tasks/configure_nfs_mounts.yml

@@ -7,18 +7,8 @@
 - name: check if mountpoint directory exists
   ansible.builtin.stat:
     path: "{{ item }}"
-  loop:
-    - "{{ paths.access.mountpoint }}"
-    - "{{ paths.ingest.mountpoint }}"
-    - "{{ paths.ingest_transfer.mountpoint }}"
-    - "{{ paths.import.mountpoint }}"
-    - "{{ paths.import_transfer.mountpoint }}"
-    - "{{ paths.sftp_upload.mountpoint }}"
-    - "{{ paths.sftp_download.mountpoint }}"
-    - "{{ paths.log_disapp.mountpoint }}"
-    - "{{ paths.log_subapp.mountpoint }}"
-    - "{{ paths.log_subapp_ws.mountpoint }}"
-    - "{{ paths.log_transferapp.mountpoint }}"
+  loop: "{{ (paths | dict2items | map(attribute='value')                                     | map(attribute='mountpoint'))
+          + (nfs_mounts_subapp.hosts[ansible_hostname].old_permanent_read_only | default([]) | map(attribute='mountpoint')) }}"
   register: stat_result
 - name: if dir doesn't exist, create it with correct permissions
   ansible.builtin.file:
@@ -110,6 +100,15 @@
       src: "{{ nfs_mounts_subapp.hosts[ansible_hostname]['sftp_download']['nfs_share'] }}"
       opts: "{{ nfs_mounts_subapp.hosts[ansible_hostname]['sftp_download']['nfs_opts'] }}"
   tags: [notest]
+- name: Read-only Mounts für alte Permanent-Shares
+  ansible.posix.mount:
+    path: "{{ item.mountpoint }}"
+    src: "{{ item.nfs_share | default(omit) }}"
+    state: "{{ item.state | default('mounted') }}"
+    fstype: "{{ item.fstype | default('nfs') }}"
+    opts: "{{ item.nfs_opts | default(nfs_opts.v4_ro) }}"
+  loop: "{{ nfs_mounts_subapp.hosts[ansible_hostname].old_permanent_read_only | default([]) }}"
+  tags: [notest]
 
 ### Owner/Group/Permissions korrekt setzen, nachdem die Mounts an den Mointpoints erfolgt sind ###
 - name: Ordner in NFS-Shares erzeugen, Owner/Group/Permissions korrekt setzen

tasks/main.yml

@@ -17,7 +17,7 @@
     - "groups.vault"
     - "human_users.vault"
     - "iptables.vault"
-    - "nfs_mounts.vault"
+    - "nfs_mounts_am.vault"
     - "sftp.vault"
     - "ssh_publickeys.vault"
     - "check_ie_sample.vault"