alexandre.pires
8724360fb2
- Updated AGENTS.md to include new directories for execution plans and implemented feature reports. - Modified Ansible host variables for dev-02 and gpu-01 to change API endpoints and add new configurations for Scaleway. - Adjusted firewall rules in gpu-01 to allow HTTPS traffic instead of the previous Ollama port. - Added OAuth2 proxy configurations to gpu-01 for enhanced security. - Removed deprecated open-webui module from Terraform app configurations. - Updated Terraform configurations to reflect changes in local variables and removed unused secrets. - Created a new sectool.json file for CloudNS integration with Bitwarden. - Enhanced SELinux configurations for nginx to allow connections to any port and added oauth2-proxy port.
Ansible Role Development & Testing with Molecule (Podman)
This guide explains how to create an Ansible role and test it locally using Molecule with the Podman driver.
1. Prerequisites
Install Molecule and Podman driver:
pip install molecule molecule-podman
2. Create a New Role
Navigate to your roles directory and create a new role:
cd ansible/roles
ansible-galaxy init myrole
cd myrole
3. Initialize Molecule with Podman
molecule init scenario default -d podman
4. Edit Molecule Configuration
Edit molecule/default/molecule.yml to set your platform and image, for example:
---
dependency:
name: galaxy
driver:
name: podman
platforms:
- name: instance
image: ubuntu:20.04
privileged: true
provisioner:
name: ansible
options:
vvv: true
env:
ANSIBLE_ROLES_PATH: ../../../
verifier:
name: ansible
5. Write Your Role Tasks
Edit tasks/main.yml to add your automation logic.
6. Configure Molecule to Use Your Role
Edit molecule/default/converge.yml:
---
- name: Converge
hosts: all
gather_facts: false
tasks:
- name: Include role
ansible.builtin.include_role:
name: myrole
6. Configure preparation steps (required for python and sudo)
---
---
- name: Prepare
hosts: all
gather_facts: false
tasks:
- name: Update cache # noqa no-changed-when
ansible.builtin.raw: apt update
- name: Install required packages # noqa no-changed-when
ansible.builtin.raw: apt install -y python3 sudo
### Insert here other preparation steps
8. Run Molecule Tests
From the root of your role directory, run:
molecule test
This will:
- Build the container
- Apply your role
- Run verification steps
- Destroy the container
8. Notes
- Systemd: Most Podman containers do not support
systemdby default. Usewhen: ansible_service_mgr == "systemd"to skip service tasks in containers. - Role Path: Always run Molecule commands from the root of your role directory.