xref: /aosp_15_r20/external/cldr/tools/scripts/ansible/redact-db-playbook.yml (revision 912701f9769bb47905792267661f0baf2b85bed5)
1- hosts: redactdb
2  vars_files:
3    - vars/main.yml
4    - local-vars/local.yml
5  tasks:
6    - name: set up /home/cldradmin/.ssh/config to fetch db backup
7      template:
8        src: templates/cldrbackup/config.j2
9        dest: /home/cldradmin/.ssh/config
10        owner: cldradmin
11        group: cldradmin
12        mode: '0640'
13    - name: set up /home/cldradmin/.ssh/id_rsa
14      no_log: true
15      copy:
16        src: local-vars/cldrbackup/id_rsa
17        dest: /home/cldradmin/.ssh/id_rsa
18        owner: cldradmin
19        group: cldradmin
20        mode: '0600'
21    - name: set up /home/cldradmin/.ssh/id_rsa.pub
22      copy:
23        src: local-vars/cldrbackup/id_rsa.pub
24        dest: /home/cldradmin/.ssh/id_rsa.pub
25        owner: cldradmin
26        group: cldradmin
27        mode: '0640'
28    - name: set up /home/cldradmin/.ssh/known_hosts
29      copy:
30        src: local-vars/cldrbackup/known_hosts
31        dest: /home/cldradmin/.ssh/known_hosts
32        owner: cldradmin
33        group: cldradmin
34        mode: '0640'
35    - name: set up /home/cldradmin/redact-db.sql
36      copy:
37        src: templates/cldrbackup/redact-db.sql
38        dest: /home/cldradmin/redact-db.sql
39        owner: cldradmin
40        group: cldradmin
41        mode: '0640'
42    - name: set up /home/cldradmin/fetch-db.sh
43      template:
44        src: templates/cldrbackup/fetch_db_sh.j2
45        dest: /home/cldradmin/fetch-db.sh
46        owner: cldradmin
47        group: cldradmin
48        mode: '0640'
49    - name: set up /home/cldradmin/redact-db.sh
50      template:
51        src: templates/cldrbackup/redact_db_sh.j2
52        dest: /home/cldradmin/redact-db.sh
53        owner: cldradmin
54        group: cldradmin
55        mode: '0640'
56    - name: fetch and unzip db
57      # This playbook is intended to always make a change.
58      command: bash /home/cldradmin/fetch-db.sh # noqa 301
59      become: yes
60      become_user: cldradmin
61    - name: stop openliberty
62      become: true
63      service:
64        name: "{{ cldr_openliberty_service }}"
65        state: stopped
66    - name: redact db
67      # This playbook is intended to always make a change.
68      command: bash /home/cldradmin/redact-db.sh # noqa 301
69      become: yes
70      become_user: cldradmin
71    - name: restart openliberty
72      become: true
73      service:
74        name: "{{ cldr_openliberty_service }}"
75        state: restarted
76