5 Commits
1.1.0 ... main

Author SHA1 Message Date
0ff5777690 add jenkinsfile 2022-09-07 09:57:41 +07:00
2ae95ca237 fix rolename for molecule: use lookup 2022-09-01 10:34:22 +07:00
04c08eee95 fix yamllint errors 2022-08-31 10:30:58 +07:00
f9c16ebd0f fix yamllint errors 2022-08-31 10:29:07 +07:00
a90af00f5a add new molecule scenario, add tox config 2022-08-08 10:20:43 +07:00
14 changed files with 144 additions and 13 deletions

1
.gitignore vendored
View File

@@ -1 +1,2 @@
/.idea /.idea
/.tox

20
Jenkinsfile vendored Normal file
View File

@@ -0,0 +1,20 @@
pipeline {
agent any
stages {
stage('checkout') {
steps {
echo 'Hello World'
git credentialsId: '6659caf8-95a2-4201-b6e0-bfe65e71836d',
url: 'git@github.com:Dannecron/netology-devops-ansible-vector.git',
branch: 'main'
}
}
stage('test') {
steps {
echo 'Run molecule test'
sh 'molecule test'
}
}
}
}

View File

@@ -1,5 +1,5 @@
--- ---
- name: restart vector service - name: Restart vector service
become: true become: true
ansible.builtin.service: ansible.builtin.service:
name: vector name: vector

View File

@@ -4,4 +4,4 @@
tasks: tasks:
- name: "Include netology_devops_vector" - name: "Include netology_devops_vector"
ansible.builtin.include_role: ansible.builtin.include_role:
name: "dannc.netology_devops_vector" name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"

View File

@@ -3,7 +3,7 @@
hosts: all hosts: all
gather_facts: false gather_facts: false
tasks: tasks:
- name: ensure vector service started - name: Ensure vector service started
ansible.builtin.service: ansible.builtin.service:
name: vector name: vector
state: started state: started

View File

@@ -0,0 +1,38 @@
{% if item.registry is defined %}
FROM {{ item.registry.url }}/{{ item.image }}
{% else %}
FROM {{ item.image }}
{% endif %}
{% if item.env is defined %}
{% for var, value in item.env.items() %}
{% if value %}
ENV {{ var }} {{ value }}
{% endif %}
{% endfor %}
{% endif %}
RUN if [ $(command -v apt-get) ]; then apt-get update && apt-get upgrade -y && apt-get install -y apt-transport-https gnupg2 python3-minimal python3-apt man systemd systemd-sysv rsyslog sudo bash ca-certificates iproute2 && apt-get clean; \
elif [ $(command -v yum) ]; then sed -i 's/^\(tsflags=*\)/# \1/g' /etc/yum.conf && yum makecache fast && yum upgrade -y && yum makecache fast && yum install -y sudo python3 systemd rsyslog man yum-plugin-ovl bash iproute && sed -i 's/plugins=0/plugins=1/g' /etc/yum.conf && yum clean all; fi
RUN set -xe \
&& groupadd -r ${ANSIBLE_USER} \
&& groupadd -r ${DEPLOY_GROUP} \
&& useradd -m -g ${ANSIBLE_USER} ${ANSIBLE_USER} \
&& usermod -aG ${DEPLOY_GROUP} ${ANSIBLE_USER} \
&& echo "%${DEPLOY_GROUP} ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/ansible
RUN (cd /lib/systemd/system/sysinit.target.wants/; for i in *; do [ $i == \
systemd-tmpfiles-setup.service ] || rm -f $i; done); \
rm -rf /lib/systemd/system/multi-user.target.wants/*;\
rm -rf /etc/systemd/system/*.wants/*;\
rm -rf /lib/systemd/system/local-fs.target.wants/*; \
rm -rf /lib/systemd/system/sockets.target.wants/*udev*; \
rm -rf /lib/systemd/system/sockets.target.wants/*initctl*; \
rm -rf /lib/systemd/system/basic.target.wants/*;\
rm -rf /lib/systemd/system/anaconda.target.wants/*;
VOLUME [ "/sys/fs/cgroup" ]
CMD ["{{ item.command | default('/usr/sbin/init') }}"]

View File

@@ -0,0 +1,7 @@
---
- name: Converge
hosts: all
tasks:
- name: "Include netology_devops_vector"
ansible.builtin.include_role:
name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"

