ansible-middleware.keycloak/roles/keycloak/tasks/systemd.yml

---
- name: "Configure service script wrapper: {{ keycloak_config.service_name }}"
  become: "{{ keycloak_systemd_require_privilege_escalation | default(true) }}"
  ansible.builtin.template:
    src: keycloak-service.sh.j2
    dest: "{{ keycloak_dest }}/keycloak-service.sh"
    owner: root
    group: root
    mode: '0755'
  notify:
    - restart keycloak

- name: "Configure sysconfig file for service: {{ keycloak_config.service_name }}"
  become: "{{ keycloak_systemd_require_privilege_escalation | default(true) }}"
  ansible.builtin.template:
    src: keycloak-sysconfig.j2
    dest: "{{ keycloak_sysconf_file }}"
    owner: root
    group: root
    mode: '0644'
  notify:
    - restart keycloak

- name: "Configure systemd unit file for service: {{ keycloak_config.service_name }}"
  ansible.builtin.template:
    src: keycloak.service.j2
    dest: /etc/systemd/system/keycloak.service
    owner: root
    group: root
    mode: '0644'
  become: "{{ keycloak_systemd_require_privilege_escalation | default(true) }}"
  register: keycloak_systemdunit
  notify:
    - restart keycloak

- name: "Start and wait for service (first node db): {{ keycloak_config.service_name }}"
  ansible.builtin.include_tasks: start_keycloak.yml
  run_once: true
  when: keycloak_db_enabled

- name: "Start and wait for service (remaining nodes): {{ keycloak_config.service_name }}"
  ansible.builtin.include_tasks: start_keycloak.yml

- name: Check service status
  ansible.builtin.command: "systemctl status keycloak"
  register: keycloak_service_status
  changed_when: false

- name: Verify service status
  ansible.builtin.assert:
    that:
      - keycloak_service_status is defined
      - keycloak_service_status.stdout is defined

- name: Flush handlers
  ansible.builtin.meta: flush_handlers