Molecule DelegatedDriverを介したAnsibleの役割の確認

Moleculeは、Ansibleの役割をテストするための優れたツールであり、堅牢で柔軟な検証プロセスに従って、適切なレベルの役割の品質を保証します。Moleculeのドキュメントのほとんどすべては、コンテナサーバーに対してテストが実行されるdockerドライバーに焦点を当てていますが、ほとんどのユースケースには適していますが、委任されたドライバーを使用して外部クラウドバックエンドに切り替えると便利な場合があります。

残念ながら、委任されたドライバーのドキュメントは、ほとんどが公式ドキュメントのほんの数行ですが、より明確な説明といくつかの例は、このようにMoleculeを使用したい開発者にとって非常に役立ちます。

Ansible 0 galaxy , Google Cloud Platform. :

• Molecule (https://molecule.readthedocs.io/en/latest/#)
• Molecule (https://www.jeffgeerling.com/blog/2018/testing-your-ansible-roles-molecule)
• , Molecule (https://github.com/ansible-community/molecule/issues/1292)
• ansible Google Cloud Platform . (https://itnext.io/getting-started-with-red-hat-ansible-for-google-cloud-platform-fa666c42a00c)

: Molecule?

, , — Molecule:

instance-config API. instance-config, instance-config.

: instance-config ?

Instance-config — Ansible, YAML Molecule ( $HOME/.cache/molecule/<role-name>/<scenario-name>/instance_config.yml



), :

- address: 10.10.15.17
 identity_file: /home/fabio/.ssh/id_rsa # mutually exclusive with
                                        # password
 instance: millennium_falcon
 port: 22
 user: hansolo
# password: ssh_password # mutually exclusive with identity_file
 become_method: sudo # optional
# become_pass: password_if_required # optional
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

, Windows, WinRM.

create.yml

, , instance-config, . , Molecule , molecule init



, :

molecule init scenario -driver-name=delegated
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

:

.
├── INSTALL.rst
├── converge.yml
├── create.yml
├── destroy.yml
├── molecule.yml
└── verify.yml
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

• molecule.yml
  
  
  
  — Molecule, , .
• create.yml
  
  
  
  — Ansible instance-config.
• destroy.yml
  
  
  
  Ansible instance-config
• converge.yml
  
  
  
  
• verify.yml
  
  
  
  
• INSTALL.rst
  
  
  
  Molecule

create.yml



, Molecule:

---
- name: Create
 hosts: localhost
 connection: local
 gather_facts: false
 no_log: "{{ molecule_no_log }}"
 tasks:

 # Developer must implement.
 # Developer must map instance config.
 # Mandatory configuration for Molecule to function.

 — name: Populate instance config dict
 set_fact:
 instance_conf_dict: {
 'instance': "{{ }}",
 'address': "{{ }}",
 'user': "{{ }}",
 'port': "{{ }}",
 'identity_file': "{{ }}", }
 with_items: "{{ server.results }}"
 register: instance_config_dict
 when: server.changed | bool

 — name: Convert instance config dict to a list
 set_fact:
 instance_conf: {{ instance_config_dict.results | map(attribute='ansible_facts.instance_conf_dict') | list }}"
 when: server.changed | bool

 — name: Dump instance config
 copy:
 content: "{{ instance_conf | to_json | from_json | molecule_to_yaml | molecule_header }}"
 dest: "{{ molecule_instance_config }}"
 when: server.changed | bool
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

: , , instance-config.yml



. Ansible, ( ) . , github, , VMWare:

…
 7     - name: Create molecule instance(s)
 8      vmware_guest:
 9        hostname: "{{ molecule_yml.driver.hostname }}"
10        esxi_hostname: "{{ molecule_yml.driver.esxi_hostname }}"
11        username: "{{ molecule_yml.driver.username }}"
12        password: "{{ molecule_yml.driver.password }}"
13        datacenter: "{{ molecule_yml.driver.datacenter }}"
14        validate_certs: "{{ molecule_yml.driver.validate_certs }}"
15        resource_pool: "{{ molecule_yml.driver.resource_pool }}"
16         folder: "{{ molecule_yml.driver.folder }}"
17         name: "{{ item.name }}"
18         template: "{{ item.template }}"
19         hardware:
20           memory_mb: "{{ item.memory | default(omit) }}"
21           num_cpus: "{{ item.cpu | default(omit) }}"
22         wait_for_ip_address: "yes"
23         state: poweredon
24       register: server
25       with_items: "{{ molecule_yml.platforms }}"
26     
27     - name: Populate instance config dict
28       set_fact:
29         instance_conf_dict: {
30           'instance': "{{ item.instance.hw_name }}",
31           'address': "{{ item.instance.ipv4 }}",
32           'user': "vagrant",
33           'port': "22",
34           'identity_file': 'identity_file': "{{
                     molecule_yml.driver.ssh_identity_file }}"
35         }
36       with_items: "{{ server.results }}"
37       register: instance_config_dict
38       when: server is changed
…
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

vmware_guest



( 7–23) VMWare. , molecule.yml



( 25). , , molecule.yml



, molecule_yml



.

