feat: remove become from role
All checks were successful
test / Linting (push) Successful in 41s
test / Molecule tests (default, debian11) (push) Successful in 1m8s
test / Molecule tests (default, debian12) (push) Successful in 1m13s
test / Molecule tests (default, ubuntu2004) (push) Successful in 1m23s
test / Molecule tests (default, ubuntu2204) (push) Successful in 1m25s
test / Molecule tests (with_custom_config, debian11) (push) Successful in 1m16s
test / Molecule tests (with_custom_config, debian12) (push) Successful in 1m11s
test / Molecule tests (with_custom_config, ubuntu2204) (push) Successful in 1m21s
test / Molecule tests (with_custom_config, ubuntu2004) (push) Successful in 1m45s
All checks were successful
test / Linting (push) Successful in 41s
test / Molecule tests (default, debian11) (push) Successful in 1m8s
test / Molecule tests (default, debian12) (push) Successful in 1m13s
test / Molecule tests (default, ubuntu2004) (push) Successful in 1m23s
test / Molecule tests (default, ubuntu2204) (push) Successful in 1m25s
test / Molecule tests (with_custom_config, debian11) (push) Successful in 1m16s
test / Molecule tests (with_custom_config, debian12) (push) Successful in 1m11s
test / Molecule tests (with_custom_config, ubuntu2204) (push) Successful in 1m21s
test / Molecule tests (with_custom_config, ubuntu2004) (push) Successful in 1m45s
This commit is contained in:
parent
a4d952ef1a
commit
38717dcd80
@ -3,14 +3,12 @@
|
||||
- name: "Reload service file"
|
||||
ansible.builtin.systemd:
|
||||
daemon_reload: true
|
||||
become: true
|
||||
listen: "systemctl-daemon-reload"
|
||||
|
||||
- name: "Enable nomad-certs service"
|
||||
ansible.builtin.service:
|
||||
name: nomad-certs
|
||||
enabled: true
|
||||
become: true
|
||||
listen: "systemctl-enable-nomad-certs"
|
||||
|
||||
- name: "Start nomad-certs service"
|
||||
@ -19,4 +17,3 @@
|
||||
state: restarted
|
||||
listen: "systemctl-restart-nomad-certs"
|
||||
when: renew_nomad_certificates_start_service
|
||||
become: true
|
||||
|
@ -1,6 +1,7 @@
|
||||
---
|
||||
- name: Converge
|
||||
hosts: all
|
||||
become: true
|
||||
tasks:
|
||||
- name: "Include ednxzu.renew_nomad_certificates"
|
||||
ansible.builtin.include_role:
|
||||
|
@ -1,12 +1,12 @@
|
||||
---
|
||||
- name: Prepare
|
||||
hosts: all
|
||||
become: true
|
||||
tasks:
|
||||
- name: "Create group nomad"
|
||||
ansible.builtin.group:
|
||||
name: "nomad"
|
||||
state: present
|
||||
become: true
|
||||
|
||||
- name: "Create user nomad"
|
||||
ansible.builtin.user:
|
||||
@ -14,4 +14,3 @@
|
||||
group: "nomad"
|
||||
shell: /bin/false
|
||||
state: present
|
||||
become: true
|
||||
|
@ -1,7 +1,8 @@
|
||||
---
|
||||
- name: Verify
|
||||
hosts: all
|
||||
gather_facts: false
|
||||
gather_facts: true
|
||||
become: true
|
||||
tasks:
|
||||
- name: "Test: directory /etc/consul-template.d/nomad"
|
||||
block:
|
||||
@ -19,7 +20,6 @@
|
||||
ansible.builtin.slurp:
|
||||
src: "/etc/consul-template.d/nomad/nomad_config.hcl"
|
||||
register: slurp_etc_consul_template_d_nomad_nomad_config_hcl
|
||||
become: true
|
||||
|
||||
- name: "Verify directory /etc/consul-template.d/nomad"
|
||||
ansible.builtin.assert:
|
||||
@ -60,7 +60,6 @@
|
||||
src: "{{ item.path }}"
|
||||
loop: "{{ find_etc_consul_template_d_nomad_templates.files }}"
|
||||
register: slurp_etc_consul_template_d_nomad_templates
|
||||
become: true
|
||||
|
||||
- name: "Verify file /etc/consul-template.d/nomad/templates/nomad_ca.pem.tpl"
|
||||
vars:
|
||||
@ -125,9 +124,8 @@
|
||||
ansible.builtin.slurp:
|
||||
