From 194fe0614a0273b6878af6dd492fed8057cf7020 Mon Sep 17 00:00:00 2001 From: Jeroen Date: Thu, 8 Oct 2026 16:39:21 +0200 Subject: [PATCH 1/7] initial setup for tools role --- roles/tools/README.md | 38 ++++++++++ roles/tools/defaults/main.yml | 1 + roles/tools/files/logos-sync | 3 + roles/tools/files/sram-managewatch | 3 + roles/tools/files/sram-rapportage | 2 + roles/tools/files/sync | 39 ++++++++++ roles/tools/files/tools-cert | 2 + roles/tools/files/tools-contactexport | 2 + roles/tools/files/tools-crmexport | 2 + roles/tools/files/tools-edugain | 3 + roles/tools/files/tools-geoip | 3 + roles/tools/files/tools-manage | 13 ++++ roles/tools/files/tools-manage-support | 11 +++ roles/tools/files/tools-monitoridp | 8 +++ roles/tools/files/tools-rapportages | 8 +++ roles/tools/files/tools-sab | 3 + roles/tools/files/tools-stats | 6 ++ roles/tools/files/tools-vlan-acls | 2 + roles/tools/tasks/main.yml | 98 ++++++++++++++++++++++++++ roles/tools/vars/main.yml | 1 + 20 files changed, 248 insertions(+) create mode 100644 roles/tools/README.md create mode 100644 roles/tools/defaults/main.yml create mode 100644 roles/tools/files/logos-sync create mode 100644 roles/tools/files/sram-managewatch create mode 100644 roles/tools/files/sram-rapportage create mode 100644 roles/tools/files/sync create mode 100644 roles/tools/files/tools-cert create mode 100644 roles/tools/files/tools-contactexport create mode 100644 roles/tools/files/tools-crmexport create mode 100644 roles/tools/files/tools-edugain create mode 100644 roles/tools/files/tools-geoip create mode 100644 roles/tools/files/tools-manage create mode 100644 roles/tools/files/tools-manage-support create mode 100644 roles/tools/files/tools-monitoridp create mode 100644 roles/tools/files/tools-rapportages create mode 100644 roles/tools/files/tools-sab create mode 100644 roles/tools/files/tools-stats create mode 100644 roles/tools/files/tools-vlan-acls create mode 100644 roles/tools/tasks/main.yml create mode 100644 roles/tools/vars/main.yml diff --git a/roles/tools/README.md b/roles/tools/README.md new file mode 100644 index 000000000..225dd44b9 --- /dev/null +++ b/roles/tools/README.md @@ -0,0 +1,38 @@ +Role Name +========= + +A brief description of the role goes here. + +Requirements +------------ + +Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required. + +Role Variables +-------------- + +A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well. + +Dependencies +------------ + +A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles. + +Example Playbook +---------------- + +Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too: + + - hosts: servers + roles: + - { role: username.rolename, x: 42 } + +License +------- + +BSD + +Author Information +------------------ + +An optional section for the role authors to include contact information, or a website (HTML is not allowed). diff --git a/roles/tools/defaults/main.yml b/roles/tools/defaults/main.yml new file mode 100644 index 000000000..ed97d539c --- /dev/null +++ b/roles/tools/defaults/main.yml @@ -0,0 +1 @@ +--- diff --git a/roles/tools/files/logos-sync b/roles/tools/files/logos-sync new file mode 100644 index 000000000..775db9614 --- /dev/null +++ b/roles/tools/files/logos-sync @@ -0,0 +1,3 @@ +MAILTO=coin-logs@surf.nl +HOME=/srv/logos +14 * * * * surfconext (cd SURF-member-logos && git pull --rebase --quiet && cd .. && ./sync && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/c0b3b1fd-8d40-4dbd-9027-ec3c42f9da96) | /bin/logger -t surfconext-logo-sync diff --git a/roles/tools/files/sram-managewatch b/roles/tools/files/sram-managewatch new file