Initial commit of Gerrit ansible role

Change-Id: Id425e46f9e5eb83ca9d8aad0cd9b8ba491c6433c
diff --git a/tasks/Debian.yml b/tasks/Debian.yml
new file mode 100644
index 0000000..60111a9
--- /dev/null
+++ b/tasks/Debian.yml
@@ -0,0 +1,21 @@
+---
+# gerrit tasks/Debian.yml
+#
+# SPDX-FileCopyrightText: © 2020 Open Networking Foundation <support@opennetworking.org>
+# SPDX-License-Identifier: Apache-2.0
+
+- name: Create environment config for Gerrit service
+  template:
+    src: "default.gerritcodereview.j2"
+    dest: "/etc/default/gerritcodereview"
+    owner: "root"
+    group: "root"
+    mode: "0644"
+
+- name: Create systemd service unit file for Gerrit
+  template:
+    src: "gerrit.service.j2"
+    dest: "/etc/systemd/system/gerrit.service"
+    owner: "root"
+    group: "root"
+    mode: "0644"
diff --git a/tasks/main.yml b/tasks/main.yml
new file mode 100644
index 0000000..d8d7f91
--- /dev/null
+++ b/tasks/main.yml
@@ -0,0 +1,43 @@
+---
+# gerrit tasks/main.yml
+#
+# SPDX-FileCopyrightText: © 2020 Open Networking Foundation <support@opennetworking.org>
+# SPDX-License-Identifier: Apache-2.0
+
+- name: include OS-specific vars
+  include_vars: "{{ ansible_os_family }}.yml"
+
+- name: include OS-specific tasks
+  include_tasks: "{{ ansible_os_family }}.yml"
+
+- name: Create group for gerrit
+  group:
+    name: "{{ gerrit_groupname }}"
+
+- name: Create user for gerrit
+  user:
+    name: "{{ gerrit_username }}"
+    group: "{{ gerrit_groupname }}"
+    comment: "{{ gerrit_comment }}"
+    shell: "{{ gerrit_shell }}"
+    home: "{{ gerrit_home_dir }}"
+    create_home: no  # yamllint disable-line rule:truthy
+    password_lock: true
+
+- name: Create gerrit home dir
+  file:
+    path: "{{ gerrit_home_dir }}"
+    state: directory
+    owner: "{{ gerrit_username }}"
+    group: "{{ gerrit_groupname }}"
+    mode: "0750"
+
+- name: Create gerrit data dir
+  file:
+    path: "{{ gerrit_data_dir }}"
+    state: directory
+    owner: "{{ gerrit_username }}"
+    group: "{{ gerrit_groupname }}"
+    mode: "0750"
+
+# rest of install is manual, but could be automated...