src: "/etc/systemd/system/nomad-certs.service"
|
||||
register: slurp_etc_systemd_system_nomad_certs_service
|
||||
become: true
|
||||
|
||||
- name: "Verify service nomad"
|
||||
- name: "Verify service nomad-certs"
|
||||
ansible.builtin.assert:
|
||||
that:
|
||||
- stat_etc_systemd_system_nomad_certs_service.stat.exists
|
||||
|
@ -1,6 +1,7 @@
|
||||
---
|
||||
- name: Converge
|
||||
hosts: all
|
||||
become: true
|
||||
tasks:
|
||||
- name: "Include ednxzu.renew_nomad_certificates"
|
||||
ansible.builtin.include_role:
|
||||
|
@ -1,12 +1,12 @@
|
||||
---
|
||||
- name: Prepare
|
||||
hosts: all
|
||||
become: true
|
||||
tasks:
|
||||
- name: "Create group nomad"
|
||||
ansible.builtin.group:
|
||||
name: "nomad"
|
||||
state: present
|
||||
become: true
|
||||
|
||||
- name: "Create user nomad"
|
||||
ansible.builtin.user:
|
||||
@ -14,4 +14,3 @@
|
||||
group: "nomad"
|
||||
shell: /bin/false
|
||||
state: present
|
||||
become: true
|
||||
|
@ -2,6 +2,7 @@
|
||||
- name: Verify
|
||||
hosts: all
|
||||
gather_facts: true
|
||||
become: true
|
||||
tasks:
|
||||
- name: "Test: directory /etc/consul-template.d/nomad"
|
||||
block:
|
||||
@ -19,7 +20,6 @@
|
||||
ansible.builtin.slurp:
|
||||
src: "/etc/consul-template.d/nomad/nomad_config.hcl"
|
||||
register: slurp_etc_consul_template_d_nomad_nomad_config_hcl
|
||||
become: true
|
||||
|
||||
- name: "Verify directory /etc/consul-template.d/nomad"
|
||||
ansible.builtin.assert:
|
||||
@ -60,7 +60,6 @@
|
||||
src: "{{ item.path }}"
|
||||
loop: "{{ find_etc_consul_template_d_nomad_templates.files }}"
|
||||
register: slurp_etc_consul_template_d_nomad_templates
|
||||
become: true
|
||||
|
||||
- name: "Verify file /etc/consul-template.d/nomad/templates/nomad_ca.pem.tpl"
|
||||
vars:
|
||||
@ -125,9 +124,8 @@
|
||||
ansible.builtin.slurp:
|
||||
src: "/etc/systemd/system/nomad-certs.service"
|
||||
register: slurp_etc_systemd_system_nomad_certs_service
|
||||
become: true
|
||||
|
||||
- name: "Verify service nomad"
|
||||
- name: "Verify service nomad-certs"
|
||||
ansible.builtin.assert:
|
||||
that:
|
||||
- stat_etc_systemd_system_nomad_certs_service.stat.exists
|
||||
|
@ -1,6 +1,7 @@
|
||||
---
|
||||
- name: Converge
|
||||
hosts: all
|
||||
become: true
|
||||
tasks:
|
||||
- name: "Include ednxzu.renew_nomad_certificates"
|
||||
ansible.builtin.include_role:
|
||||
|
@ -1,12 +1,12 @@
|
||||
---
|
||||
- name: Prepare
|
||||
hosts: all
|
||||
become: true
|
||||
tasks:
|
||||
- name: "Create group nomad"
|
||||
ansible.builtin.group:
|
||||
name: "nomad"
|
||||
state: present
|
||||
become: true
|
||||
|
||||
- name: "Create user nomad"
|
||||
ansible.builtin.user:
|
||||
@ -14,4 +14,3 @@
|
||||
group: "nomad"
|
||||
shell: /bin/false
|
||||
state: present
|
||||
become: true
|
||||
|
@ -1,7 +1,8 @@
|
||||
---
|
||||
- name: Verify
|
||||
hosts: all
|
||||
gather_facts: false
|
||||
gather_facts: true
|
||||
become: true
|
||||
tasks:
|
||||
- name: "Test: directory /etc/consul-template.d/nomad"
|
||||
block:
|
||||
@ -19,7 +20,6 @@
|
||||
ansible.builtin.slurp:
|
||||
src: "/etc/consul-template.d/nomad/nomad_config.hcl"
|
||||
register: slurp_etc_consul_template_d_nomad_nomad_config_hcl
|
||||
become: true
|
||||
|
||||
- name: "Verify directory /etc/consul-template.d/nomad"
|
||||
ansible.builtin.assert:
|
||||
@ -60,7 +60,6 @@
|
||||
src: "{{ item.path }}"
|
||||
loop: "{{ find_etc_consul_template_d_nomad_templates.files }}"
|
||||
register: slurp_etc_consul_template_d_nomad_templates
|
||||
become: true
|
||||
|
||||
