Compare commits

...

3 commits

Author SHA1 Message Date
Actaeus Curabitur
b65b0bd8ea removed password.sls, which shouldn't exist yet 2022-09-08 11:26:29 -05:00
Actaeus Curabitur
e4da990cce updated how roles are handled in pillar files 2022-09-08 11:19:02 -05:00
Actaeus Curabitur
57f6066c45 switched to pillar roles wherever possible instead of grain roles 2022-09-08 10:24:41 -05:00
62 changed files with 379 additions and 496 deletions

1
pillars/roles.jinja Normal file
View file

@ -0,0 +1 @@
{%- set roles=salt.cmd.shell("grep -Po '(?<=- ).*' /srv/salt/"+saltenv+"/pillars/servers/roles/server/"+grains['host']+".sls").split('\n') -%}

View file

@ -1,21 +1,20 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %} {% set states = salt['cp.list_states'](saltenv) %}
include: include:
- roles.aurpkgs.none - roles.aurpkgs.none
{%- if grains['roles'] is defined -%} {%- if roles is not none -%}
{%- if grains['roles'] is not none -%} {%- if 'aurrepo' in roles -%}
{%- if 'aurrepo' in grains['roles'] -%} {%- for state in states %}
{%- for state in states %} {%- if state.startswith("pillars.roles.aurpkgs.") -%}
{%- if state.startswith("pillars.roles.aurpkgs.") -%} {%- set role = state.split('.')[3] %}
{%- set role = state.split('.')[3] %}
- roles.aurpkgs.{{ role }} - roles.aurpkgs.{{ role }}
{%- endif -%} {%- endif -%}
{%- endfor -%} {%- endfor -%}
{%- else -%} {%- else -%}
{%- for role in grains['roles'] %} {%- for role in roles %}
{%- if 'pillars.roles.aurpkgs.'+role in states %} {%- if 'pillars.roles.aurpkgs.'+role in states %}
- roles.aurpkgs.{{ role }} - roles.aurpkgs.{{ role }}
{%- endif -%} {%- endif -%}
{%- endfor -%} {%- endfor -%}
{%- endif -%}
{%- endif -%} {%- endif -%}
{%- endif -%} {%- endif -%}

View file

@ -1,21 +1,20 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %} {% set states = salt['cp.list_states'](saltenv) %}
include: include:
- roles.backup.none - roles.backup.none
{%- if grains['roles'] is defined -%} {%- if roles is not none -%}
{%- if grains['roles'] is not none -%} {%- if 'backup' in roles -%}
{%- if 'backup' in grains['roles'] -%} {%- for state in states %}
{%- for state in states %} {%- if state.startswith("pillars.roles.backup.") -%}
{%- if state.startswith("pillars.roles.backup.") -%} {%- set role = state.split('.')[3] %}
{%- set role = state.split('.')[3] %}
- roles.backup.{{ role }} - roles.backup.{{ role }}
{%- endif -%} {%- endif -%}
{%- endfor -%} {%- endfor -%}
{%- else -%} {%- else -%}
{%- for role in grains['roles'] %} {%- for role in roles %}
{%- if 'pillars.roles.backup.'+role in states %} {%- if 'pillars.roles.backup.'+role in states %}
- roles.backup.{{ role }} - roles.backup.{{ role }}
{%- endif -%} {%- endif -%}
{%- endfor -%} {%- endfor -%}
{%- endif -%}
{%- endif -%} {%- endif -%}
{%- endif -%} {%- endif -%}

