The following playbooks are available:
- deploy-docker.sh - Deploys custom schemas for Docker configuration
- deploy-opendj.sh - Deploys custom schemas for OpenDJ configuration
- deploy-servers-sh - Main script to deploy new servers to a ziNet
- deploy-sshldap.sh - Deploys custom schemas for sshldap configuration
- deploy-tenant.sh - Deploys custom schemas for a new tenant space
Script: deploy-docker.sh
This script will add Docker schema to the Directory Server.
Prerequisite: OpenDJ must have been deployed and running.
Result: 0 for success
| Parameter | Description | Default | Mandatory |
|---|---|---|---|
| -z ziD | The ziD of the ziNet instance. | N/A | Yes |
| -C docker config file | A docker config file. See this page for reference. This file will be sources prior to configuring the Docker schema in the Directory Server | N/A | Yes |
| -D admin user DN | An admin user bind DN. This user must be able to perform modifies to any parts of the Directory Server specified in the Docker config file. | N/A | Yes |
| -w admin user password | Admin user password. | N/A | No |
| -W | Prompt for a password. The default behavior will be to prompt for a password. | true | No |
| -y admin user password file | A file containing the admin user's password | N/A | No |
Script: deploy-opendj.sh
This script deploys OpenDJ schema to the Directory Server.
Prerequisite: ziNet PKI module and
| Parameter | Description | Default | Mandatory |
|---|---|---|---|
| -z ziD | The ziD of the ziNet instance. | N/A | Yes |
| -C docker config file | A opendj config file. See this page for reference. This file will be sources prior to configuring the OpenDJ schema in the Directory Server | N/A | Yes |
| -D admin user DN | An admin user bind DN. This user must be able to perform modifies to any parts of the Directory Server specified in the OpenDJ config file. | N/A | Yes |
| -w admin user password | Admin user password. | N/A | No |
| -W | Prompt for a password. The default behavior will be to prompt for a password. | true | No |
| -y admin user password file | A file containing the admin user's password | N/A | No |
Script: deploy-servers.sh
This script deploys a set of servers to a ziNet network fabric.
Prerequisite: Servers must have been deployed in AWS already. See this page for How-To Deploy New Servers.
| Parameter | Description | Default | Mandatory |
|---|---|---|---|
| -i Inventory File | The inventory file containing server configuration | N/A | Yes |
| -r Repo folder | A repository folder containing the following:
| N/A | Yes |
| -w service_sshldap account password | This is the password for the default service account defined by this DN: uid=service_sshldap,${SSHLDAP_SVCS_OPS_DN}. Is this is not passed in, then the default behavior of the Directory Server must be to allow anonymous binds. In addition, you should set SSHLDAP_ACI_DN_TYPE=userdn and SSHLDAP_ACI_DN=anyone | N/A | No |
| -y service_sshldap account password file | A file containing the password for the default service account. The same rules apply as the '-w' parameter. | N/A | No |
| -Y opendj password file | A file containing two (2) passwords. The first line of the file should be the Directory Administrator's password. The second line contains the Admin User password. If a password file is not passed, then the user will be promoted for the required passwords. | N/A | No |
Inventory File Format
An ".ini" formatted file with the following directives.
| Directive | Description | Example | Mandatory |
|---|---|---|---|
| Repository Variables | |||
| repo.[0..9]* | A Git repository that will be fetched on the target host being installed. Note: Repos are processed in order according to the numeric value. | [repo.1] [repo.2] | Yes. At least one repo is required. |
| REPO_URI | The URI of the repository that will be exported. e.g. git archive --remote=${REPO_URI} ${theBranch} | tar -x -C /tmp/ | git@bitbucket.org:zibernetics/zinet.git | Yes |
| REPO_BRANCH | The branch that will be fetched | master | No. If not provided the HEAD branch of the Git repo will be exported |
| REPO_ROOT | The root of the git repo that will be fetched. e.g. git archive --remote=${REPO_URI} ${theBranch}:${REPO_ROOT} | tar -x -C /tmp/ | prod | No. If not provided the root of the Git branch will be exported. |
| Global Variables | |||
| global | A single entry containing global variables that are applied to each server entry. | [global] | Yes |
| ziD | The ziNet identifier for the site. | zId=zibernetics | Yes |
| ziTenantId | The tenant ID used by the OpenDJ module and SSHLDAP module. | ziTenantId=acme | Yes |
| CA_HOST_NAME | The host name for the server running the CA | CA_HOST_NAME=ca.ops.zibernetics.io | No. If not defined, then server certificate requests can't be signed. i.e. no certs for SSL config. |
| REPO_KEY_SCAN | The host name for the Git server. This will be used to perform a ssh-keyscan so that unattended Git exports can be performed. | REPO_KEY_SCAN=bitbucket.org | No |
| DIR_MGR_DN | The OpenDJ module Directory Manager DN | DIR_MGR_DN="cn=Directory Manager" | Yes |
| SEARCH_DOMAINS | A list of DNS search domains to configure servers with quoted and separated by spaces if more than one search domain. | SEARCH_DOMAINS="ops.zibernetics.io "zibernetics.io" | No |
| Server Variables | |||
| server.[0..9]* | A server that will be setup with one or more ziNet module. The directives for a module are here. | [server.10] | Yes |
| INSTALL_ZINET | Install the core ziNet module | INSTALL_ZINET=[ true | false ] | Yes |
| ZINET_TARGET_HOSTNAME | The host name to configure the server with. Note: DNS should be able to resolve the server. This merely set the Linux host name. | ZINET_TARGET_HOSTNAME=prod-itops1.ops.zibernetics.io | No |
| ZINET_STORAGE_DEV | This is a file system device attached to the server that may be used for storing ziNet configuration (i.e. the /etc/${ziD} directory). This must be known and is specific for the server being installed. | ZINET_STORAGE_DEV=/dev/xvdb | No |
Script: deploy-sshldap.sh
This script deploys SSHLDAP schema to the Directory Server.
| Parameter | Description | Default | Mandatory |
|---|---|---|---|
| -z ziD | The ziD of the ziNet instance. | N/A | Yes |
| -C docker config file | A sshldap config file. See this page for reference. This file will be sources prior to configuring the sshldap schema in the Directory Server | N/A | Yes |
| -D admin user DN | An admin user bind DN. This user must be able to perform modifies to any parts of the Directory Server specified in the sshldap config file. | N/A | Yes |
| -w admin user password | Admin user password. | N/A | No |
| -W | Prompt for a password. The default behavior will be to prompt for a password. | true | No |
| -y admin user password file | A file containing the admin user's password | N/A | No |
Add Comment