ip_protocol: tcp
ports:
- '22'
- '80'
- '443'
target_tags:
- stockcheck
source_tags:
- management
- greeneagle
- redis
- elasticsearch
project: "{{ gcp_project }}"
auth_kind: "{{ gcp_cred_kind }}"
service_account_file: "{{ gcp_cred_file }}"
state: present
register: firewall
- name: create the stockcheck app instance 1
gcp_compute_instance:
name: "{{ name_zonea }}"
machine_type: "{{ machine_type.stockcheck }}"
disks:
- index: 0
auto_delete: 'no'
boot: 'true'
source: "{{ disk_instance1 }}"
labels:
environment: stockcheckprod
network_interfaces:
- network: "{{ network }}"
tags:
items:
- stockcheck
metadata:
ssh_user: "{{ ssh_user }}"
ssh_key: "{{ ssh_key }}"
zone: "{{ zone.za }}"
project: "{{ gcp_project }}"
auth_kind: "{{ gcp_cred_kind }}"
service_account_file: "{{ gcp_cred_file }}"
state: present
register: stockcheckappinstance1
- name: create the stockcheck app instance 2
gcp_compute_instance:
name: "{{ name_zoneb }}"
machine_type: "{{ machine_type.stockcheck }}"
disks:
- index: 0
auto_delete: 'no'
boot: 'true'
source: "{{ disk_instance2 }}"
network_interfaces:
- network: "{{ network }}"
tags:
items:
- stockcheck
metadata:
ssh_user: "{{ ssh_user }}"
ssh_key: "{{ ssh_key }}"
zone: "{{ zone.za }}"
project: "{{ gcp_project }}"
auth_kind: "{{ gcp_cred_kind }}"
service_account_file: "{{ gcp_cred_file }}"
state: present
register: stockcheckappinstance2
- debug: var=stockcheckappinstance1.networkInterfaces[0].networkIP
- debug: var=stockcheckappinstance2.networkInterfaces[0].networkIP
- name: Add instance1 to group stockcheckerapp
add_host:
name: "{{ stockcheckappinstance1.networkInterfaces[0].networkIP }}"
groups: stockcheckerapp
- name: Add instance2 to group stockcheckerapp
add_host:
name: "{{ stockcheckappinstance2.networkInterfaces[0].networkIP }}"
groups: stockcheckerapp
post_tasks:
- name: Wait for SSH for instance1
wait_for:
delay: 30
host: "{{ stockcheckappinstance1.networkInterfaces[0].networkIP }}"
port: 22
state: started
timeout: 120
- name: Wait for SSH for instance2
wait_for:
delay: 30
host: "{{ stockcheckappinstance2.networkInterfaces[0].networkIP }}"
port: 22
state: started
timeout: 120
- hosts: stockcheckerapp
roles:
- apache
#- stockcheckapp
gather_facts: False
become: true
vars:
ansible_user: belloau
ansible_ssh_private_key_file: ~/.ssh/id_rsa.pub