View file

@ -1,21 +1,20 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %} {% set states = salt['cp.list_states'](saltenv) %}
include: include:
- roles.ca.none - roles.ca.none
{%- if grains['roles'] is defined -%} {%- if roles is not none -%}
{%- if grains['roles'] is not none -%} {%- if 'ca' in roles -%}
{%- if 'ca' in grains['roles'] -%} {%- for state in states %}
{%- for state in states %} {%- if state.startswith("pillars.roles.ca.") -%}
{%- if state.startswith("pillars.roles.ca.") -%} {%- set role = state.split('.')[3] %}
{%- set role = state.split('.')[3] %}
- roles.ca.{{ role }} - roles.ca.{{ role }}
{%- endif -%} {%- endif -%}
{%- endfor -%} {%- endfor -%}
{%- else -%} {%- else -%}
{%- for role in grains['roles'] %} {%- for role in roles %}
{%- if 'pillars.roles.ca.'+role in states %} {%- if 'pillars.roles.ca.'+role in states %}
- roles.ca.{{ role }} - roles.ca.{{ role }}
{%- endif -%} {%- endif -%}
{%- endfor -%} {%- endfor -%}
{%- endif -%}
{%- endif -%} {%- endif -%}
{%- endif -%} {%- endif -%}

View file

@ -1,15 +1,14 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %} {% set states = salt['cp.list_states'](saltenv) %}
include: include:
- roles.database.none - roles.database.none
{%- if grains['roles'] is defined -%} {%- if roles is not none -%}
{%- if grains['roles'] is not none -%} {%- if 'mysql' in roles -%}
{%- if 'mysql' in grains['roles'] -%} {%- for state in states %}
{%- for state in states %} {%- if state.startswith("pillars.roles.database.") -%}
{%- if state.startswith("pillars.roles.database.") -%} {%- set role = state.split('.')[3] %}
{%- set role = state.split('.')[3] %}
- roles.database.{{ role }} - roles.database.{{ role }}
{%- endif -%} {%- endif -%}
{%- endfor -%} {%- endfor -%}
{%- endif -%}
{%- endif -%} {%- endif -%}
{%- endif -%} {%- endif -%}

View file

@ -1,13 +1,12 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %} {% set states = salt['cp.list_states'](saltenv) %}
include: include:
- roles.firewalld.core - roles.firewalld.core
{%- if grains['roles'] is defined -%} {%- if roles is not none -%}
{%- if grains['roles'] is not none -%} {%- for role in roles %}
{%- for role in grains['roles'] %} {%- if 'pillars.roles.firewalld.'+role in states %}
{%- if 'pillars.roles.firewalld.'+role in states %}
- roles.firewalld.{{ role }} - roles.firewalld.{{ role }}
{%- endif -%} {%- endif -%}
{%- endfor -%} {%- endfor -%}
{%- endif -%}
{%- endif -%} {%- endif -%}

View file

@ -1,13 +1,12 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %} {% set states = salt['cp.list_states'](saltenv) %}
include: include:
- roles.git.none - roles.git.none
{%- if grains['roles'] is defined -%} {%- if roles is not none -%}
{%- if grains['roles'] is not none -%} {%- for role in roles %}
{%- for role in grains['roles'] %} {%- if 'pillars.roles.git.'+role in states %}
{%- if 'pillars.roles.git.'+role in states %}
- roles.git.{{ role }} - roles.git.{{ role }}
{%- endif -%} {%- endif -%}
{%- endfor -%} {%- endfor -%}
{%- endif -%}
{%- endif -%} {%- endif -%}

View file

@ -1,13 +0,0 @@
{% set states = salt['cp.list_states'](saltenv) %}
include:
- roles.git.none
{%- if grains['roles'] is defined -%}
{%- if grains['roles'] is not none -%}
{%- for role in grains['roles'] %}
{%- if 'pillars.roles.git.'+role in states %}
- roles.git.{{ role }}
{%- endif -%}
{%- endfor -%}
{%- endif -%}
{%- endif -%}

View file

@ -1,25 +0,0 @@
git:
tmux-root:
repo: "ssh://gitea@git.actcur.com:5022/actcur/tmux.git"
path: "/root/tmux"
branch: "master"
key: "git_actcur"
force: true
email: "actcur@actcur.com"
name: "Actaeus Curabitur"
tmux-ejparker:
repo: "ssh://gitea@git.actcur.com:5022/actcur/tmux.git"
path: "/ejparker/tmux"
branch: "master"
key: "git_actcur"
force: true
email: "actcur@actcur.com"
name: "Actaeus Curabitur"
web:
repo: "ssh://gitea@git.actcur.com:5022/actcur/portal.git"
path: "/srv/http/portal"
branch: "master"
key: "git_actcur"
force: true
email: "actcur@actcur.com"
name: "Actaeus Curabitur"

