2021-12-14 10:26:42 +00:00
|
|
|
- name: configure keycloak service script wrapper
|
|
|
|
|
become: yes
|
|
|
|
|
template:
|
|
|
|
|
src: keycloak-service.sh.j2
|
|
|
|
|
dest: "{{ keycloak_dest }}/keycloak-service.sh"
|
|
|
|
|
owner: root
|
|
|
|
|
group: root
|
|
|
|
|
mode: 0755
|
|
|
|
|
notify:
|
|
|
|
|
- restart keycloak
|
|
|
|
|
|
|
|
|
|
- name: configure sysconfig file for keycloak service
|
|
|
|
|
become: yes
|
|
|
|
|
template:
|
|
|
|
|
src: keycloak-sysconfig.j2
|
|
|
|
|
dest: /etc/sysconfig/keycloak
|
|
|
|
|
owner: root
|
|
|
|
|
group: root
|
|
|
|
|
mode: 0644
|
|
|
|
|
notify:
|
|
|
|
|
- restart keycloak
|
|
|
|
|
|
|
|
|
|
- name: configure systemd unit file for keycloak service
|
|
|
|
|
template:
|
|
|
|
|
src: keycloak.service.j2
|
|
|
|
|
dest: /etc/systemd/system/keycloak.service
|
|
|
|
|
owner: root
|
|
|
|
|
group: root
|
|
|
|
|
mode: 0644
|
|
|
|
|
become: yes
|
|
|
|
|
register: systemdunit
|
|
|
|
|
notify:
|
|
|
|
|
- restart keycloak
|
|
|
|
|
|
|
|
|
|
- name: reload systemd
|
|
|
|
|
become: yes
|
|
|
|
|
systemd:
|
|
|
|
|
daemon_reload: yes
|
|
|
|
|
when: systemdunit.changed
|
|
|
|
|
|
2021-12-14 15:12:26 +00:00
|
|
|
- block:
|
|
|
|
|
- name: start keycloak
|
|
|
|
|
systemd:
|
|
|
|
|
name: keycloak
|
|
|
|
|
enabled: yes
|
|
|
|
|
state: started
|
|
|
|
|
become: yes
|
|
|
|
|
rescue:
|
|
|
|
|
- command: "systemctl status keycloak"
|
|
|
|
|
changed_when: False
|
|
|
|
|
ignore_errors: True
|
|
|
|
|
- command: "journalctl -xe -ukeycloak"
|
|
|
|
|
changed_when: False
|
|
|
|
|
ignore_errors: True
|
|
|
|
|
- command: "tail -n 100 /opt/keycloak/keycloak.log"
|
|
|
|
|
changed_when: False
|
|
|
|
|
ignore_errors: True
|
|
|
|
|
- debug:
|
|
|
|
|
msg: "Virt type: {{ ansible_facts.virtualization_type }}"
|
|
|
|
|
changed_when: False
|
|
|
|
|
ignore_errors: True
|
|
|
|
|
- command: "cat /opt/keycloak/keycloak-service.sh"
|
|
|
|
|
changed_when: False
|
|
|
|
|
ignore_errors: True
|
2021-12-14 10:26:42 +00:00
|
|
|
|
|
|
|
|
- command: "systemctl status keycloak"
|
|
|
|
|
register: keycloak_service_status
|
|
|
|
|
changed_when: False
|
|
|
|
|
|
|
|
|
|
- assert:
|
|
|
|
|
that:
|
|
|
|
|
- keycloak_service_status is defined
|
|
|
|
|
- keycloak_service_status.stdout is defined
|
|
|
|
|
|
|
|
|
|
- meta: flush_handlers
|
|
|
|
|
|
|
|
|
|
- name: Wait until Keycloak becomes active
|
|
|
|
|
uri:
|
|
|
|
|
url: "{{ keycloak_management_url }}/health"
|
|
|
|
|
register: keycloak_status
|
|
|
|
|
until: keycloak_status.status == 200
|
|
|
|
|
retries: 20
|
|
|
|
|
delay: 10
|
