Kapisi/playbooks/patching.yml

45 lines
988 B
YAML
Raw Normal View History

2020-10-08 16:33:19 -05:00
---
# patching.yml
#
2021-12-19 21:32:19 -06:00
# This playbook can be used to patch all the servers in an inventory to the latest software available.
# Because we typically encrypt our disk storage, we don't wait for the connection to become available again.
2020-10-08 16:33:19 -05:00
# Variables:
2021-12-19 21:32:19 -06:00
# - target: the host grouper in the inventory -- default: all
2020-10-08 16:33:19 -05:00
#
# Patch then restart a node
2023-11-30 02:44:01 -06:00
#
#
- hosts: physical,virtual
order: sorted
serial: 4
vars:
ansible_become: yes
ansible_become_method: sudo
tasks:
- package:
name: archlinux-keyring
state: latest
2022-04-19 12:01:03 -05:00
2022-12-18 22:23:17 -06:00
- hosts: virtual,geth-hubs
2020-10-08 16:33:19 -05:00
order: sorted
2022-12-18 22:23:17 -06:00
serial: 4
2020-10-08 16:33:19 -05:00
vars:
ansible_become: yes
ansible_become_method: sudo
vars_files:
2021-12-19 21:32:19 -06:00
- "{{ lookup('env', 'ANSIBLE_VAULT_FILE') }}"
2022-04-19 12:01:03 -05:00
roles:
- patching
2021-12-19 21:32:19 -06:00
2022-12-18 22:23:17 -06:00
- hosts: physical
2022-04-19 12:01:03 -05:00
order: sorted
ignore_unreachable: true
serial: 4
vars:
ansible_become: yes
ansible_become_method: sudo
vars_files:
- "{{ lookup('env', 'ANSIBLE_VAULT_FILE') }}"
roles:
- patching