mirror of
https://github.com/ansible-collections/community.general.git
synced 2024-09-14 20:13:21 +02:00
a16164cb72
Backport of important parts of https://github.com/ansible-collections/community.docker/pull/48 to stable-1.
97 lines
3.5 KiB
YAML
97 lines
3.5 KiB
YAML
---
|
|
# Set up first nginx frontend for registry
|
|
- name: Start nginx frontend for registry
|
|
docker_volume:
|
|
name: '{{ docker_registry_container_name_frontend }}'
|
|
state: present
|
|
|
|
- name: Create container for nginx frontend for registry
|
|
docker_container:
|
|
state: stopped
|
|
name: '{{ docker_registry_container_name_frontend }}'
|
|
image: "{{ docker_test_image_registry_nginx }}"
|
|
ports: 5000
|
|
# `links` does not work when using a network. That's why the docker_container task
|
|
# in setup.yml specifies `aliases` so we get the same effect.
|
|
links:
|
|
- '{{ docker_registry_container_name_registry }}:real-registry'
|
|
volumes:
|
|
- '{{ docker_registry_container_name_frontend }}:/etc/nginx/'
|
|
network_mode: '{{ current_container_network_ip | default(omit, true) }}'
|
|
networks: >-
|
|
{{
|
|
[dict([['name', current_container_network_ip]])]
|
|
if current_container_network_ip not in ['', 'bridge'] else omit
|
|
}}
|
|
register: nginx_container
|
|
|
|
- name: Copy static files into volume
|
|
command: docker cp {{ role_path }}/files/{{ item }} {{ docker_registry_container_name_frontend }}:/etc/nginx/{{ item }}
|
|
loop:
|
|
- nginx.conf
|
|
- nginx.htpasswd
|
|
register: can_copy_files
|
|
ignore_errors: yes
|
|
|
|
- when: can_copy_files is not failed
|
|
block:
|
|
|
|
- name: Create private key for frontend certificate
|
|
community.crypto.openssl_privatekey:
|
|
path: '{{ output_dir }}/cert.key'
|
|
type: ECC
|
|
curve: secp256r1
|
|
force: yes
|
|
|
|
- name: Create CSR for frontend certificate
|
|
community.crypto.openssl_csr:
|
|
path: '{{ output_dir }}/cert.csr'
|
|
privatekey_path: '{{ output_dir }}/cert.key'
|
|
subject_alt_name:
|
|
- DNS:test-registry.ansible.com
|
|
|
|
- name: Create frontend certificate
|
|
community.crypto.openssl_certificate:
|
|
path: '{{ output_dir }}/cert.pem'
|
|
csr_path: '{{ output_dir }}/cert.csr'
|
|
privatekey_path: '{{ output_dir }}/cert.key'
|
|
provider: selfsigned
|
|
|
|
- name: Copy dynamic files into volume
|
|
command: docker cp {{ output_dir }}/{{ item }} {{ docker_registry_container_name_frontend }}:/etc/nginx/{{ item }}
|
|
loop:
|
|
- cert.pem
|
|
- cert.key
|
|
|
|
- name: Start nginx frontend for registry
|
|
docker_container:
|
|
name: '{{ docker_registry_container_name_frontend }}'
|
|
state: started
|
|
register: nginx_container
|
|
|
|
- name: Output nginx container network settings
|
|
debug:
|
|
var: nginx_container.container.NetworkSettings
|
|
|
|
- name: Get registry URL
|
|
set_fact:
|
|
# Note that this host/port combination is used by the Docker daemon, that's why `localhost` is appropriate!
|
|
# This host/port combination cannot be used if the tests are running inside a docker container.
|
|
docker_registry_frontend_address: localhost:{{ nginx_container.container.NetworkSettings.Ports['5000/tcp'].0.HostPort }}
|
|
# The following host/port combination can be used from inside the docker container.
|
|
docker_registry_frontend_address_internal: "{{ nginx_container.container.NetworkSettings.Networks[current_container_network_ip].IPAddress if current_container_network_ip else nginx_container.container.NetworkSettings.IPAddress }}:5000"
|
|
|
|
- name: Wait for registry frontend
|
|
uri:
|
|
url: https://{{ docker_registry_frontend_address_internal }}/v2/
|
|
url_username: testuser
|
|
url_password: hunter2
|
|
validate_certs: false
|
|
register: result
|
|
until: result is success
|
|
retries: 5
|
|
delay: 1
|
|
|
|
- set_fact:
|
|
docker_registry_frontend_address: 'n/a'
|
|
when: can_copy_files is failed
|