majic-ansible-roles Files · roles/common/molecule/default/playbook.yml

Files @ 814be5def61d

Branch filter:

Location: majic-ansible-roles/roles/common/molecule/default/playbook.yml

814be5def61d 2.0 KiB text/x-yaml Show Annotation Show as Raw Download as Raw

branko

MAR-189: Added support for Debian 11 Bullseye to xmpp_server role:

- Roll-out LDAP client configuration since Bullseye does not come with
a stock one at /etc/ldap/ldap.conf that sets the trust anchor
correctly for validating LDAP server certificates.
- Drop the backports pinning in case of Bullseye (for now let's try to
keep the Buster and Bullseye at same versions for simplicity).
- Drop installation of Python apt bindings (no longer used).
- Tests for Buster and Bullseye need to be split-up a bit due to some
differences around backports etc.

---

- hosts: parameters-mandatory,parameters-optional
  become: true
  roles:
    - common

- hosts: parameters-mandatory,parameters-optional
  become: true
  tasks:

    - name: Set-up directories for testing pip requirements upgrade checks script
      file:
        path: "{{ item }}"
        state: directory
        owner: root
        group: pipreqcheck
        mode: 0750
      with_items:
        - "/tmp/pip_check_requirements_upgrades"
        - "/tmp/pip_check_requirements_upgrades/with_updates"
        - "/tmp/pip_check_requirements_upgrades/without_updates"
        - "/tmp/pip_check_requirements_upgrades-py3"
        - "/tmp/pip_check_requirements_upgrades-py3/with_updates"
        - "/tmp/pip_check_requirements_upgrades-py3/without_updates"

    - name: Deploy files for testing pip requirements upgrade checks script
      copy:
        src: "{{ item }}"
        dest: "/tmp/{{ item }}"
        owner: root
        group: pipreqcheck
        mode: 0640
        directory_mode: 0750
      with_items:
        - "pip_check_requirements_upgrades/with_updates/requirements.in"
        - "pip_check_requirements_upgrades/with_updates/requirements.txt"
        - "pip_check_requirements_upgrades/without_updates/requirements.in"
        - "pip_check_requirements_upgrades/without_updates/requirements.txt"
        - "pip_check_requirements_upgrades-py3/with_updates/requirements.in"
        - "pip_check_requirements_upgrades-py3/with_updates/requirements.txt"
        - "pip_check_requirements_upgrades-py3/without_updates/requirements.in"
        - "pip_check_requirements_upgrades-py3/without_updates/requirements.txt"

    - name: Install web server for testing connectivity
      apt:
        name: nginx
        state: present

    - name: Deploy firewall configuration file for the web server
      copy:
        src: ferm_http.conf
        dest: /etc/ferm/conf.d/99-http.conf
        owner: root
        group: root
        mode: 0640
      notify:
        - Restart ferm

  handlers:

    - name: Restart ferm
      service:
        name: ferm
        state: restarted