configpolicy/roles/fluent-bit/tasks/main.yml

54 lines
1.2 KiB
YAML

- name: ensure fluent-bit is installed
package:
name: fluent-bit
state: present
tags:
- install
- name: ensure fluent-bit is configured
copy:
dest: /etc/fluent-bit/fluent-bit.yml
content: '{{ fluent_bit_config | to_nice_yaml(indent=2) }}'
owner: root
group: root
mode: u=rw,go=
notify:
- restart fluent-bit
tags:
- config
# The default unit configuration for fluent-bit.service sucks. It runs
# as root without any kind of restrictions or sandboxing, forces the
# "classic" configuration format (which is deprecated in favor of
# YAML), and does not support hot reload. It's very simple, so we can
# replace it completely without too much worry about upstream changes.
- name: ensure custom fluent-bit systemd service unit file is installed
copy:
src: fluent-bit.service
dest: /etc/systemd/system/fluent-bit.service
owner: root
group: root
mode: u=rw,go=r
notify:
- reload systemd
- restart fluent-bit
tags:
- systemd
- name: ensure fluent-bit starts at boot
service:
name: fluent-bit
enabled: true
tags:
- service
- name: flush handlers
meta: flush_handlers
- name: ensure fluent-bit is running
service:
name: fluent-bit
state: started
tags:
- service