mode 100644 index 000000000..a8f7a0e62 --- /dev/null +++ b/roles/tools/files/sram-managewatch @@ -0,0 +1,3 @@ +MAILTO=sram-beheer@surf.nl +PATH=/usr/local/bin:/usr/bin:/bin +*/10 8-17 * * 1-5 sram cd /srv/sram/sram-rapportage/ && ./watch-manage.sh -m && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/6ab74c74-8e27-4a58-9774-e6fbae1b7d7c diff --git a/roles/tools/files/sram-rapportage b/roles/tools/files/sram-rapportage new file mode 100644 index 000000000..151fb4567 --- /dev/null +++ b/roles/tools/files/sram-rapportage @@ -0,0 +1,2 @@ +MAILTO=sram-beheer@surf.nl +0 6 1 * * sram cd /srv/sram/sram-rapportage/ && ./sram-report-idps.py $(date --date="yesterday" +\%Y-\%m) diff --git a/roles/tools/files/sync b/roles/tools/files/sync new file mode 100644 index 000000000..83a9ae157 --- /dev/null +++ b/roles/tools/files/sync @@ -0,0 +1,39 @@ +#!/bin/bash + +# based on surfconext-tools/geoip/geoip-update.sh +# +# set -e + +cd /srv/logos + +DIR="SURF-member-logos/200x200/" +SYNC_USER="staticsync" +SYNC_PATH="/opt/openconext/staticdata/data/static/logos/org" +RSYNC_RSH="ssh -o StrictHostKeyChecking=yes" +export RSYNC_RSH + +declare -A sync_hosts +sync_hosts=( + ["test2"]="docker1.test2.ams.surfconext.nl" + ["acc"]="docker1.acc.ams.surfconext.nl docker2.acc.utr.surfconext.nl" + ["prd"]="docker1.prd.ams.surfconext.nl docker2.prd.utr.surfconext.nl docker3.prd.ams.surfconext.nl docker4.prd.utr.surfconext.nl dockerstag1.prd.ams.surfconext.nl" +) + +echo "Synching org logos" +(cd SURF-member-logos/ && git log -1 --format='Last update: %ci (commit %C(auto)%h%Creset by %C(blue)%ce%Creset)') + +for env in "test2" "acc" "prd" +do + echo -n " 🔄️ Syncing to ${env}..." + for host in ${sync_hosts[$env]} + do + rsync -4 --quiet --checksum --delete --delete-excluded --mkpath --archive --exclude '.git/' "$DIR" "${SYNC_USER}@${host}:${SYNC_PATH}" + echo -n "🌟" + done + echo "✅" +done + +echo "🏁 finished" + +exit 0 + diff --git a/roles/tools/files/tools-cert b/roles/tools/files/tools-cert new file mode 100644 index 000000000..c8bc2fdfe --- /dev/null +++ b/roles/tools/files/tools-cert @@ -0,0 +1,2 @@ +MAILTO=cert@surfcert.nl +#59 6 * * * surfconext : CT Log checker hits; cd /srv/tools/surfconext-tools/cert && ./check-ctlogs diff --git a/roles/tools/files/tools-contactexport b/roles/tools/files/tools-contactexport new file mode 100644 index 000000000..72d4a6769 --- /dev/null +++ b/roles/tools/files/tools-contactexport @@ -0,0 +1,2 @@ +MAILTO=coin-logs@surf.nl +36 11 * * * surfconext cd /srv/tools/surfconext-tools/contact_export && ./export_to_csv /srv/tools/www/contacts && ./upload_contacts_to_surfdrive.sh && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/45caa998-c4f9-4e55-8753-6abfbe6b3057 diff --git a/roles/tools/files/tools-crmexport b/roles/tools/files/tools-crmexport new file mode 100644 index 000000000..f1553f2eb --- /dev/null +++ b/roles/tools/files/tools-crmexport @@ -0,0 +1,2 @@ +MAILTO=coin-logs@surf.nl +16 07 * * * surfconext cd /srv/tools/surfconext-tools/stats && ./export-crm.py > /srv/tools/www/crm/crm.csv && ./export-crm.py --members > /srv/tools/www/crm/crm-members.csv && ./export-crm.py --all > /srv/tools/www/crm/crm-all.csv && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/010a6462-dcda-458f-b27d-7c092ea62ba1 diff --git a/roles/tools/files/tools-edugain b/roles/tools/files/tools-edugain new file mode 100644 index 000000000..edb4cb017 --- /dev/null +++ b/roles/tools/files/tools-edugain @@ -0,0 +1,3 @@ +MAILTO=surfconext-beheer@surf.nl +45 04 * * 1-5 surfconext cd /srv/tools/surfconext-tools/edugain && ./check-edugain-entities.py && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/e883a30f-d0c4-4f5c-a4c2-4cf20a616cf2 + diff --git a/roles/tools/files/tools-geoip b/roles/tools/files/tools-geoip new file mode 100644 index 000000000..1f7b19b29 --- /dev/null +++ b/roles/tools/files/tools-geoip @@ -0,0 +1,3 @@ +MAILTO=coin-logs@surf.nl +HOME=/srv/tools/surfconext-tools/geoip +36 */6 * * * surfconext (./update_geoip.sh && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/0cb092ba-5cd8-4c5f-8d07-af17fd67d573) | /bin/logger -t surfconext-geoip diff --git a/roles/tools/files/tools-manage b/roles/tools/files/tools-manage new file mode 100644 index 000000000..17b7cfe78 --- /dev/null +++ b/roles/tools/files/tools-manage @@ -0,0 +1,13 @@ +MAILTO=coin-logs@surf.nl +HOME=/srv/tools/surfconext-tools/manage/ + +23 04 * * * surfconext ./stepup-users > /srv/tools/www/sp/stepup.html && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/1f568a20-59cb-4f41-8b7d-f2913fbdf5b1 + +05 16 * * * surfconext ./edugain-consistency && ./edugain-set-autoconnect && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/d8fc00b3-dcb0-4a75-92b5-71346d1f222a + + +30 07,13 * * * surfconext ./edugain-rns-koppel && ./clarin-koppel && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/15fd4203-3b53-4ab0-8934-5c36fbf9b28b + +MAILTO=surfconext-beheer@surf.nl +33 16 * * * surfconext ./edugain-check && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/5373c35e-f2ca-4d22-bd2e-cd29f669d26e +15 16 * * mon surfconext ./manage-orphan && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/0d673322-2187-4f67-ad7c-f16fc091f3cd diff --git a/roles/tools/files/tools-manage-support b/roles/tools/files/tools-manage-support new file mode 100644 index 000000000..fad59366f --- /dev/null +++ b/roles/tools/files/tools-manage-support @@ -0,0 +1,11 @@ +MAILTO=support@surfconext.nl +HOME=/srv/tools/surfconext-tools/manage/ +00 16 * * 1-5 surfconext ./get-edugain-downstream && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/8306bc58-4ae3-4b77-b5d8-ed70476d5dc7 +14 17 * * 1-5 surfconext ./edugain-rs-missing-sps.sh && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/c0b363c9-1343-43e4-baff-1ed670c3e21b +16 17 * * 1-5 surfconext ./edugain-sps-coco+rs_missing && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/d67dbec0-0940-4233-850d-edd9f9e9994d +11 16 * * 1-5 surfconext ./clarin-missing-sps && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/897da5eb-6e1b-4cf4-a88c-610bd09b619b +36 09 * * 5 surfconext ./unused-idps-4-months && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/75ab797f-7802-4376-aa01-c904b12f697c + +# check for problems in manage +44 04 * * 1-5 surfconext cd /srv/tools/surfconext-tools/manage && ./manage-checker-mail && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/5dd2799a-2bd5-4302-98f8-9d51e92e1330 + diff --git a/roles/tools/files/tools-monitoridp b/roles/tools/files/tools-monitoridp new file mode 100644 index 000000000..142573163 --- /dev/null +++ b/roles/tools/files/tools-monitoridp @@ -0,0 +1,8 @@ +MAILTO=surfconext-beheer@surf.nl +HOME=/srv/tools/surfconext-tools/monitor-idp/ + +# run these during the day to prevent overlap with maintenance windows at IdPs +13 9 * * mon-fri surfconext ./diff-manage-metadata && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/782af100-daaa-4ad2-94cd-7181eb092c80 +13 10 * * mon-fri surfconext ./skew.py && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/782af100-daaa-4ad2-94cd-7181eb092c80 +13 11 * * mon-fri surfconext ./check-idp-metadata-url.py && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/782af100-daaa-4ad2-94cd-7181eb092c80 + diff --git