, vmware_guest



, ( 24), , , (instance-config



) ( 27 ). , , .

Google Cloud Platform (GCP)

, , , , docker-secured Ansible. GCP . Ansible GCP , , , .

:

• python 2.7
• ansible 2.9.6
• molecule 3.0.2
• ansible-lint 4.2.0
• yamllint 1.20.0
• flake8 3.7.9 (mccabe: 0.6.1, pycodestyle: 2.5.0, pyflakes: 2.1.1) CPython 2.7.17 Linux

yamllint, ansible-lint flake8 — , .

docker-secured

, API- ssl. , , Docker:

• https://success.docker.com/article/how-do-i-enable-the-remote-api-for-dockerd

  
  
  
  
  
  
  

• https://docs.docker.com/engine/security/https/

  
  
  
  
  
  
  

ssl , , .

, GitHub:

git clone https://github.com/fabiomarinetti/fmarinetti.docker-secured.git
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

GCP

, GCP, . , GCP . , Ansible GCP.

ansible-272015



service



, secret.json



.

molecule.yml

molecule.yml



.

, molecule.yml



driver



. , , , , GCP, ssh , , , , ad-hoc . molecule_yml



(, molecule_yml.driver.region



).

20 driver:
21   name: delegated
22   gcp_service_account_key: ${GOOGLE_APPLICATION_CREDENTIALS}
23   gcp_project_id: ansible-272015
24   region: us-east1
25   zone: us-east1-c
26   ssh_user: ${SSH_USER}
27   ssh_pub_key_file: "${SSH_ID_FILE}.pub"
28   ssh_key_file: "${SSH_ID_FILE}"
29   network_name: ansible-network
30   subnet_name: ansible-subnet
31   firewall_name: ansible-firewall
32   ip_cidr_range: 172.16.0.0/28
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

molecule.yml



, (, , , …) , . CentOS 7, Ubuntu Xenial 16.04 Ubuntu Bionic 18.04. (, CentOS Ubuntu), Ansible.

41 platforms:
42   - name: "ds-centos7-${TRAVIS_BUILD_ID}"
43     image_family: projects/centos-cloud/global/images/family
                     /centos-7
44     machine_type: n1-standard-1
45     size_gb: 200
46     groups:
47       - centos
48   - name: "ds-ubuntu-bionic-${TRAVIS_BUILD_ID}"
49     image_family: projects/ubuntu-os-cloud/global/images/family
                     /ubuntu-1804-lts
50     machine_type: n1-standard-1
51     size_gb: 200
52     groups:
53       - ubuntu
54   - name:  "ds-ubuntu-xenial-${TRAVIS_BUILD_ID}"
55     image_family: projects/ubuntu-os-cloud/global/images/family
                     /ubuntu-1604-lts
56     machine_type: n1-standard-1
57     size_gb: 200
58     groups:
59       - ubuntu
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

molecule.yml



, .

create.yml

, create.yml



— , . gcp (GCP). GCP - , , , , , module_defaults



gcp.

 7   module_defaults:
 8     group/gcp:
 9       project: "{{ molecule_yml.driver.gcp_project_id }}"
10       auth_kind: serviceaccount
11       service_account_file: "{{ 
              molecule_yml.driver.gcp_service_account_key }}"
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

, VMWare, GCP — , , : , IP- . , :

16 — name: create instances
17   include_tasks: tasks/create_instance.yml
18   loop: "{{ molecule_yml.platforms }}"
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

create_instance.yml



IP-, . , , , , , , instance-config.

7 - name: initialize instance facts
 8   set_fact:
 9     instance_created:
10       instances: []
11   when: instance_created is not defined
... create the instance and return instance variable ...
56 - name: update instance facts
57   set_fact:
58     instance_created:
59       changed: instance.changed | bool
60       instances: "{{ instance_created.instances + [ instance ]}}"
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

isntance-config instance_create



:

20     - name: Populate instance config dict
21       set_fact:
22         instance_conf_dict: {
23           'instance': "{{ item.name }}",
24           'address': "{{
               item.networkInterfaces[0].accessConfigs[0].natIP }}",
25           'user': "{{ molecule_yml.driver.ssh_user }}",
26           'port': "22",
27           'identity_file': "{{ molecule_yml.driver.ssh_key_file
               }}", }
28       with_items: "{{ instance_created.instances }}"
29       register: instance_config_dict
30       when: instance_created.changed
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

, , VMWare, servers is changed

, , :

molecule create --scenario-name=gcp
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

, , / :

• lint,
• prepare, . ubuntu.
• converge,
• idempotence,
• verify, ,

molecule <phase> --scenario-name=gcp
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

, , , .

destroy.yml



( ). , , . , :

molecule destroy --scenario-name=gcp
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

, :

molecule test --scenario-test=gcp
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

, Molecule, , GCP. : AWS, Azure, Digital Ocean… , Molecule. , .