search

bennojoy / mongo_mongoc

This role installs and configures the mongo configuration servers
0 stars 4 forks source link

Keyfile path #1

Open DavidWittman opened 10 years ago

DavidWittman commented 10 years ago

What is the intended location for the source of the keyfile? It looks like it should be pulled from the mongod role based on the following task:

- name: Copy the keyfile for authentication
  copy: src=roles/mongod/files/secret dest={{ mongoc_datadir_prefix }}/secret owner={{ mongo_user }} group={{ mongo_group }} mode=0400

https://github.com/bennojoy/mongo_mongoc/blob/master/tasks/main.yml#L64-L65

But, for this to be correct, I would think the src would instead need to be ../../mongo_mongod/files/secret. It makes sense that the three roles (mongod, mongoc, mongos) each share the same key, but I'm not sure what the intended result is based on this specific task.

DavidWittman commented 10 years ago

@bennojoy Would you mind weighing in here?

awheeler commented 10 years ago

If this is checked out via ansible-galaxy, the path would need to be ../../bennojoy.mongo_mongod/files/secret Additionally, it would be nice if this file was dynamically generated, rather than included in the role, such that we all share the same key.