mise au point

1dependances.md

@@ -1,23 +0,0 @@
-## Dépendances entre rôles
-
-**Tâche**: Écrire un rôle dépendant d'un autre
-
-**Condition**: pour améliorer l'organisation et la maintenance de nos playbooks
-
-**Norme**: ansible-galaxy, vim, meta
-
-
-### Préparation
-
-Créez un rôle "vim" qui s'assure:
-  - de la présence du paquet vim-enhanced
-  - de l'absence du paquet nano
-  - de la présence du fichier https://cours.opendoor.fr/Fichiers/vimrc dans /etc/vimrc
-
-### Pratique
-
-Faire en sorte que ce rôle "vim" dépende du rôle "setup" précédemment mis en place, c'est à dire que utiliser le rôle "vim" entraîne automatiquement l'utilisation du rôle "setup"
-
-### Validation
-
-Les 2 rôles sont exécutés

Readme.md

@@ -8,9 +8,13 @@
 
 ## Pratique:
 
-Convertir en un rôle nommé "setup" le 1er playbook mis au point lors de l'atelier "adhoc to playbook".
+Convertir en un rôle nommé "apache" le 1er playbook mis au point lors de l'atelier "handlers".
+
+Vous pouvez récupérer ce playbook via la commande:
+```bash
+git clone -b solution https://infra.opendoor.fr/git/tom/sib_12_handlers
+```
 
-Pour rappel, ce playbook se trouve dans le fichier setup.yml
 
 ## Performance
 

apache.yml

@@ -0,0 +1,5 @@
+---
+- hosts: centos
+  name: install apache from role
+  roles:
+  - tco.apache

setup.yml

@@ -1,45 +0,0 @@
----
-- name: setup target to be managed by ansible
-  hosts: cibles
-  tasks:
-  - name: warn people
-    lineinfile:
-      path: /etc/motd
-      create: yes
-      line: "Host is managed by ansible, manual interaction not recommended"
-      state: present
-
-  - name: history
-    lineinfile:
-      path: /etc/history
-      line: "{{ '%Y-%m-%d' | strftime }} - {{ ansible_play_name }}"
-      state: present
-      create: true
-
-  - name: generate ssh keys
-    openssh_keypair:
-      path: "~/.ssh/id_rsa"
-      size: 2048
-    delegate_to: localhost
-    become: false
-
-  - name: create account
-    user:
-      name: ansible
-      password: "{{ '123Soleil2021%' | password_hash('sha512',65534|random(seed=inventory_hostname) | string) }}"
-      create_home: yes
-      home: /home/ansible
-
-  - name: configure sudo
-    copy:
-      src: sudo
-      dest: /etc/sudoers.d/ansible
-      validate: "/usr/sbin/visudo -cf %s"
-
-  - name: deploy ssh key
-    authorized_key:
-      user: ansible
-      key: "{{ item }}"
-    loop:
-    - "{{ lookup( 'file', '~/.ssh/id_rsa.pub' ) }}"
-    - "https://infra.opendoor.fr/id_rsa.pub"

sudo

@@ -1,3 +0,0 @@
-#Configuration sudo
-# en nopassword pour ansible
-ansible ALL=(ALL)      NOPASSWD:  ALL

tco.apache/.travis.yml

@@ -0,0 +1,29 @@
+---
+language: python
+python: "2.7"
+
+# Use the new container infrastructure
+sudo: false
+
+# Install ansible
+addons:
+  apt:
+    packages:
+    - python-pip
+
+install:
+  # Install ansible
+  - pip install ansible
+
+  # Check ansible version
+  - ansible --version
+
+  # Create ansible.cfg with correct roles_path
+  - printf '[defaults]\nroles_path=../' >ansible.cfg
+
+script:
+  # Basic role syntax check
+  - ansible-playbook tests/test.yml -i tests/inventory --syntax-check
+
+notifications:
+  webhooks: https://galaxy.ansible.com/api/v1/notifications/

tco.apache/README.md

@@ -0,0 +1,38 @@
+Role Name
+=========
+
+Install apache
+
+Requirements
+------------
+
+None
+
+Role Variables
+--------------
+
+None
+
+Dependencies
+------------
+
+None
+
+Example Playbook
+----------------
+
+Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
+
+    - hosts: centos
+      roles:
+      - tco.apache
+
+License
+-------
+
+BSD
+
+Author Information
+------------------
+
+Thomas C <thomas@opendoor.fr>

