65013c4001
* consul_session: ensure SSL certificate is checked * consul_session: don't ignore validate_certs param
99 lines
3.2 KiB
YAML
99 lines
3.2 KiB
YAML
---
|
|
- name: Install Consul and test
|
|
|
|
vars:
|
|
consul_version: '1.5.0'
|
|
consul_uri: https://s3.amazonaws.com/ansible-ci-files/test/integration/targets/consul/consul_{{ consul_version }}_{{ ansible_system | lower }}_{{ consul_arch }}.zip
|
|
consul_cmd: '{{ output_dir }}/consul'
|
|
|
|
block:
|
|
- name: register pyOpenSSL version
|
|
command: "{{ ansible_python_interpreter }} -c 'import OpenSSL; print(OpenSSL.__version__)'"
|
|
register: pyopenssl_version
|
|
|
|
- name: Install requests<2.20 (CentOS/RHEL 6)
|
|
pip:
|
|
name: requests<2.20
|
|
register: result
|
|
until: result is success
|
|
when: ansible_distribution_file_variety|default() == 'RedHat' and ansible_distribution_major_version is version('6', '<=')
|
|
|
|
- name: Install python-consul
|
|
pip:
|
|
name: python-consul
|
|
register: result
|
|
until: result is success
|
|
|
|
- when: pyopenssl_version.stdout is version('0.15', '>=')
|
|
block:
|
|
- name: Generate privatekey
|
|
openssl_privatekey:
|
|
path: '{{ output_dir }}/privatekey.pem'
|
|
|
|
- name: Generate CSR
|
|
openssl_csr:
|
|
path: '{{ output_dir }}/csr.csr'
|
|
privatekey_path: '{{ output_dir }}/privatekey.pem'
|
|
subject:
|
|
commonName: localhost
|
|
|
|
- name: Generate selfsigned certificate
|
|
openssl_certificate:
|
|
path: '{{ output_dir }}/cert.pem'
|
|
csr_path: '{{ output_dir }}/csr.csr'
|
|
privatekey_path: '{{ output_dir }}/privatekey.pem'
|
|
provider: selfsigned
|
|
selfsigned_digest: sha256
|
|
register: selfsigned_certificate
|
|
|
|
- name: 'Install unzip'
|
|
package:
|
|
name: unzip
|
|
register: result
|
|
until: result is success
|
|
when: ansible_distribution != "MacOSX" # unzip already installed
|
|
|
|
- assert:
|
|
# Linux: x86_64, FreeBSD: amd64
|
|
that: ansible_architecture in ['i386', 'x86_64', 'amd64']
|
|
- set_fact:
|
|
consul_arch: '386'
|
|
when: ansible_architecture == 'i386'
|
|
- set_fact:
|
|
consul_arch: amd64
|
|
when: ansible_architecture in ['x86_64', 'amd64']
|
|
|
|
- name: 'Download consul binary'
|
|
unarchive:
|
|
src: '{{ consul_uri }}'
|
|
dest: '{{ output_dir }}'
|
|
remote_src: true
|
|
register: result
|
|
until: result is success
|
|
|
|
- vars:
|
|
remote_dir: '{{ echo_output_dir.stdout }}'
|
|
block:
|
|
# output_dir is hardcoded/created in test/runner/lib/executor.py and
|
|
# contains '~': expand remote path
|
|
- command: 'echo {{ output_dir }}'
|
|
register: echo_output_dir
|
|
|
|
- name: 'Create configuration file'
|
|
template:
|
|
src: consul_config.hcl.j2
|
|
dest: '{{ output_dir }}/consul_config.hcl'
|
|
|
|
- name: 'Start Consul (dev mode enabled)'
|
|
shell: 'nohup {{ consul_cmd }} agent -dev -config-file {{ output_dir }}/consul_config.hcl </dev/null >/dev/null 2>&1 &'
|
|
|
|
- name: 'Create some data'
|
|
command: '{{ consul_cmd }} kv put data/value{{ item }} foo{{ item }}'
|
|
loop: [1, 2, 3]
|
|
|
|
- import_tasks: consul_session.yml
|
|
|
|
always:
|
|
- name: 'Kill consul process'
|
|
shell: "kill $(cat {{ output_dir }}/consul.pid)"
|
|
ignore_errors: true
|