- name: "Verify file /etc/consul-template.d/nomad/templates/nomad_ca.pem.tpl"
|
||||
vars:
|
||||
@ -125,9 +124,8 @@
|
||||
ansible.builtin.slurp:
|
||||
src: "/etc/systemd/system/nomad-certs.service"
|
||||
register: slurp_etc_systemd_system_nomad_certs_service
|
||||
become: true
|
||||
|
||||
- name: "Verify service nomad"
|
||||
- name: "Verify service nomad-certs"
|
||||
ansible.builtin.assert:
|
||||
that:
|
||||
- stat_etc_systemd_system_nomad_certs_service.stat.exists
|
||||
|
@ -1,6 +1,7 @@
|
||||
---
|
||||
- name: Converge
|
||||
hosts: all
|
||||
become: true
|
||||
tasks:
|
||||
- name: "Include ednxzu.renew_nomad_certificates"
|
||||
ansible.builtin.include_role:
|
||||
|
@ -1,12 +1,12 @@
|
||||
---
|
||||
- name: Prepare
|
||||
hosts: all
|
||||
become: true
|
||||
tasks:
|
||||
- name: "Create group nomad"
|
||||
ansible.builtin.group:
|
||||
name: "nomad"
|
||||
state: present
|
||||
become: true
|
||||
|
||||
- name: "Create user nomad"
|
||||
ansible.builtin.user:
|
||||
@ -14,4 +14,3 @@
|
||||
group: "nomad"
|
||||
shell: /bin/false
|
||||
state: present
|
||||
become: true
|
||||
|
@ -2,6 +2,7 @@
|
||||
- name: Verify
|
||||
hosts: all
|
||||
gather_facts: true
|
||||
become: true
|
||||
tasks:
|
||||
- name: "Test: directory /etc/consul-template.d/nomad"
|
||||
block:
|
||||
@ -19,7 +20,6 @@
|
||||
ansible.builtin.slurp:
|
||||
src: "/etc/consul-template.d/nomad/nomad_config.hcl"
|
||||
register: slurp_etc_consul_template_d_nomad_nomad_config_hcl
|
||||
become: true
|
||||
|
||||
- name: "Verify directory /etc/consul-template.d/nomad"
|
||||
ansible.builtin.assert:
|
||||
@ -60,7 +60,6 @@
|
||||
src: "{{ item.path }}"
|
||||
loop: "{{ find_etc_consul_template_d_nomad_templates.files }}"
|
||||
register: slurp_etc_consul_template_d_nomad_templates
|
||||
become: true
|
||||
|
||||
- name: "Verify file /etc/consul-template.d/nomad/templates/nomad_ca.pem.tpl"
|
||||
vars:
|
||||
@ -125,9 +124,8 @@
|
||||
ansible.builtin.slurp:
|
||||
src: "/etc/systemd/system/nomad-certs.service"
|
||||
register: slurp_etc_systemd_system_nomad_certs_service
|
||||
become: true
|
||||
|
||||
- name: "Verify service nomad"
|
||||
- name: "Verify service nomad-certs"
|
||||
ansible.builtin.assert:
|
||||
that:
|
||||
- stat_etc_systemd_system_nomad_certs_service.stat.exists
|
||||
|
@ -1,7 +1,6 @@
|
||||
---
|
||||
# task/configure file for renew_nomad_certificates
|
||||
- name: "Configure files for nomad certificate renewal"
|
||||
become: true
|
||||
notify:
|
||||
- "systemctl-enable-nomad-certs"
|
||||
- "systemctl-restart-nomad-certs"
|
||||
@ -45,6 +44,5 @@
|
||||
owner: root
|
||||
group: root
|
||||
mode: '0644'
|
||||
become: true
|
||||
notify:
|
||||
- "systemctl-daemon-reload"
|
||||
|
@ -7,7 +7,6 @@
|
||||
owner: "{{ renew_nomad_certificates_nomad_user }}"
|
||||
group: "{{ renew_nomad_certificates_nomad_group }}"
|
||||
mode: '0755'
|
||||
become: true
|
||||
|
||||
- name: "Create directory templates directory in {{ renew_nomad_certificates_config_dir }}"
|
||||
ansible.builtin.file:
|
||||
@ -16,7 +15,6 @@
|
||||
owner: "{{ renew_nomad_certificates_nomad_user }}"
|
||||
group: "{{ renew_nomad_certificates_nomad_group }}"
|
||||
mode: '0755'
|
||||
become: true
|
||||
|
||||
- name: "Ensure certificate/key directory(ies) exist(s)"
|
||||
ansible.builtin.file:
|
||||
@ -29,4 +27,3 @@
|
||||
- "{{ renew_nomad_certificates_cert_dest }}"
|
||||
- "{{ renew_nomad_certificates_key_dest }}"
|
||||
- "{{ renew_nomad_certificates_ca_dest }}"
|
||||
become: true
|
||||
|
Loading…
Reference in New Issue
Block a user