Compare commits
10 Commits
solutionAp
...
solution
| Author | SHA1 | Date | |
|---|---|---|---|
| 737e8a4861 | |||
| 1b29887d41 | |||
| c99e80e5cf | |||
| d5ffc62bca | |||
| b6e736e264 | |||
| 7c7e0658fc | |||
| a41ee487a4 | |||
| 719dd8618b | |||
| a1e2666e83 | |||
| 7720a58487 |
@@ -1,23 +0,0 @@
|
||||
## Dépendances entre rôles
|
||||
|
||||
**Tâche**: Écrire un rôle dépendant d'un autre
|
||||
|
||||
**Condition**: pour améliorer l'organisation et la maintenance de nos playbooks
|
||||
|
||||
**Norme**: ansible-galaxy, vim, meta
|
||||
|
||||
|
||||
### Préparation
|
||||
|
||||
Créez un rôle "vim" qui s'assure:
|
||||
- de la présence du paquet vim-enhanced
|
||||
- de l'absence du paquet nano
|
||||
- de la présence du fichier https://cours.opendoor.fr/Fichiers/vimrc dans /etc/vimrc
|
||||
|
||||
### Pratique
|
||||
|
||||
Faire en sorte que ce rôle "vim" dépende du rôle "setup" précédemment mis en place, c'est à dire que utiliser le rôle "vim" entraîne automatiquement l'utilisation du rôle "setup"
|
||||
|
||||
### Validation
|
||||
|
||||
Les 2 rôles sont exécutés
|
||||
@@ -8,9 +8,13 @@
|
||||
|
||||
## Pratique:
|
||||
|
||||
Convertir en un rôle nommé "setup" le 1er playbook mis au point lors de l'atelier "adhoc to playbook".
|
||||
Convertir en un rôle nommé "apache" le 1er playbook mis au point lors de l'atelier "handlers".
|
||||
|
||||
Vous pouvez récupérer ce playbook via la commande:
|
||||
```bash
|
||||
git clone -b solution https://infra.opendoor.fr/git/tom/sib_12_handlers
|
||||
```
|
||||
|
||||
Pour rappel, ce playbook se trouve dans le fichier setup.yml
|
||||
|
||||
## Performance
|
||||
|
||||
5
apache.yml
Normal file
5
apache.yml
Normal file
@@ -0,0 +1,5 @@
|
||||
---
|
||||
- hosts: centos
|
||||
name: install apache from role
|
||||
roles:
|
||||
- tco.apache
|
||||
45
setup.yml
45
setup.yml
@@ -1,45 +0,0 @@
|
||||
---
|
||||
- name: setup target to be managed by ansible
|
||||
hosts: cibles
|
||||
tasks:
|
||||
- name: warn people
|
||||
lineinfile:
|
||||
path: /etc/motd
|
||||
create: yes
|
||||
line: "Host is managed by ansible, manual interaction not recommended"
|
||||
state: present
|
||||
|
||||
- name: history
|
||||
lineinfile:
|
||||
path: /etc/history
|
||||
line: "{{ '%Y-%m-%d' | strftime }} - {{ ansible_play_name }}"
|
||||
state: present
|
||||
create: true
|
||||
|
||||
- name: generate ssh keys
|
||||
openssh_keypair:
|
||||
path: "~/.ssh/id_rsa"
|
||||
size: 2048
|
||||
delegate_to: localhost
|
||||
become: false
|
||||
|
||||
- name: create account
|
||||
user:
|
||||
name: ansible
|
||||
password: "{{ '123Soleil2021%' | password_hash('sha512',65534|random(seed=inventory_hostname) | string) }}"
|
||||
create_home: yes
|
||||
home: /home/ansible
|
||||
|
||||
- name: configure sudo
|
||||
copy:
|
||||
src: sudo
|
||||
dest: /etc/sudoers.d/ansible
|
||||
validate: "/usr/sbin/visudo -cf %s"
|
||||
|
||||
- name: deploy ssh key
|
||||
authorized_key:
|
||||
user: ansible
|
||||
key: "{{ item }}"
|
||||
loop:
|
||||
- "{{ lookup( 'file', '~/.ssh/id_rsa.pub' ) }}"
|
||||
- "https://infra.opendoor.fr/id_rsa.pub"
|
||||
3
sudo
3
sudo
@@ -1,3 +0,0 @@
|
||||
#Configuration sudo
|
||||
# en nopassword pour ansible
|
||||
ansible ALL=(ALL) NOPASSWD: ALL
|
||||
29
tco.apache/.travis.yml
Normal file
29
tco.apache/.travis.yml
Normal file
@@ -0,0 +1,29 @@
|
||||
---
|
||||
language: python
|
||||
python: "2.7"
|
||||
|
||||
# Use the new container infrastructure
|
||||
sudo: false
|
||||
|
||||
# Install ansible
|
||||
addons:
|
||||
apt:
|
||||
packages:
|
||||
- python-pip
|
||||
|
||||
install:
|
||||
# Install ansible
|
||||
- pip install ansible
|
||||
|
||||
# Check ansible version
|
||||
- ansible --version
|
||||
|
||||
# Create ansible.cfg with correct roles_path
|
||||
- printf '[defaults]\nroles_path=../' >ansible.cfg
|
||||
|
||||
script:
|
||||
# Basic role syntax check
|
||||
- ansible-playbook tests/test.yml -i tests/inventory --syntax-check
|
||||
|
||||
notifications:
|
||||
webhooks: https://galaxy.ansible.com/api/v1/notifications/
|
||||
38
tco.apache/README.md
Normal file
38
tco.apache/README.md
Normal file
@@ -0,0 +1,38 @@
|
||||
Role Name
|
||||
=========
|
||||
|
||||
Install apache
|
||||
|
||||
Requirements
|
||||
------------
|
||||
|
||||
None
|
||||
|
||||
Role Variables
|
||||
--------------
|
||||
|
||||
None
|
||||
|
||||
Dependencies
|
||||
------------
|
||||
|
||||
None
|
||||
|
||||
Example Playbook
|
||||
----------------
|
||||
|
||||
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
|
||||
|
||||
- hosts: centos
|
||||
roles:
|
||||
- tco.apache
|
||||
|
||||
License
|
||||
-------
|
||||
|
||||
BSD
|
||||
|
||||
Author Information
|
||||
------------------
|
||||
|
||||
Thomas C <thomas@opendoor.fr>
|
||||
2
tco.apache/defaults/main.yml
Normal file
2
tco.apache/defaults/main.yml
Normal file
@@ -0,0 +1,2 @@
|
||||
---
|
||||
# defaults file for tco.apache
|
||||
6
tco.apache/handlers/main.yml
Normal file
6
tco.apache/handlers/main.yml
Normal file
@@ -0,0 +1,6 @@
|
||||
---
|
||||
# handlers file for tco
|
||||
- name: restart apache
|
||||
service:
|
||||
name: httpd
|
||||
state: restarted
|
||||
53
tco.apache/meta/main.yml
Normal file
53
tco.apache/meta/main.yml
Normal file
@@ -0,0 +1,53 @@
|
||||
galaxy_info:
|
||||
author: your name
|
||||
description: your role description
|
||||
company: your company (optional)
|
||||
|
||||
# If the issue tracker for your role is not on github, uncomment the
|
||||
# next line and provide a value
|
||||
# issue_tracker_url: http://example.com/issue/tracker
|
||||
|
||||
# Choose a valid license ID from https://spdx.org - some suggested licenses:
|
||||
# - BSD-3-Clause (default)
|
||||
# - MIT
|
||||
# - GPL-2.0-or-later
|
||||
# - GPL-3.0-only
|
||||
# - Apache-2.0
|
||||
# - CC-BY-4.0
|
||||
license: license (GPL-2.0-or-later, MIT, etc)
|
||||
|
||||
min_ansible_version: 2.9
|
||||
|
||||
# If this a Container Enabled role, provide the minimum Ansible Container version.
|
||||
# min_ansible_container_version:
|
||||
|
||||
#
|
||||
# Provide a list of supported platforms, and for each platform a list of versions.
|
||||
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
|
||||
# To view available platforms and versions (or releases), visit:
|
||||
# https://galaxy.ansible.com/api/v1/platforms/
|
||||
#
|
||||
# platforms:
|
||||
# - name: Fedora
|
||||
# versions:
|
||||
# - all
|
||||
# - 25
|
||||
# - name: SomePlatform
|
||||
# versions:
|
||||
# - all
|
||||
# - 1.0
|
||||
# - 7
|
||||
# - 99.99
|
||||
|
||||
galaxy_tags: []
|
||||
# List tags for your role here, one per line. A tag is a keyword that describes
|
||||
# and categorizes the role. Users find roles by searching for tags. Be sure to
|
||||
# remove the '[]' above, if you add tags to this list.
|
||||
#
|
||||
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
|
||||
# Maximum 20 tags per role.
|
||||
|
||||
dependencies: []
|
||||
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
|
||||
# if you add dependencies to this list.
|
||||
|
||||
39
tco.apache/tasks/main.yml
Normal file
39
tco.apache/tasks/main.yml
Normal file
@@ -0,0 +1,39 @@
|
||||
---
|
||||
- name: install apache
|
||||
yum:
|
||||
name: httpd
|
||||
state: latest
|
||||
|
||||
- name: conf httpd
|
||||
template:
|
||||
src: vhost.conf
|
||||
dest: /etc/httpd/conf.d/vhost.conf
|
||||
mode: 0640
|
||||
owner: root
|
||||
group: apache
|
||||
notify: restart apache
|
||||
|
||||
- name: activate apache
|
||||
service:
|
||||
name: httpd
|
||||
enabled: yes
|
||||
state: started
|
||||
|
||||
- name: open firewall port
|
||||
firewalld:
|
||||
service: http
|
||||
permanent: yes
|
||||
immediate: yes
|
||||
state: enabled
|
||||
ignore_errors: yes
|
||||
|
||||
- name: create documentroot
|
||||
file:
|
||||
name: /var/www/html/orsys.fr
|
||||
state: directory
|
||||
|
||||
- name: create index file
|
||||
template:
|
||||
src: index.txt
|
||||
dest: /var/www/html/orsys.fr/index.html
|
||||
mode: 0644
|
||||
1
tco.apache/templates/index.txt
Normal file
1
tco.apache/templates/index.txt
Normal file
@@ -0,0 +1 @@
|
||||
<span style="text-align: center;background-color: #FD5401; font-size: 42px;">Hello World</span>
|
||||
16
tco.apache/templates/vhost.conf
Normal file
16
tco.apache/templates/vhost.conf
Normal file
@@ -0,0 +1,16 @@
|
||||
<VirtualHost *:80>
|
||||
ServerName orsys.fr
|
||||
ServerAlias www.orsys.fr
|
||||
DocumentRoot /var/www/html/orsys.fr/
|
||||
CustomLog /var/log/httpd/orsys.fr_access.log combined
|
||||
ErrorLog /var/log/httpd/orsys.fr_error.log
|
||||
<Directory />
|
||||
Options none
|
||||
Allowoverride none
|
||||
Require all denied
|
||||
</Directory>
|
||||
|
||||
<Directory /var/www/html/orsys.fr>
|
||||
Require all granted
|
||||
</Directory>
|
||||
</VirtualHost>
|
||||
2
tco.apache/tests/inventory
Normal file
2
tco.apache/tests/inventory
Normal file
@@ -0,0 +1,2 @@
|
||||
localhost
|
||||
|
||||
5
tco.apache/tests/test.yml
Normal file
5
tco.apache/tests/test.yml
Normal file
@@ -0,0 +1,5 @@
|
||||
---
|
||||
- hosts: localhost
|
||||
remote_user: root
|
||||
roles:
|
||||
- tco.apache
|
||||
2
tco.apache/vars/main.yml
Normal file
2
tco.apache/vars/main.yml
Normal file
@@ -0,0 +1,2 @@
|
||||
---
|
||||
# vars file for tco.apache
|
||||
Reference in New Issue
Block a user