alexandre.pires
272ed647cf
- Updated host_vars for dev-02 to include login history settings and modified code server authentication. - Adjusted opencode server configurations and reduced resource allocation. - Introduced a new playbook for configuring nginx reverse proxy with TLS and OAuth2. - Enhanced linux_dev_station role defaults and tasks, including package updates and service configurations. - Removed unnecessary credential assertions in linux_dev_station tasks. - Created nginx_proxy role with tasks for certbot, nginx installation, and oauth2-proxy setup. - Added templates for nginx and oauth2-proxy configurations. - Updated terraform configuration to reflect new DNS records for ide and agent services. - Documented changes and configurations in linux_dev_station.md for clarity and future reference.
Ansible Role Development & Testing with Molecule (Podman)
This guide explains how to create an Ansible role and test it locally using Molecule with the Podman driver.
1. Prerequisites
Install Molecule and Podman driver:
pip install molecule molecule-podman
2. Create a New Role
Navigate to your roles directory and create a new role:
cd ansible/roles
ansible-galaxy init myrole
cd myrole
3. Initialize Molecule with Podman
molecule init scenario default -d podman
4. Edit Molecule Configuration
Edit molecule/default/molecule.yml to set your platform and image, for example:
---
dependency:
name: galaxy
driver:
name: podman
platforms:
- name: instance
image: ubuntu:20.04
privileged: true
provisioner:
name: ansible
options:
vvv: true
env:
ANSIBLE_ROLES_PATH: ../../../
verifier:
name: ansible
5. Write Your Role Tasks
Edit tasks/main.yml to add your automation logic.
6. Configure Molecule to Use Your Role
Edit molecule/default/converge.yml:
---
- name: Converge
hosts: all
gather_facts: false
tasks:
- name: Include role
ansible.builtin.include_role:
name: myrole
6. Configure preparation steps (required for python and sudo)
---
---
- name: Prepare
hosts: all
gather_facts: false
tasks:
- name: Update cache # noqa no-changed-when
ansible.builtin.raw: apt update
- name: Install required packages # noqa no-changed-when
ansible.builtin.raw: apt install -y python3 sudo
### Insert here other preparation steps
8. Run Molecule Tests
From the root of your role directory, run:
molecule test
This will:
- Build the container
- Apply your role
- Run verification steps
- Destroy the container
8. Notes
- Systemd: Most Podman containers do not support
systemdby default. Usewhen: ansible_service_mgr == "systemd"to skip service tasks in containers. - Role Path: Always run Molecule commands from the root of your role directory.