Tag training node roles and restart sshd

Tag the training node roles so that they can easily be run separately, and make sure sshd restarts so that password authentication succeeds.
satkinson · May 8, 2020 · 3722937 · 3722937
1 parent 800579c
commit 3722937
Show file tree

Hide file tree

Showing 4 changed files with 18 additions and 7 deletions.
diff --git a/README.md b/README.md
@@ -126,6 +126,13 @@ To provision the infrastructure execute the playbook:
 ansible-playbook comanage_registry_training.yml
 ```
 
+To reconfigure only the training nodes once they have already
+been provisioned:
+
+```
+ansible-playbook training_nodes.yml --tags training_nodes
+```
+
 ## SSH Access
 
 Trainers may use their provisioned SSH keys to access all nodes. Each trainer

diff --git a/roles/common/handlers/main.yml b/roles/common/handlers/main.yml
diff --git a/roles/common/tasks/users.yml b/roles/common/tasks/users.yml
@@ -4,8 +4,11 @@
       path: /etc/ssh/sshd_config
       regexp: '^PasswordAuthentication'
       line: PasswordAuthentication yes
-    notify:
-      - restart sshd
+
+  - name: Restart sshd
+    systemd:
+      name: sshd
+      state: restarted
 
   - name: Passwordless sudo
     lineinfile:

diff --git a/training_nodes.yml b/training_nodes.yml
@@ -249,7 +249,13 @@
 
     - import_role:
         name: common
+      tags:
+        - training_nodes
     - import_role:
         name: swarm
+      tags:
+        - training_nodes
     - import_role:
         name: training
+      tags:
+        - training_nodes