View file

@ -1,17 +0,0 @@
git:
salt:
repo: "ssh://gitea@git.actcur.com:5022/actcur/salt.git"
path: "/srv/salt/prod"
branch: "master"
key: "git_actcur"
force: true
email: "actcur@actcur.com"
name: "Actaeus Curabitur"
salt_dev:
repo: "ssh://gitea@git.actcur.com:5022/actcur/salt.git"
path: "/srv/salt/dev"
branch: "dev"
key: "git_actcur"
force: true
email: "actcur@actcur.com"
name: "Actaeus Curabitur"

View file

@ -1,9 +0,0 @@
git:
ytdownloader:
repo: "ssh://gitea@git.actcur.com:5022/actcur/ytdownloader.git"
path: "/root/scripts/ytdownloader"
branch: "master"
key: "git_actcur"
force: true
email: "actcur@actcur.com"
name: "Actaeus Curabitur"

View file

@ -1,13 +1,12 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %} {% set states = salt['cp.list_states'](saltenv) %}
include: include:
- roles.host.none - roles.host.none
{%- if grains['roles'] is defined -%} {%- if roles is not none -%}
{%- if grains['roles'] is not none -%} {%- for role in roles %}
{%- for role in grains['roles'] %} {%- if 'pillars.roles.host.'+role in states %}
{%- if 'pillars.roles.host.'+role in states %}
- roles.host.{{ role }} - roles.host.{{ role }}
{%- endif -%} {%- endif -%}
{%- endfor -%} {%- endfor -%}
{%- endif -%}
{%- endif -%} {%- endif -%}

View file

@ -1,13 +1,12 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %} {% set states = salt['cp.list_states'](saltenv) %}
include: include:
- roles.laradev.none - roles.laradev.none
{%- if grains['roles'] is defined -%} {%- if roles is not none -%}
{%- if grains['roles'] is not none -%} {%- for role in roles %}
{%- for role in grains['roles'] %} {%- if 'pillars.roles.laradev.'+role in states %}
{%- if 'pillars.roles.laradev.'+role in states %}
- roles.laradev.{{ role }} - roles.laradev.{{ role }}
{%- endif -%} {%- endif -%}
{%- endfor -%} {%- endfor -%}
{%- endif -%}
{%- endif -%} {%- endif -%}

View file

@ -1,13 +1,12 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %} {% set states = salt['cp.list_states'](saltenv) %}
include: include:
- roles.lxc.container_profiles - roles.lxc.container_profiles
{%- if grains['roles'] is defined -%} {%- if roles is not none -%}
{%- if grains['roles'] is not none -%} {%- for role in roles %}
{%- for role in grains['roles'] %} {%- if 'pillars.roles.lxc.'+role in states %}
{%- if 'pillars.roles.lxc.'+role in states %}
- roles.lxc.{{ role }} - roles.lxc.{{ role }}
{%- endif -%} {%- endif -%}
{%- endfor -%} {%- endfor -%}
{%- endif -%}
{%- endif -%} {%- endif -%}

View file

@ -1,13 +1,12 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %} {% set states = salt['cp.list_states'](saltenv) %}
include: include:
- roles.mount.none - roles.mount.none
{%- if grains['roles'] is defined -%} {%- if roles is not none -%}
{%- if grains['roles'] is not none -%} {%- for role in roles %}
{%- for role in grains['roles'] %} {%- if 'pillars.roles.mount.'+role in states %}
{%- if 'pillars.roles.mount.'+role in states %}
- roles.mount.{{ role }} - roles.mount.{{ role }}
{%- endif -%} {%- endif -%}
{%- endfor -%} {%- endfor -%}
{%- endif -%}
{%- endif -%} {%- endif -%}

