Merge pull request #7 from stackhpc/test

Add tests

Author: markgoddard

.ansible-lint

@@ -0,0 +1,3 @@
+---
+skip_list:
+  - '701'  # meta/main.yml should contain relevant info

.github/workflows/pull_request.yml

@@ -0,0 +1,73 @@
+
+name: Tests
+
+# Controls when the action will run.
+on:
+  pull_request:
+  push:
+    branches:
+      - master
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        ansible:
+          - "2.9"
+          - "2.10"
+          - "2.12"
+    steps:
+      # Checks-out the repository under $GITHUB_WORKSPACE, so it's accessible to the job
+      - uses: actions/checkout@v2
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          if [[ "${{ matrix.ansible }}" = "2.9" ]]; then
+              ansible_package=ansible
+          elif [[ "${{ matrix.ansible }}" = "2.10" ]]; then
+              ansible_package=ansible-base
+          else
+              ansible_package=ansible-core
+          fi
+          pip install $ansible_package==${{ matrix.ansible }}.* 'ansible-lint<5'
+
+      - name: Linting code
+        run: |
+          ansible-lint -v --force-color
+
+  integration:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        ansible:
+          - "2.9"
+          - "2.10"
+          - "2.12"
+    steps:
+      # Checks-out the repository under $GITHUB_WORKSPACE, so it's accessible to the job
+      - uses: actions/checkout@v2
+
+      - uses: actions/setup-python@v2
+
+      - name: Install dependencies
+        run: |
+          python3 -m pip install --upgrade pip
+          if [[ "${{ matrix.ansible }}" = "2.9" ]]; then
+              ansible_package=ansible
+          elif [[ "${{ matrix.ansible }}" = "2.10" ]]; then
+              ansible_package=ansible-base
+          else
+              ansible_package=ansible-core
+          fi
+          python3 -m pip install $ansible_package==${{ matrix.ansible }}.* docker
+          ansible-galaxy collection build
+          ansible-galaxy collection install *.tar.gz
+
+      # TODO: Use ansible-test to run these.
+      - name: Running integration tests
+        run: |
+          ansible-playbook -i tests/inventory -v tests/*.yml -e ansible_python_interpreter=$(which python3)

galaxy.yml

@@ -4,6 +4,8 @@ version: "1.0.0"
 readme: "README.md"
 authors:
   - "Michał Nasiadka"
+dependencies:
+  "community.docker": "*"
 license:
   - "Apache-2.0"
 tags:

roles/vault/README.md

@@ -42,7 +42,6 @@ Example playbook (used with OpenStack Kayobe)
   tasks:
     - name: Ensure /opt/kayobe/vault exists
       file:
-        state: present
         path: /opt/kayobe/vault
         state: directory
 

roles/vault/defaults/main.yml

@@ -26,9 +26,13 @@ vault_config: >
     "listener": [{
       "tcp": {
         "address": "{{ vault_bind_address }}:8200",
+        {% if vault_tls_key and vault_tls_cert %}
         "tls_min_version": "tls12",
         "tls_key_file": "/vault/config/tls.key",
         "tls_cert_file": "/vault/config/tls.cert"
+        {% else %}
+        "tls_disable": "true"
+        {% endif %}
       }
     }],
     "storage": {

roles/vault/meta/main.yml

@@ -0,0 +1,3 @@
+---
+collections:
+  - community.docker

tests/inventory

@@ -0,0 +1,2 @@
+[consul]
+localhost ansible_connection=local

tests/roles

@@ -0,0 +1 @@
+../roles

tests/test_vault.yml

@@ -0,0 +1,20 @@
+---
+- name: Prepare for vault role
+  gather_facts: True
+  hosts: consul
+  tasks:
+    - name: Ensure /etc/vault exists
+      file:
+        path: /etc/vault
+        state: directory
+      become: true
+
+    - include_role:
+        name: vault
+      vars:
+        consul_bind_interface: lo
+        consul_bind_ip: 127.0.0.1
+        consul_vip_address: 127.0.0.1
+        vault_bind_address: 127.0.0.1
+        vault_api_addr: http://127.0.0.1:8200
+        vault_config_dir: "/etc/vault"