Updates following #347

README.md

@@ -49,8 +49,7 @@ generated in this repository.
 
 Deployment is managed on a separate private repository that includes several
 secrets. Deployment is done with ansible using a
-[dedicated role](https://github.com/EGI-Federation/ansible-role-fedcloud-ops)
-with:
+[dedicated role](./deploy/roles/catchall) with:
 
 ```sh
 ansible-playbook -i inventory.yaml --extra-vars "@secrets.yaml" playbook.yaml

deploy/cloud-init.yaml

@@ -11,13 +11,6 @@ users:
       - gh:enolfc
       - gh:gwarf
 
-apt:
-  sources:
-    ansible-ppa.list:
-      source: "deb http://ppa.launchpad.net/ansible/ansible/ubuntu xenial main"
-      # this is not a secret
-      keyid: 6125E2A8C77F2818FB7BD15B93C4A3FD7BB9C367 # gitleaks:allow
-
 packages:
   - git
   - ansible

deploy/roles/catchall/defaults/main.yaml

@@ -4,7 +4,7 @@ ams_host: msg.argo.grnet.gr
 ams_token: secret
 
 # check-in endpoint
-checkin_token_endpoint: "https://aai.egi.eu/oidc/token"
+checkin_token_endpoint: "https://aai.egi.eu/auth/realms/egi/protocol/openid-connect/token"
 
 # docker image for the cloud info provider
 cloud_info_image: egifedcloud/ops-cloud-info:latest

deploy/roles/catchall/handlers/main.yml

@@ -0,0 +1,5 @@
+- name: Restart docker
+  ansible.builtin.systemd:
+    name: docker
+    state: restarted
+    daemon_reload: true

deploy/roles/catchall/tasks/docker.yml

@@ -35,6 +35,8 @@
     path: /etc/docker
     state: directory
     mode: "775"
+  notify:
+   - Restart docker
 
 - name: Configure docker
   ansible.builtin.copy:
@@ -51,9 +53,5 @@
       }
     dest: /etc/docker/daemon.json
     mode: "660"
-
-- name: Restart docker
-  ansible.builtin.systemd:
-    name: docker
-    state: restarted
-    daemon_reload: true
+  notify:
+   - Restart docker