View file

@ -1,21 +1,20 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %} {% set states = salt['cp.list_states'](saltenv) %}
include: include:
- roles.nginx.none - roles.nginx.none
{%- if grains['roles'] is defined -%} {%- if roles is not none -%}
{%- if grains['roles'] is not none -%} {%- if 'portal' in roles -%}
{%- if 'portal' in grains['roles'] -%} {%- for state in states %}
{%- for state in states %} {%- if state.startswith("pillars.roles.nginx.") -%}
{%- if state.startswith("pillars.roles.nginx.") -%} {%- set role = state.split('.')[3] %}
{%- set role = state.split('.')[3] %}
- roles.nginx.{{ role }} - roles.nginx.{{ role }}
{%- endif -%} {%- endif -%}
{%- endfor -%} {%- endfor -%}
{%- else -%} {%- else -%}
{%- for role in grains['roles'] %} {%- for role in roles %}
{%- if 'pillars.roles.nginx.'+role in states %} {%- if 'pillars.roles.nginx.'+role in states %}
- roles.nginx.{{ role }} - roles.nginx.{{ role }}
{%- endif -%} {%- endif -%}
{%- endfor -%} {%- endfor -%}
{%- endif -%}
{%- endif -%} {%- endif -%}
{%- endif -%} {%- endif -%}

View file

@ -1,15 +1,14 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %} {% set states = salt['cp.list_states'](saltenv) %}
include: include:
- roles.router.none - roles.router.none
{%- if grains['roles'] is defined -%} {%- if roles is not none -%}
{%- if grains['roles'] is not none -%} {%- if 'router' in roles -%}
{%- if 'router' in grains['roles'] -%} {%- for state in states %}
{%- for state in states %} {%- if state.startswith("pillars.roles.router.") -%}
{%- if state.startswith("pillars.roles.router.") -%} {%- set role = state.split('.')[3] %}
{%- set role = state.split('.')[3] %}
- roles.router.{{ role }} - roles.router.{{ role }}
{%- endif -%} {%- endif -%}
{%- endfor -%} {%- endfor -%}
{%- endif -%}
{%- endif -%} {%- endif -%}
{%- endif -%} {%- endif -%}

View file

@ -1,15 +1,14 @@
{%- from "roles.jinja" import roles with context %}
{% set states = salt['cp.list_states'](saltenv) %} {% set states = salt['cp.list_states'](saltenv) %}
include: include:
- roles.services.none - roles.services.none
{%- if grains['roles'] is defined -%} {%- if roles is not none -%}
{%- if grains['roles'] is not none -%} {%- if 'icinga' in roles -%}
{%- if 'icinga' in grains['roles'] -%} {%- for state in states %}
{%- for state in states %} {%- if state.startswith("pillars.roles.services.") -%}
{%- if state.startswith("pillars.roles.services.") -%} {%- set role = state.split('.')[3] %}
{%- set role = state.split('.')[3] %}
- roles.services.{{ role }} - roles.services.{{ role }}
{%- endif -%} {%- endif -%}
{%- endfor -%} {%- endfor -%}
{%- endif -%}
{%- endif -%} {%- endif -%}
{%- endif -%} {%- endif -%}

View file

@ -1,6 +1,5 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion

View file

@ -1,13 +1,12 @@
grains: roles:
roles: - server
- server - nrpe
- nrpe - saltminion
- saltminion - nginx-proxy
- nginx-proxy - arr
- arr - sonarr
- sonarr - radarr
- radarr - lidarr
- lidarr - jackett
- jackett - ytdownloader
- ytdownloader - podfox
- podfox

View file

@ -1,8 +1,7 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - atheos
- atheos - nginx-proxy
- nginx-proxy

View file

@ -1,8 +1,7 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - authelia
- authelia - nginx-proxy
- nginx-proxy

View file

@ -1,8 +1,7 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - nginx-proxy
- nginx-proxy - baikal
- baikal

