Skip to content
Snippets Groups Projects
Commit a93bc90a authored by nimrod's avatar nimrod
Browse files

Merge branch 'master' of /home/nimrod/Documents/Shore/Ansible/example

# Conflicts:
#	README.rst
#	defaults/main.yml
#	handlers/main.yml
#	molecule.yml
#	tasks/main.yml
#	tests/playbook.yml
#	vars/main.yml
parents 53779386 d118eae4
No related branches found
No related tags found
No related merge requests found
...@@ -8,7 +8,7 @@ ...@@ -8,7 +8,7 @@
- id: check-merge-conflict - id: check-merge-conflict
- id: flake8 - id: flake8
- id: check-symlinks - id: check-symlinks
- repo: https://www.shore.co.il/git/ansible-pre-commit - repo: https://github.com/adarnimrod/ansible-pre-commit.git
sha: 0fadd691465b97db8992cfc66650f630e433324b sha: 0fadd691465b97db8992cfc66650f630e433324b
hooks: hooks:
- id: ansible-syntax-check - id: ansible-syntax-check
......
---
language: python
python: "2.7"
dist: trusty
sudo: false
group: beta
services: [docker]
cache:
- pip
- directories:
- $HOME/.pre-commit
install:
- pip install -r tests/requirements.txt | cat
- ansible-galaxy install git+file://$(pwd),$(git rev-parse --abbrev-ref HEAD) -p .molecule/roles
- molecule dependency
script:
- pre-commit run --all-files
- molecule test --driver docker
notifications:
webhooks: https://galaxy.ansible.com/api/v1/notifications/
email: false
UFW UFW
### ###
.. image:: https://travis-ci.org/adarnimrod/ufw.svg?branch=master
:target: https://travis-ci.org/adarnimrod/ufw
Install UFW, set default policy and allow but limit ssh traffic. Install UFW, set default policy and allow but limit ssh traffic.
Requirements Requirements
------------ ------------
See :code:`meta/main.yml`, :code:`tests/requirements.yml` and assertions at See :code:`meta/main.yml` and assertions at the top of :code:`tasks/main.yml`.
the top of :code:`tasks/main.yml`.
Role Variables Role Variables
-------------- --------------
...@@ -27,21 +29,22 @@ See :code:`tests/playbook.yml`. ...@@ -27,21 +29,22 @@ See :code:`tests/playbook.yml`.
Testing Testing
------- -------
Testing requires Virtualbox and Vagrant and Python 2.7. Install the Python Testing requires Python 2.7 and either Docker or Vagrant and Virtualbox.
dependencies, add pre-commit hooks by running: Install the Python dependencies, dependent roles and roles required for
testing:
.. code:: shell .. code:: shell
pip install -r tests/requirements.txt pip install -r tests/requirements.txt
pre-commit install ansible-galaxy install git+file://$(pwd),$(git rev-parse --abbrev-ref HEAD) -p .molecule/roles
molecule dependency
To run the full test suite: To run the full test suite:
.. code:: shell .. code:: shell
ansible-galaxy install git+file://$(pwd),$(git rev-parse --abbrev-ref HEAD) -p .molecule/roles
molecule test --platform all
pre-commit run --all-files pre-commit run --all-files
molecule test --platform all
License License
------- -------
......
...@@ -5,6 +5,7 @@ retry_files_enabled = False ...@@ -5,6 +5,7 @@ retry_files_enabled = False
roles_path = .molecule/roles:.molecule/../roles:../:../../ roles_path = .molecule/roles:.molecule/../roles:../:../../
command_warnings = True command_warnings = True
deprecation_warnings = True deprecation_warnings = True
callback_whitelist = profile_tasks
[ssh_connection] [ssh_connection]
pipelining = True pipelining = True
--- ---
# defaults file for ansible-role-ufw # defaults file for ufw
ufw_policy: reject # Default policy, check ufw module for options. ufw_policy: reject # Default policy, check ufw module for options.
--- ---
# handlers file for ansible-role-ufw # handlers file for ufw
...@@ -5,6 +5,10 @@ ansible: ...@@ -5,6 +5,10 @@ ansible:
diff: True diff: True
config_file: ../ansible.cfg config_file: ../ansible.cfg
dependency:
name: galaxy
requirements_file: tests/requirements.yml
vagrant: vagrant:
providers: providers:
- name: virtualbox - name: virtualbox
...@@ -13,7 +17,7 @@ vagrant: ...@@ -13,7 +17,7 @@ vagrant:
- name: debian - name: debian
box: debian/jessie64 box: debian/jessie64
instances: instances:
- name: ansible-role-ufw - name: ufw
options: options:
append_platform_to_hostname: yes append_platform_to_hostname: yes
raw_config_args: raw_config_args:
...@@ -21,3 +25,17 @@ vagrant: ...@@ -21,3 +25,17 @@ vagrant:
- 'vbguest.auto_update = false' - 'vbguest.auto_update = false'
- 'landrush.enabled = false' - 'landrush.enabled = false'
- 'landrush_ip.override = false' - 'landrush_ip.override = false'
docker:
containers:
- name: ufw-jessie
image: debian
image_version: jessie
command: /sbin/init
privileged: True
volume_mounts:
- /sys/fs/cgroup:/sys/fs/cgroup
- /var/run/dbus/system_bus_socket:/var/run/dbus/system_bus_socket
environment:
DEBIAN_FRONTEND: noninteractive
container: docker
--- ---
# tasks file for ansible-role-ufw # tasks file for ufw
- name: Assertions - name: Assertions
assert: assert:
that: ansible_pkg_mgr == 'apt' that: ansible_pkg_mgr == 'apt'
......
--- ---
- hosts: ufw-xenial
gather_facts: false
roles: [adarnimrod.debian-bootstrap]
- hosts: all - hosts: all
strategy: free
roles: roles:
- role: ansible-role-ufw - role: ufw
ansible==2.2.0.0 ansible==2.2.0.0
testinfra==1.4.3 testinfra==1.4.5
molecule==1.13.0 molecule==1.16.1
ansible-lint==3.4.4 ansible-lint==3.4.8
pre-commit==0.9.3 pre-commit==0.9.4
piprot==0.9.7 piprot==0.9.7
python-vagrant==0.5.14
docker-py==1.10.6
--- ---
- src: https://www.shore.co.il/git/ansible-role-openbsd-bootstrap - src: adarnimrod.openbsd-bootstrap
scm: git - src: adarnimrod.debian-bootstrap
name: openbsd_bootstrap
- src: https://www.shore.co.il/git/ansible-role-debian-bootstrap
scm: git
name: debian_bootstrap
from testinfra.utils.ansible_runner import AnsibleRunner
testinfra_hosts = AnsibleRunner('.molecule/ansible_inventory').get_hosts('all')
def test_example(Command): def test_example(Command):
assert Command('uname').rc == 0 assert Command('uname').rc == 0
def test_root(Command, Sudo): def test_root(Command, Sudo):
with Sudo(): with Sudo():
assert Command('whoami').stdout == 'root' assert Command('whoami').stdout.strip() == 'root'
from testinfra.utils.ansible_runner import AnsibleRunner
testinfra_hosts = AnsibleRunner('.molecule/ansible_inventory').get_hosts('all')
def test_ufw(Command): def test_ufw(Command):
assert 'Status: active' in Command('ufw status').stdout assert 'Status: active' in Command('ufw status').stdout
--- ---
# vars file for ansible-role-ufw # vars file for ufw
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment