mirror of
https://github.com/ansible-collections/community.general.git
synced 2024-09-14 20:13:21 +02:00
1ab1f8f62b
Refactor of consul modules (#7826)
* Extract common functionality.
* Refactor duplicated code into module_utils.
* Fixed ansible-test issues.
* Address review comments.
* Revert changes to consul_acl.
It uses deprecated APIs disabled since Consul 1.11 (which is EOL), don't
bother updating the module anymore.
* Remove unused code.
* Merge token into default doc fragment.
* JSON all the way down.
* extract validation tests into custom file and prep for requests removal.
* Removed dependency on requests.
* Initial test for consul_kv.
* fixup license headers.
* Revert changes to consul.py since it utilizes python-consul.
* Disable the lookup test for now.
* Fix python 2.7 support.
* Address review comments.
* Address review comments.
* Addec changelog fragment.
* Mark ConsulModule as private.
(cherry picked from commit 44679e71a2)
Co-authored-by: Florian Apolloner <florian@apolloner.eu>
100 lines
No EOL
3.7 KiB
YAML
100 lines
No EOL
3.7 KiB
YAML
---
|
|
####################################################################
|
|
# WARNING: These are designed specifically for Ansible tests #
|
|
# and should not be used as examples of how to write Ansible roles #
|
|
####################################################################
|
|
|
|
# Copyright (c) Ansible Project
|
|
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
|
|
# SPDX-License-Identifier: GPL-3.0-or-later
|
|
|
|
- name: Install Consul and test
|
|
vars:
|
|
consul_version: 1.13.2
|
|
consul_uri: https://releases.hashicorp.com/consul/{{ consul_version }}/consul_{{ consul_version }}_{{ ansible_system | lower }}_{{ consul_arch }}.zip
|
|
consul_cmd: '{{ remote_tmp_dir }}/consul'
|
|
block:
|
|
- name: Install requests<2.20 (CentOS/RHEL 6)
|
|
pip:
|
|
name: requests<2.20
|
|
extra_args: "-c {{ remote_constraints }}"
|
|
register: result
|
|
until: result is success
|
|
when: ansible_distribution_file_variety|default() == 'RedHat' and ansible_distribution_major_version is version('6', '<=')
|
|
- name: Install python-consul
|
|
pip:
|
|
name: python-consul
|
|
extra_args: "-c {{ remote_constraints }}"
|
|
register: result
|
|
until: result is success
|
|
- name: Generate privatekey
|
|
community.crypto.openssl_privatekey:
|
|
path: '{{ remote_tmp_dir }}/privatekey.pem'
|
|
- name: Generate CSR
|
|
community.crypto.openssl_csr:
|
|
path: '{{ remote_tmp_dir }}/csr.csr'
|
|
privatekey_path: '{{ remote_tmp_dir }}/privatekey.pem'
|
|
subject:
|
|
commonName: localhost
|
|
- name: Generate selfsigned certificate
|
|
register: selfsigned_certificate
|
|
community.crypto.x509_certificate:
|
|
path: '{{ remote_tmp_dir }}/cert.pem'
|
|
csr_path: '{{ remote_tmp_dir }}/csr.csr'
|
|
privatekey_path: '{{ remote_tmp_dir }}/privatekey.pem'
|
|
provider: selfsigned
|
|
selfsigned_digest: sha256
|
|
- name: Install unzip
|
|
package:
|
|
name: unzip
|
|
register: result
|
|
until: result is success
|
|
when: ansible_distribution != "MacOSX"
|
|
- assert:
|
|
that: ansible_architecture in ['i386', 'x86_64', 'amd64']
|
|
- set_fact:
|
|
consul_arch: '386'
|
|
when: ansible_architecture == 'i386'
|
|
- set_fact:
|
|
consul_arch: amd64
|
|
when: ansible_architecture in ['x86_64', 'amd64']
|
|
- name: Download consul binary
|
|
unarchive:
|
|
src: '{{ consul_uri }}'
|
|
dest: '{{ remote_tmp_dir }}'
|
|
remote_src: true
|
|
register: result
|
|
until: result is success
|
|
- vars:
|
|
remote_dir: '{{ echo_remote_tmp_dir.stdout }}'
|
|
block:
|
|
- command: echo {{ remote_tmp_dir }}
|
|
register: echo_remote_tmp_dir
|
|
- name: Create configuration file
|
|
template:
|
|
src: consul_config.hcl.j2
|
|
dest: '{{ remote_tmp_dir }}/consul_config.hcl'
|
|
- name: Start Consul (dev mode enabled)
|
|
shell: nohup {{ consul_cmd }} agent -dev -config-file {{ remote_tmp_dir }}/consul_config.hcl </dev/null >/dev/null 2>&1 &
|
|
- name: Bootstrap ACL
|
|
command: '{{ consul_cmd }} acl bootstrap --format=json'
|
|
register: consul_bootstrap_result_string
|
|
- set_fact:
|
|
consul_management_token: '{{ consul_bootstrap_json_result["SecretID"] }}'
|
|
vars:
|
|
consul_bootstrap_json_result: '{{ consul_bootstrap_result_string.stdout | from_json }}'
|
|
- name: Create some data
|
|
command: '{{ consul_cmd }} kv put -token={{consul_management_token}} data/value{{ item }} foo{{ item }}'
|
|
loop:
|
|
- 1
|
|
- 2
|
|
- 3
|
|
- import_tasks: consul_general.yml
|
|
- import_tasks: consul_kv.yml
|
|
- import_tasks: consul_session.yml
|
|
- import_tasks: consul_policy.yml
|
|
- import_tasks: consul_role.yml
|
|
always:
|
|
- name: Kill consul process
|
|
shell: kill $(cat {{ remote_tmp_dir }}/consul.pid)
|
|
ignore_errors: true |