Requirements¶
Warning
ESGF-Ansible is completely separate from the legacy 2.x ESGF-Installer. The tools provided by ESGF-Installer are, in general, incompatible with ESGF-Ansible and should not be used in cooperation with ESGF-Ansible. The FAQ page describes how to upgrade a node from the legacy installer using ESGF-Ansible, after which point the legacy tools should no longer be used.
System¶
Here is a summary of the system requirements, see Ansible Installation for more information.
| Control Machine | Managed Machine | |
|---|---|---|
| OS | Any, Not Windows | CentOS 6/7 |
| Python | >=2.7 | 2 (CentOS 6/7 has 2.6/7) |
| Ansible | 2.7 | None |
| Other | SSH to Managed Machine | Account with escalated privileges |
SSL Certificates¶
To anyone new to ESGF and/or Web-based service deployments, running services in HTTPS is a must,
and this requires SSL certificates recognized by current browsers and other http(s) clients, eg. wget, curl, Python requests.
If you haven’t already, please check with your organization to see if you have already purchased certificates from a vendor.
If not, purchase one for your targeted ESGF Node server. Free certificates can be obtained from LetsEncrypt.
See the Web Certificate Section within this site for more information.
Firewall¶
By default the firewall for a machine will not be configured. Users may set the following, applicable, variable and ESGF-Ansible will take steps to configure the firewall:
configure_centos6_iptables: true
# or
configure_centos7_firewalld: true
See the Host Variables Configuration Section for links to info about these variables.
The required open ports for each node type are as follows, for the default configuration:
| Type | Ports |
|---|---|
| Data | 80, 443, 50000:51000, 2811 |
| IDP | 80, 443, 7512 |
| Index | 80, 443 |