View File

@@ -0,0 +1,35 @@
---
dependency:
name: galaxy
driver:
name: podman
platforms:
- name: centos_7
image: docker.io/library/centos:7
privileged: true
command: /usr/sbin/init
capabilities:
- SYS_ADMIN
tmpfs:
- /run
- /tmp
volumes:
- /sys/fs/cgroup:/sys/fs/cgroup
env:
ANSIBLE_USER: ansible
SUDO_GROUP: wheel
DEPLOY_GROUP: deployer
container: podman
provisioner:
name: ansible
verifier:
name: ansible
scenario:
name: podman
test_sequence:
- lint
- destroy
- create
- converge
- verify
- destroy

View File

@@ -0,0 +1,9 @@
---
- name: Verify
hosts: all
gather_facts: false
tasks:
- name: Ensure vector service started
ansible.builtin.service:
name: vector
state: started

View File

@@ -1,25 +1,25 @@
--- ---
- name: vector | install archive manager - name: Vector | install archive manager
ansible.builtin.include_tasks: ansible.builtin.include_tasks:
file: "pre_install/{{ ansible_pkg_mgr }}.yml" file: "pre_install/{{ ansible_pkg_mgr }}.yml"
- name: vector | get distrib - name: Vector | get distrib
ansible.builtin.get_url: ansible.builtin.get_url:
url: "https://packages.timber.io/vector/{{ vector_version }}/vector-{{ vector_version }}-x86_64-unknown-linux-musl.tar.gz" url: "https://packages.timber.io/vector/{{ vector_version }}/vector-{{ vector_version }}-x86_64-unknown-linux-musl.tar.gz"
dest: "./vector-{{ vector_version }}-x86_64-unknown-linux-musl.tar.gz" dest: "./vector-{{ vector_version }}-x86_64-unknown-linux-musl.tar.gz"
mode: "755" mode: "755"
- name: vector | unpack distrib - name: Vector | unpack distrib
ansible.builtin.unarchive: ansible.builtin.unarchive:
src: "./vector-{{ vector_version }}-x86_64-unknown-linux-musl.tar.gz" src: "./vector-{{ vector_version }}-x86_64-unknown-linux-musl.tar.gz"
dest: "./" dest: "./"
remote_src: true remote_src: true
- name: vector | install - name: Vector | install
become: true become: true
ansible.builtin.copy: ansible.builtin.copy:
src: "vector-x86_64-unknown-linux-musl/bin/vector" src: "vector-x86_64-unknown-linux-musl/bin/vector"
dest: "/usr/local/bin/" dest: "/usr/local/bin/"
remote_src: true remote_src: true
mode: "755" mode: "755"
- name: vector | check installed version - name: Vector | check installed version
ansible.builtin.command: ansible.builtin.command:
cmd: vector --version cmd: vector --version
register: result register: result
@@ -27,7 +27,7 @@
- 'vector_version not in result.stdout' - 'vector_version not in result.stdout'
tags: tags:
- vector_check_version - vector_check_version
- name: vector | create data dir - name: Vector | create data dir
become: true become: true
ansible.builtin.file: ansible.builtin.file:
mode: "755" mode: "755"
@@ -35,12 +35,12 @@
group: "{{ ansible_effective_group_id }}" group: "{{ ansible_effective_group_id }}"
path: "{{ vector_config_dir }}" path: "{{ vector_config_dir }}"
state: "directory" state: "directory"
- name: vector | template config - name: Vector | template config
ansible.builtin.template: ansible.builtin.template:
src: "templates/vector.config.j2" src: "templates/vector.config.j2"
dest: "{{ vector_config_dir }}/vector.yaml" dest: "{{ vector_config_dir }}/vector.yaml"
mode: "755" mode: "755"
- name: vector | register as service - name: Vector | register as service
become: true become: true
ansible.builtin.template: ansible.builtin.template:
src: "templates/vector.service.j2" src: "templates/vector.service.j2"

View File

@@ -1,5 +1,5 @@
--- ---
- name: vector | install archive manager - name: Vector | install archive manager
become: true become: true
ansible.builtin.apt: ansible.builtin.apt:
name: name:

View File

@@ -1,5 +1,5 @@
--- ---
- name: vector | install archive manager - name: Vector | install archive manager
become: true become: true
ansible.builtin.yum: ansible.builtin.yum:
name: name:

7
tox-requirements.txt Normal file
View File

@@ -0,0 +1,7 @@
selinux
ansible-lint==5.1.3
yamllint==1.26.3
lxml
molecule==3.4.0
molecule_podman
jmespath

14
tox.ini Normal file
View File

@@ -0,0 +1,14 @@
[tox]
minversion = 1.8
basepython = python3.6
envlist = py{37,39}-ansible{210,30}
skipsdist = true
[testenv]
passenv = *
deps =
-r tox-requirements.txt
ansible210: ansible<3.0
ansible30: ansible<3.1
commands =
{posargs:molecule test -s podman}