a/roles/tools/files/tools-rapportages b/roles/tools/files/tools-rapportages new file mode 100644 index 000000000..d602c46e9 --- /dev/null +++ b/roles/tools/files/tools-rapportages @@ -0,0 +1,8 @@ +MAILTO=surfconext-beheer@surf.nl + +# rapportage staat uit. Of toch aan? Of toch niet? +#0 3 1 * * surfconext /srv/tools/surfconext-tools/rapportage/vers `date --date="-1 month" +\%Y-\%m` && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/4743f5c9-1219-4adb-922b-8dfa4cb0ab98 + +# doesnt work +#27 2 1 1,4,7,10 * surfconext cd /srv/tools/surfconext-tools/teams-check && ./surfconext-teams-mail + diff --git a/roles/tools/files/tools-sab b/roles/tools/files/tools-sab new file mode 100644 index 000000000..2ef153db1 --- /dev/null +++ b/roles/tools/files/tools-sab @@ -0,0 +1,3 @@ +MAILTO=coin-logs@surf.nl +13 2 * * * surfconext cd /srv/tools/surfconext-tools/sab/ && ./fetch && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/30dc1832-08e6-41cd-a6e6-3df4c7a2ab3a + diff --git a/roles/tools/files/tools-stats b/roles/tools/files/tools-stats new file mode 100644 index 000000000..504a2064f --- /dev/null +++ b/roles/tools/files/tools-stats @@ -0,0 +1,6 @@ +MAILTO=surfconext-beheer@surf.nl +03 23 * * mon surfconext cd /srv/tools/surfconext-tools/stats/ && ./crm_manage_sync.py && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/a980a9ef-f8e6-4284-a67a-be91f7c03dd2 + +MAILTO=coin-logs@surf.nl +15 03 * * sat surfconext cd /srv/tools/surfconext-tools/stats/idp/ && ./manage-fetch-idplist > idps-sso.json && ./idpstats > /srv/tools/www/idp/idpstats.html && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/db4ac7a6-d59f-4aa9-89e6-da1bd86e5ebb +31 16 * * * surfconext cd /srv/tools/surfconext-tools/stats/idp/ && ./manage-fetch-idplist | ./idplist | ssh -q docker2.test.ams.surfconext.nl "cat > /opt/openconext/staticdata/data/support/stats/idplist.html" && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/6e5dea8f-2f7a-43fe-8bf5-2e3723bd88b9 diff --git a/roles/tools/files/tools-vlan-acls b/roles/tools/files/tools-vlan-acls new file mode 100644 index 000000000..c8bc65afa --- /dev/null +++ b/roles/tools/files/tools-vlan-acls @@ -0,0 +1,2 @@ +MAILTO=surfconext-beheer@surf.nl +53 6 * * * surfconext cd /srv/tools/vlan-acls/ && bin/check-acl-updates && curl -fsS --retry 3 -o /dev/null https://ping.ohdear.app/d03c3490-c2cb-4015-af1c-f7782e31f937 diff --git a/roles/tools/tasks/main.yml b/roles/tools/tasks/main.yml new file mode 100644 index 000000000..c76157c7c --- /dev/null +++ b/roles/tools/tasks/main.yml @@ -0,0 +1,98 @@ +--- +- name: "Add surfconext user" + ansible.builtin.user: + name: "surfconext" + uid: "108" + group: "surfconext" + home: "/srv/tools" + +- name: "Add surfconext user" + ansible.builtin.user: + name: "sram" + uid: "109" + group: "sram" + home: "/srv/sram" + shell: "/usr/sbin/nologin" + +- name: "Create logos directory" + ansible.builtin.file: + state: "directory" + path: "/srv/logos" + owner: "surfconext" + group: "surfconext" + mode: "0755" + +- name: "Place log sync script" + ansible.builtin.copy: + src: "files/sync" + dest: "/srv/logos/sync" + user: "surfconext" + group: "surfconext" + mode: "0755" + +- name: "Place sram directory" + ansible.builtin.file: + state: "directory" + path: "/srv/sram" + owner: "surfconext" + group: "surfconext" + mode: "0755" + +- name: "Install packages" + ansible.builtin.package: + name: + - "php-common" + - "certbot" + - "python3-certbot" + - "python3-apt" + - "python3-bs4" + - "python3-dateutil" + - "python3-mysqldb" + - "python3-pymysql" + - "python3-requests" + - "python3-tzlocal" + - "python3-zeep" + status: "present" + +- name: "Clone