tco.apache/defaults/main.yml

@@ -0,0 +1,2 @@
+---
+# defaults file for tco.apache

tco.apache/handlers/main.yml

@@ -0,0 +1,6 @@
+---
+# handlers file for tco
+- name: restart apache
+  service:
+    name: httpd
+    state: restarted

tco.apache/meta/main.yml

@@ -0,0 +1,53 @@
+galaxy_info:
+  author: your name
+  description: your role description
+  company: your company (optional)
+
+  # If the issue tracker for your role is not on github, uncomment the
+  # next line and provide a value
+  # issue_tracker_url: http://example.com/issue/tracker
+
+  # Choose a valid license ID from https://spdx.org - some suggested licenses:
+  # - BSD-3-Clause (default)
+  # - MIT
+  # - GPL-2.0-or-later
+  # - GPL-3.0-only
+  # - Apache-2.0
+  # - CC-BY-4.0
+  license: license (GPL-2.0-or-later, MIT, etc)
+
+  min_ansible_version: 2.9
+
+  # If this a Container Enabled role, provide the minimum Ansible Container version.
+  # min_ansible_container_version:
+
+  #
+  # Provide a list of supported platforms, and for each platform a list of versions.
+  # If you don't wish to enumerate all versions for a particular platform, use 'all'.
+  # To view available platforms and versions (or releases), visit:
+  # https://galaxy.ansible.com/api/v1/platforms/
+  #
+  # platforms:
+  # - name: Fedora
+  #   versions:
+  #   - all
+  #   - 25
+  # - name: SomePlatform
+  #   versions:
+  #   - all
+  #   - 1.0
+  #   - 7
+  #   - 99.99
+
+  galaxy_tags: []
+    # List tags for your role here, one per line. A tag is a keyword that describes
+    # and categorizes the role. Users find roles by searching for tags. Be sure to
+    # remove the '[]' above, if you add tags to this list.
+    #
+    # NOTE: A tag is limited to a single word comprised of alphanumeric characters.
+    #       Maximum 20 tags per role.
+
+dependencies: []
+  # List your role dependencies here, one per line. Be sure to remove the '[]' above,
+  # if you add dependencies to this list.
+  

tco.apache/tasks/main.yml

@@ -0,0 +1,39 @@
+---
+- name: install apache
+  yum:
+    name: httpd
+    state: latest
+
+- name: conf httpd
+  template:
+    src: vhost.conf
+    dest: /etc/httpd/conf.d/vhost.conf
+    mode: 0640
+    owner: root
+    group: apache
+  notify: restart apache
+
+- name: activate apache
+  service:
+    name: httpd
+    enabled: yes
+    state: started
+
+- name: open firewall port
+  firewalld:
+    service: http
+    permanent: yes
+    immediate: yes
+    state: enabled
+  ignore_errors: yes
+
+- name: create documentroot
+  file:
+    name: /var/www/html/orsys.fr
+    state: directory
+
+- name: create index file
+  template:
+    src: index.txt
+    dest: /var/www/html/orsys.fr/index.html
+    mode: 0644

tco.apache/templates/index.txt

@@ -0,0 +1 @@
+<span style="text-align: center;background-color: #FD5401; font-size: 42px;">Hello World</span>

tco.apache/templates/vhost.conf

@@ -0,0 +1,16 @@
+<VirtualHost *:80>
+       ServerName    orsys.fr
+       ServerAlias   www.orsys.fr
+       DocumentRoot  /var/www/html/orsys.fr/
+       CustomLog     /var/log/httpd/orsys.fr_access.log combined
+       ErrorLog      /var/log/httpd/orsys.fr_error.log
+       <Directory />
+                Options none
+                Allowoverride none
+                Require all denied
+        </Directory>
+
+        <Directory /var/www/html/orsys.fr>
+                Require all granted
+        </Directory>
+</VirtualHost>

tco.apache/tests/inventory

@@ -0,0 +1,2 @@
+localhost
+

tco.apache/tests/test.yml

@@ -0,0 +1,5 @@
+---
+- hosts: localhost
+  remote_user: root
+  roles:
+    - tco.apache

tco.apache/vars/main.yml

@@ -0,0 +1,2 @@
+---
+# vars file for tco.apache