ansible/roles/gluster_run/tasks/main.yml

- name: Gluster paths
  file:
    path: "{{ item }}"
    owner: "{{ gluster_owner }}"
    group: "{{ gluster_group }}"
    mode: '0750'
    state: directory
  loop: [ "{{ gluster_datadir }}", "{{ gluster_libmnt }}" ]
- name: Mount gluster lib storage
  include_role:
    name: mount
  vars:
    mount_dev: "{{ gluster_libdev }}"
    mount_path: "{{ gluster_libmnt }}"
    mount_owner: "{{ gluster_owner }}"
    mount_group: "{{ gluster_group }}"
    mount_mode: '0750'
    mount_fs: xfs
  when: gluster_libdev is defined

- name: Install gluster
  apt:
    name: glusterfs-server
    state: latest
  notify: gluster_restart

- name: Require TLS on the mgmt path
  file:
    path: "{{ gluster_secure }}"
    owner: "{{ gluster_owner }}"
    group: "{{ gluster_group }}"
    mode: '0640'
    state: touch
  register: gluster_touch
  when: gluster_cert is defined or gluster_ca is defined
  changed_when: gluster_touch.diff.before.state != "file"
  notify: gluster_restart
- name: Accept CA-based auth on the mgmt path
  lineinfile:
    path: "{{ gluster_secure }}"
    insertbefore: BOF
    line: "option transport.socket.ssl-cert-depth {{ gluster_cert_depth }}"
  when: gluster_ca is defined
  notify: gluster_restart
- name: Limit dynamic ports to a small range
  lineinfile:
    path: "{{ gluster_volfile }}"
    regexp: "^[#\\s]*option max-port"
    line: "    option max-port  {{ gluster_max_port }}"
  notify: gluster_restart

- name: Start glusterd
  systemd:
    name: glusterd
    enabled: no
    state: started
  notify: gluster_probe
  when: gluster_run