logos git repository" + ansible.builtin.git: + repo: "https://github.com/SURFnet/SURF-member-logos.git" + dest: "/srv/logos/SURF-member-logos" + +- name: "Clone tools git repository" + ansible.builtin.git: + repo: "https://gitlab.surf.nl/surfconext/surfconext-tools.git" + dest: "/srv/tools/surfconext-tools" + +- name: "Clone sram git repository" + ansible.builtin.git: + repo: "https://gitlab.surf.nl/sram/sram-tools.git" + dest: "/srv/sram/sram-tools" + +- name: "Make symlink for sram tools" + ansible.builtin.file: + state: "link" + src: "/srv/sram/sram-tools/sram-rapportage" + dest: "/src/sram/sram-rapportage" + +- name: "Place cron jobs" + ansible.builtin.copy: + src: "files/{{ item }}" + dest: "/etc/cron.d/{{ item }}" + mode: "0644" + with_items: + - "logos-sync" + - "sram-managewatch" + - "sram-rapportage" + - "tools-cert" + - "tools-contactexport" + - "tools-crmexport" + - "tools-edugain" + - "tools-geoip" + - "tools-manage" + - "tools-manage-support" + - "tools-monitoridp" + - "tools-rapportages" + - "tools-sab" + - "tools-stats" + - "tools-vlan-acls" diff --git a/roles/tools/vars/main.yml b/roles/tools/vars/main.yml new file mode 100644 index 000000000..ed97d539c --- /dev/null +++ b/roles/tools/vars/main.yml @@ -0,0 +1 @@ +--- From 4b16b28bdabbc87981cc05f187c1da1e899cf3d0 Mon Sep 17 00:00:00 2001 From: Jeroen Date: Mon, 12 Oct 2026 10:30:55 +0200 Subject: [PATCH 2/7] fix dir user, fix package task --- roles/tools/tasks/main.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/roles/tools/tasks/main.yml b/roles/tools/tasks/main.yml index c76157c7c..7296ee5f1 100644 --- a/roles/tools/tasks/main.yml +++ b/roles/tools/tasks/main.yml @@ -6,7 +6,7 @@ group: "surfconext" home: "/srv/tools" -- name: "Add surfconext user" +- name: "Add sram user" ansible.builtin.user: name: "sram" uid: "109" @@ -34,8 +34,8 @@ ansible.builtin.file: state: "directory" path: "/srv/sram" - owner: "surfconext" - group: "surfconext" + owner: "sram" + group: "sram" mode: "0755" - name: "Install packages" @@ -52,7 +52,7 @@ - "python3-requests" - "python3-tzlocal" - "python3-zeep" - status: "present" + state: "present" - name: "Clone logos git repository" ansible.builtin.git: From 50e2074b61d4b712c224d08f29e7fd3e3b8f508f Mon Sep 17 00:00:00 2001 From: Jeroen Date: Mon, 12 Oct 2026 10:40:45 +0200 Subject: [PATCH 3/7] fix link dest, dont allow git to update existing repos --- roles/tools/tasks/main.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/roles/tools/tasks/main.yml b/roles/tools/tasks/main.yml index 7296ee5f1..4f2d3ea87 100644 --- a/roles/tools/tasks/main.yml +++ b/roles/tools/tasks/main.yml @@ -58,22 +58,25 @@ ansible.builtin.git: repo: "https://github.com/SURFnet/SURF-member-logos.git" dest: "/srv/logos/SURF-member-logos" + update: "no" - name: "Clone tools git repository" ansible.builtin.git: repo: "https://gitlab.surf.nl/surfconext/surfconext-tools.git" dest: "/srv/tools/surfconext-tools" + update: "no" - name: "Clone sram git repository" ansible.builtin.git: repo: "https://gitlab.surf.nl/sram/sram-tools.git" dest: "/srv/sram/sram-tools" + update: "no" - name: "Make symlink for sram tools" ansible.builtin.file: state: "link" src: "/srv/sram/sram-tools/sram-rapportage" - dest: "/src/sram/sram-rapportage" + dest: "/srv/sram/sram-rapportage" - name: "Place cron jobs" ansible.builtin.copy: From 828d24dd79ff918a65a8d9781fd04e7e9dd64d18 Mon Sep 17 00:00:00 2001 From: Jeroen Date: Mon, 12 Oct 2026 11:24:54 +0200 Subject: [PATCH 4/7] match link with current situation --- roles/tools/tasks/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/tools/tasks/main.yml