Developers’ mDay 2019. - Rastko Vasiljević, SuperAdmins – Infrastructure as code na primeru Ansible-a Developers’ mDay konferencija okuplja inspirativne ljude iz oblasti web developmenta. U pitanju je događaj stručnog karaktera, namenjen web developerima sa ciljem da se upoznaju sa aktuelnim tehnologijama u projektovanju web sistema, iskustvima u korišćenju najnovijih tehnika i tehnologija, kao i u rešavanju problema sa kojima se svakodnevno suočavaju.

4. Infrastructure as code (IaC) means to manage your IT
infrastructure using configuration files.

11. [defaults]
nocows = 1
command_warnings = True
strategy = free
become_method = sudo
[ssh_connection]
pipelining = True
scp_if_ssh = False
$ ansible-config –help
Usage: ansible-config [dump|list|view] [--help] [options] [ansible.cfg]

12. ---
- name: Project Setup
hosts: all
gather_facts: True
vars:
project: "{{ lookup('env’,proj_name’) }}"
php_version: 7.3
fpm: "yes"
application_server_listen_on: "socket"
socket_name: "{{ project }}"
nginx_root_path: {{ project }}/public_html"
nginx_dir: "/etc/nginx"
nginx_domain: "{{ project }}"
become: yes
become_user: root
become_method: sudo
roles:
- ansible-common
- create-user
- php-fpm
- nginx
- mysql

13. [local]
local_sudo ansible_connection=local ansible_become=true become_method=sudo
local_user ansible_connection=local ansible_become=false
[targets]
web1 ansible_host=x.x.x.x ansible_user=webapp1
web2 ansible_host=x.x.x.x ansible_user=webapp1
web3 ansible_host=x.x.x.x ansible_ssh_private_key_file=~/.ssh/id_rsa
mysql1 ansible_host=x.x.x.x ansible_user=root
mysql2 ansible_host=x.x.x.x ansible_become=true
[web]
web1
web2
web3
[mysql]
mysql1
mysql2

14. ---
- name: Configure vhost for application server
template:
src: appserver.conf.j2
dest: "{{nginx_dir}}/sites-available/{{ nginx_domain }}.conf"
notify:
- nginx restart
when: nginx_setup_mode == "appserver"
- name: Configure vhost for static content
template:
src: frontend.conf.j2
dest: "{{nginx_dir}}/sites-available/{{ nginx_domain }}.conf"
notify:
- nginx restart
when: nginx_setup_mode == "frontend"

15. $ ansible-galaxy install nginx
$ ansible-galaxy init my-role

16. myrole/
├── README.md
├── defaults
│ └── main.yml
├── files
├── handlers
│ └── main.yml
├── meta
│ └── main.yml
├── tasks
│ └── main.yml
├── templates
├── tests
│ ├── inventory
│ └── test.yml
└── vars
└── main.yml

20. $ molecule init role --role-name my-role
my-role/
├── README.md
├── defaults
│ └── main.yml
├── handlers
│ └── main.yml
├── meta
│ └── main.yml
├── molecule
│ └── default
│ ├── Dockerfile.j2
│ ├── INSTALL.rst
│ ├── molecule.yml
│ ├── playbook.yml
│ └── tests
│ ├── __pycache__
│ │ └── test_default.cpython-36.pyc
│ └── test_default.py
├── tasks
│ └── main.yml
└── vars
└── main.yml

21. import os
import testinfra.utils.ansible_runner
testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(
os.environ['MOLECULE_INVENTORY_FILE']).get_hosts('all')
def test_nginx_is_installed(host):
ngx = host.package("nginx")
assert ngx.is_installed
def test_nginx_running_and_enabled(host):
ngx = host.service("nginx")
assert ngx.is_running
assert ngx.is_enabled
def test_endpoint(host):
command = """curl -I http://localhost/"""
cmd = host.run(command)
assert '200 OK' in cmd.stdout

22. --> Test matrix
└── default
├── lint
├── dependency
├── cleanup
├── destroy
├── syntax
├── create
├── prepare
├── converge
├── idempotence
├── side_effect
├── verify
├── cleanup
└── destroy
$ molecule lint
$ molecule create
$ molecule converge
$ molecule verify
$ molecule test