View file

@ -1,6 +1,5 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion

View file

@ -1,9 +1,8 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - laradev
- laradev - bbs
- bbs - nginx-proxy
- nginx-proxy

View file

@ -1,7 +1,6 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - ca
- ca

View file

@ -1,9 +1,8 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - laradev
- laradev - clark-family
- clark-family - nginx-proxy
- nginx-proxy

View file

@ -1,8 +1,7 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - nextcloud
- nextcloud - nginx-proxy
- nginx-proxy

View file

@ -1,7 +1,6 @@
grains: roles:
roles: - server
- server - nrpe
- nrpe - saltminion
- saltminion - nginx-proxy
- nginx-proxy - emby
- emby

View file

@ -1,8 +1,7 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - git
- git - nginx-proxy
- nginx-proxy

View file

@ -1,8 +1,7 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - gitea
- gitea - nginx-proxy
- nginx-proxy

View file

@ -1,9 +1,8 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - backup
- backup - host
- host - host2
- host2

View file

@ -1,9 +1,8 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - backup
- backup - host
- host - host2
- host2

View file

@ -1,8 +1,7 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - icinga
- icinga - nginx-proxy
- nginx-proxy

View file

@ -1,7 +1,6 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - freeipa-server
- freeipa-server

View file

@ -1,7 +1,6 @@
grains: roles:
roles: - server
- server - nrpe
- nrpe - saltminion
- saltminion - lxc_container
- lxc_container - jackett
- jackett

View file

@ -1,7 +1,6 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - laradev
- laradev

View file

@ -1,7 +1,6 @@
grains: roles:
roles: - server
- server - nrpe
- nrpe - saltminion
- saltminion - lxc_container
- lxc_container - lidarr
- lidarr

View file

@ -1,7 +1,6 @@
grains: roles:
roles: - server
- server - nrpe
- nrpe - saltminion
- saltminion - nginx-proxy
- nginx-proxy - ombi
- ombi

View file

@ -1,8 +1,7 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - nginx-proxy
- nginx-proxy - pass
- pass

View file

@ -1,9 +1,8 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - pkg-cache
- pkg-cache - aurutils
- aurutils - nginx-proxy
- nginx-proxy

View file

@ -1,8 +1,7 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - portal
- portal - nginx-proxy
- nginx-proxy

View file

@ -1,8 +1,7 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - openproject
- openproject - nginx-proxy
- nginx-proxy

View file

@ -1,7 +1,6 @@
grains: roles:
roles: - server
- server - nrpe
- nrpe - saltminion
- saltminion - lxc_container
- lxc_container - radarr
- radarr

View file

@ -1,4 +1,3 @@
grains: roles:
roles: - router
- router - ssh
- ssh

View file

@ -1,8 +1,7 @@
grains: roles:
roles: - server
- server - nrpe
- nrpe - saltminion
- saltminion - nginx-proxy
- nginx-proxy - windscribe
- windscribe - rtorrent
- rtorrent

View file

@ -1,9 +1,8 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - saltmaster
- saltmaster - mirrorlist
- mirrorlist - certbot
- certbot

View file

@ -1,8 +1,7 @@
grains: roles:
roles: - server
- server - nrpe
- nrpe - saltminion
- saltminion - lxc_container
- lxc_container - sonarr
- sonarr - ytdownloader
- ytdownloader

View file

@ -1,7 +1,6 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - mysql
- mysql

View file

@ -1,7 +1,6 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - sshserver
- sshserver

View file

@ -1,8 +1,7 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - sync
- sync - nginx-proxy
- nginx-proxy

View file

@ -1,8 +1,7 @@
grains: roles:
roles: - server
- server - nrpe
- nrpe - saltminion
- saltminion - nginx-proxy
- nginx-proxy - windscribe
- windscribe - transmission
- transmission

View file

@ -1,8 +1,7 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - ttrss
- ttrss - nginx-proxy
- nginx-proxy

View file

@ -1,9 +1,8 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - lxc
- lxc - video
- video - nginx-proxy
- nginx-proxy

