site.yml

---
    # create the install media on the local machine
  - hosts: all
    gather_facts: false
    roles:
       - make_install_media

    # unlock any machines that have rebooted
  - hosts: luks_encrypted_machines
    gather_facts: false
    roles:
      - role: add_to_known_hosts
        add_to_known_hosts__skip_if_connect_fails: true
      - role: add_to_known_hosts
        add_to_known_hosts__ssh_port: 23
        add_to_known_hosts__skip_if_connect_fails: true
      - unlock_luks

    # Make sure that all of the machines have admin accounts set up and
    # automatic security patches enabled.
  - hosts: all:!kvm_guests
    gather_facts: false
    become: true
    roles:
      - add_to_known_hosts
      - core_setup
      - network_setup
    tasks:
      - name: Add names of machines in visible subnets to /etc/hosts
        include_role:
            role: add_subnet_to_hosts_file
        vars:
            subnet: "{{ subnet_iter }}"
        loop: "{{ visible_subnets }}"
        loop_control:
            loop_var: subnet_iter

    # Make sure that all of the machines have admin accounts set up and
    # automatic security patches enabled.
  - hosts: luks_encrypted_machines
    become: true
    roles:
      - update_luks_config

    # setup infiniband, wireguard, kvm, and ipmi on boletus hosts
  - hosts: boletus
    become: true
    roles:
      - infiniband_setup
      - ipmi_setup
      - wireguard
      - kvm_host
      - load_balancer
      - wg_ams1_bos1

    # Set up morchella as a NAT and PXE boot server
  - hosts: morchella
    become: true
    roles:
      - router
      - dhcp_server
      - pxe_boot_server
      #- ipmi_viewer
    tasks: # TODO: should be replaced with roles
      - name: additional packages
        apt:
            name: "{{ item }}"
            state: present
        loop:
          - socat # needed for current IPMI UDP tunneling
          - psmisc # for killall, used by IPMI tunneling script
          - ipmitool # useful utility, should go in a role

    # Make sure the virtual machines have admin accounts set up and
    # automatic security patches enabled.
  - hosts: kvm_guests
    gather_facts: false
    become: true
    roles:
      - add_to_known_hosts
      - kvm_guest
      - core_setup
      - network_setup
    tasks:
      - name: Add names of machines in visible subnets to /etc/hosts
        include_role:
            role: add_subnet_to_hosts_file
        vars:
            subnet: "{{ subnet_iter }}"
        loop: "{{ visible_subnets }}"
        loop_control:
            loop_var: subnet_iter

  - hosts: kubecontrollers
    become: true
    roles:
      - kubernetes_controller

  - hosts: kubeworkers
    become: true
    roles:
      - kubernetes_worker

  - hosts: kubecontrollers
    become: true
    roles:
      - apply_kubernetes_manifests

  - hosts: vnc_servers
    become: true
    roles:
      - vnc_server