Integrate Notarius extraction into the D&D pipeline

tasks/main.yml

@@ -7,6 +7,15 @@
     update_cache: true
     cache_valid_time: 3600
 
+- name: Create the Notarius cache root
+  become: true
+  ansible.builtin.file:
+    path: "{{ dnd_pipeline_notarius_cache_root }}"
+    state: directory
+    owner: "{{ dnd_pipeline_runtime_user }}"
+    group: "{{ dnd_pipeline_runtime_group }}"
+    mode: "2775"
+
 - name: Converge access ACLs on Narratio writable roots
   become: true
   ansible.posix.acl:
@@ -16,7 +25,7 @@
     state: present
   loop: >-
     {{
-      ['/var/lib/narratio', '/var/spool/narratio', '/var/cache/narratio'] |
+      ['/var/lib/narratio', '/var/spool/narratio', '/var/cache/narratio', dnd_pipeline_notarius_cache_root] |
       product([
         {'etype': 'user', 'permissions': 'rwx'},
         {'etype': 'group', 'permissions': 'rwx'},
@@ -37,7 +46,7 @@
     state: present
   loop: >-
     {{
-      ['/var/lib/narratio', '/var/spool/narratio', '/var/cache/narratio'] |
+      ['/var/lib/narratio', '/var/spool/narratio', '/var/cache/narratio', dnd_pipeline_notarius_cache_root] |
       product([
         {'etype': 'user', 'permissions': 'rwx'},
         {'etype': 'group', 'permissions': 'rwx'},
@@ -89,6 +98,24 @@
     - artifact-families
     - profiles
 
+- name: Create the Notarius pipeline configuration directory
+  become: true
+  ansible.builtin.file:
+    path: /usr/local/etc/notarius/pipelines
+    state: directory
+    owner: "{{ dnd_pipeline_runtime_user }}"
+    group: "{{ dnd_pipeline_runtime_group }}"
+    mode: "{{ dnd_pipeline_config_directory_mode }}"
+
+- name: Deploy the Notarius D&D pipeline configuration
+  become: true
+  ansible.builtin.template:
+    src: dnd-session.yml.j2
+    dest: /usr/local/etc/notarius/pipelines/dnd-session.yml
+    owner: "{{ dnd_pipeline_runtime_user }}"
+    group: "{{ dnd_pipeline_runtime_group }}"
+    mode: "{{ dnd_pipeline_config_file_mode }}"
+
 - name: Deploy Narratio D&D configuration fragments
   become: true
   ansible.builtin.template: