blsmith/dc-deployments-automation
1
0
Fork 0
mirror of https://bitbucket.org/atlassian/dc-deployments-automation.git synced 2025-12-13 08:23:06 -06:00
Code Issues Packages Projects Releases Wiki Activity

DCD-418: Limit permissions on the systemd unit and move DB params to the environment.

Browse Source
This commit is contained in:
Steve Smith
2019-07-09 16:15:45 +10:00
parent 57e3ae9856
commit 4b2dfd8f90
4 changed files with 10 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
roles/product_startup/molecule/default/tests/test_default.py
View File

@@ -9,3 +9,6 @@ testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(
def test_service_file(host): def test_service_file(host):
f = host.file('/etc/systemd/system/jira-software.service') f = host.file('/etc/systemd/system/jira-software.service')
assert f.contains("^ExecStart=/opt/atlassian/jira-software/current/bin/start-jira.sh -fg$") assert f.contains("^ExecStart=/opt/atlassian/jira-software/current/bin/start-jira.sh -fg$")
assert f.user == 'root'
assert f.user == 'root'
assert f.mode == 0o0640

3
roles/product_startup/tasks/main.yml
View File

@@ -4,6 +4,9 @@
template: template:
src: "product.service.j2" src: "product.service.j2"
dest: "/etc/systemd/system/{{ atl_systemd_service_name }}" dest: "/etc/systemd/system/{{ atl_systemd_service_name }}"
owner: root
group: root
mode: 0640
notify: notify:
- Enable Product - Enable Product
- Restart Product - Restart Product

2
roles/synchrony_config/tasks/main.yml
View File

@@ -12,4 +12,4 @@
src: "atl.synchrony.j2" src: "atl.synchrony.j2"
dest: "/etc/atl.synchrony" dest: "/etc/atl.synchrony"
group: "{{ atl_product_user }}" group: "{{ atl_product_user }}"
mode: "0640" mode: "0640"

5
roles/synchrony_config/templates/atl.synchrony.j2
View File

@@ -9,11 +9,12 @@ ATL_SYNCHRONY_JAR_PATH="{{ atl_product_installation_current }}/confluence/WEB-IN
AWS_EC2_PRIVATE_IP="{{ atl_local_ipv4 }}" AWS_EC2_PRIVATE_IP="{{ atl_local_ipv4 }}"
_RUNJAVA="{{ atl_product_installation_current }}/jre/bin/java" _RUNJAVA="{{ atl_product_installation_current }}/jre/bin/java"
SYNCHRONY_DATABASE_USERNAME="{{ atl_jdbc_user }}"
SYNCHRONY_DATABASE_PASSWORD="{{ atl_jdbc_password }}"
ATL_SYNCHRONY_JVM_PROPERTIES="{{ atl_synchrony_stack_space }} {{ atl_synchrony_memory }} \ ATL_SYNCHRONY_JVM_PROPERTIES="{{ atl_synchrony_stack_space }} {{ atl_synchrony_memory }} \
-Dsynchrony.cluster.impl=hazelcast-btf \ -Dsynchrony.cluster.impl=hazelcast-btf \
-Dsynchrony.database.url={{ atl_jdbc_url }} \ -Dsynchrony.database.url={{ atl_jdbc_url }} \
-Dsynchrony.database.username={{ atl_jdbc_user }} \
-Dsynchrony.database.password={{ atl_jdbc_password }} \
-Dsynchrony.bind={{ atl_local_ipv4 }} \ -Dsynchrony.bind={{ atl_local_ipv4 }} \
-Dsynchrony.cluster.bind={{ atl_local_ipv4 }} \ -Dsynchrony.cluster.bind={{ atl_local_ipv4 }} \
-Dcluster.interfaces={{ atl_local_ipv4 }} \ -Dcluster.interfaces={{ atl_local_ipv4 }} \