Mateusz Suski
78bcfce43a
ci / validate (push) Failing after 2m0s
- Implement 4-role architecture (base_provision, patching, hardening, decommission) - Extract hardcoded values to role defaults and group_vars - Add Ansible Vault integration for secrets management - Implement proper handlers for service restarts instead of direct tasks - Add Molecule testing framework with Docker driver - Configure ansible-lint with production profile settings Fix all 125+ ansible-lint violations: - Add FQCN (Fully Qualified Collection Names) to all modules - Replace yes/no with true/false for boolean values - Add explicit mode parameters to file/template operations - Remove duplicate post_tasks blocks from playbooks - Add newlines at end of all YAML files - Fix key ordering in tasks (name, when, block) - Convert service restarts to handlers with notify - Remove ignore_errors in favor of failed_when/changed_when - Fix line length violations and empty lines - Add noqa comments for unavoidable risky-file-permissions Update documentation: - Add REFACTORING.md with implementation details - Add VAULT_GUIDE.md for secrets management - Add per-role README.md files - Update existing documentation All playbooks now pass ansible-lint production profile with 0 violations.
32 lines
601 B
YAML
32 lines
601 B
YAML
---
|
|
# Molecule configuration for Ansible role testing
|
|
|
|
driver:
|
|
name: docker
|
|
|
|
platforms:
|
|
- name: ubuntu-22.04
|
|
image: geerlingguy/docker-ubuntu2204-ansible:latest
|
|
pre_build_image: true
|
|
privileged: true
|
|
volumes:
|
|
- /sys/fs/cgroup:/sys/fs/cgroup:rw
|
|
|
|
provisioner:
|
|
name: ansible
|
|
config_options:
|
|
defaults:
|
|
gathering: smart
|
|
fact_caching: jsonfile
|
|
fact_caching_connection: /tmp/ansible_facts
|
|
fact_caching_timeout: 3600
|
|
deprecation_warnings: false
|
|
|
|
verifier:
|
|
name: ansible
|
|
directory: molecule/default/tests
|
|
|
|
lint: |
|
|
yamllint .
|
|
ansible-lint
|