View file

@ -1,8 +1,7 @@
grains: roles:
roles: - server
- server - ssh
- ssh - nrpe
- nrpe - saltminion
- saltminion - vpnserver
- vpnserver - ca-cert
- ca-cert

View file

@ -1,14 +1,12 @@
{# ensure that grains pillar exists -#} {# ensure that grains pillar exists -#}
{%- if pillar['grains'] is defined -%} {%- if pillar['roles'] is defined %}
{%- if pillar['grains']['roles'] is defined %}
set-roles: set-roles:
grains.present: grains.present:
- name: roles - name: roles
- force: true - force: true
- value: [{% for role in pillar['grains']['roles'] %}{{role}},{% endfor %}] - value: [{% for role in pillar['roles'] %}{{role}},{% endfor %}]
{% else %} {% else %}
set-roles: set-roles:
grains.absent: grains.absent:
- name: roles - name: roles
{%- endif -%}
{%- endif -%} {%- endif -%}

View file

@ -1,7 +1,7 @@
{%- set os=grains['os'] -%} {%- set os=grains['os'] -%}
{##check if server is portal##} {##check if server is portal##}
{%- if 'portal' in pillar['grains']['roles'] -%} {%- if 'portal' in pillar['roles'] -%}
{%- set portal = "portal" -%} {%- set portal = "portal" -%}
{%- endif -%} {%- endif -%}
nginx: nginx:

View file

@ -7,10 +7,8 @@ object Host "{{server}}.actcur.com" {
import "generic-host" import "generic-host"
address = "{{server}}.actcur.com" address = "{{server}}.actcur.com"
{%- if role_data['grains'] is defined %} {%- if role_data['roles'] is defined %}
{%- if role_data['grains']['roles'] is defined %} vars.roles=[{%- for role in role_data['roles'] %}"{{role}}",{%- endfor -%}""];
vars.roles=[{%- for role in role_data['grains']['roles'] %}"{{role}}",{%- endfor -%}""];
{%- endif -%}
{%- endif %} {%- endif %}
} }

View file

@ -1,7 +1,7 @@
{%- set os=grains['os'] -%} {%- set os=grains['os'] -%}
{##check if server is portal##} {##check if server is portal##}
{%- if 'portal' in pillar['grains']['roles'] -%} {%- if 'portal' in pillar['roles'] -%}
{%- set portal = "portal" -%} {%- set portal = "portal" -%}
{%- endif -%} {%- endif -%}
nginx: nginx:

View file

@ -1,6 +1,6 @@
{%- if 'backup' in pillar['grains']['roles'] -%} {%- if 'backup' in pillar['roles'] -%}
{%- else -%} {%- else -%}
{##ensure that backup pillar exists##} {##ensure that backup pillar exists##}
{%- if pillar['backup'] is defined -%} {%- if pillar['backup'] is defined -%}

View file

@ -14,8 +14,8 @@
- systems.core.freeipa - systems.core.freeipa
'*': '*':
{#- don't run update automatically on containers - updates will be triggered from their host -#} {#- don't run update automatically on containers - updates will be triggered from their host -#}
{%- if pillar['grains']['roles'] is defined -%} {%- if pillar['roles'] is defined -%}
{%- if 'lxc_container' not in pillar['grains']['roles'] %} {%- if 'lxc_container' not in pillar['roles'] %}
- update - update
{%- endif -%} {%- endif -%}
{%- endif %} {%- endif %}
@ -29,9 +29,9 @@
- systems.core.mount - systems.core.mount
- systems.core.git - systems.core.git
- systems.core.backup - systems.core.backup
{%- if grains['roles'] is defined -%} {%- if pillar['roles'] is defined -%}
{%- if grains['roles'] is not none -%} {%- if pillar['roles'] is not none -%}
{%- for role in grains['roles'] %} {%- for role in pillar['roles'] %}
{%- if 'roles.maintain.'+role in states %} {%- if 'roles.maintain.'+role in states %}
- roles.maintain.{{role}} - roles.maintain.{{role}}
{%- endif -%} {%- endif -%}