b/roles/tools/tasks/main.yml index 4f2d3ea87..d99c952c1 100644 --- a/roles/tools/tasks/main.yml +++ b/roles/tools/tasks/main.yml @@ -75,7 +75,7 @@ - name: "Make symlink for sram tools" ansible.builtin.file: state: "link" - src: "/srv/sram/sram-tools/sram-rapportage" + src: "sram-tools/sram-rapportage" dest: "/srv/sram/sram-rapportage" - name: "Place cron jobs" From 0f1461ec6f4055d04e8c9aef578ae6101f7df3d6 Mon Sep 17 00:00:00 2001 From: Jeroen Date: Mon, 12 Oct 2026 13:51:07 +0200 Subject: [PATCH 5/7] use correct gitlab urls --- roles/tools/tasks/main.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/tools/tasks/main.yml b/roles/tools/tasks/main.yml index d99c952c1..246fd10d6 100644 --- a/roles/tools/tasks/main.yml +++ b/roles/tools/tasks/main.yml @@ -62,13 +62,13 @@ - name: "Clone tools git repository" ansible.builtin.git: - repo: "https://gitlab.surf.nl/surfconext/surfconext-tools.git" + repo: "git@gitlab.surf.nl:surfconext/surfconext-tools.git" dest: "/srv/tools/surfconext-tools" update: "no" - name: "Clone sram git repository" ansible.builtin.git: - repo: "https://gitlab.surf.nl/sram/sram-tools.git" + repo: "git@gitlab.surf.nl:sram/sram-tools.git" dest: "/srv/sram/sram-tools" update: "no" From 33f4b94aeed4b5567f15497b719c0afd78e67018 Mon Sep 17 00:00:00 2001 From: Jeroen Date: Mon, 12 Oct 2026 14:05:10 +0200 Subject: [PATCH 6/7] add readme to role --- roles/tools/README.md | 31 +++++++++++++------------------ 1 file changed, 13 insertions(+), 18 deletions(-) diff --git a/roles/tools/README.md b/roles/tools/README.md index 225dd44b9..15430e041 100644 --- a/roles/tools/README.md +++ b/roles/tools/README.md @@ -1,38 +1,33 @@ +--- Role Name ========= -A brief description of the role goes here. +This role is designed to configure a server to run the scripts from the surfconext-tool and sram-tools. +The role was created after the server had already been installed, so this role is a recreation of that. +In case you are using this role to install onto a new server make sure everything required is there, test the revelevant scripts etc. Requirements ------------ -Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required. +None. Role Variables -------------- -A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well. +None. Dependencies ------------ -A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles. - -Example Playbook ----------------- - -Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too: - - - hosts: servers - roles: - - { role: username.rolename, x: 42 } +None License -------- +-------------- -BSD +These files are licensed under version 2.0 of the Apache License, as described in the file [LICENSE](LICENSE). -Author Information ------------------- +Support +-------------- -An optional section for the role authors to include contact information, or a website (HTML is not allowed). +* You can ask questions on the [OpenConext mailing list](https://openconext.org/get-involved/mailing-lists/) +* Or you can join our [Slack Workspace](https://edu.nl/ocslk) From b866015d6e659456c595fff8497cb272fac147fe Mon Sep 17 00:00:00 2001 From: Jeroen Date: Mon, 12 Oct 2026 14:07:56 +0200 Subject: [PATCH 7/7] add title to readme --- roles/tools/README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/tools/README.md b/roles/tools/README.md index 15430e041..dc8bc1754 100644 --- a/roles/tools/README.md +++ b/roles/tools/README.md @@ -1,5 +1,5 @@ --- -Role Name +Tools ========= This role is designed to configure a server to run the scripts from the surfconext-tool and sram-tools. @@ -19,7 +19,7 @@ None. Dependencies ------------ -None +None. License --------------