Lab06: Advanced Ansible & CI/CD

.github/workflows/ansible-deploy-bonus.yml

@@ -0,0 +1,99 @@
+name: Ansible Deployment Go App
+
+on:
+  push:
+    branches: [ main, master, lab06 ]
+    paths:
+      - 'ansible/vars/app_bonus.yml'
+      - 'ansible/playbooks/deploy-bonus.yml'
+      - 'ansible/roles/web_app/tasks/**'
+      - 'ansible/roles/web_app/templates/docker-compose.yml.j2'
+      - '.github/workflows/ansible-deploy-bonus.yml'
+  pull_request:
+    branches: [ main, master, lab06 ]
+    paths:
+      - 'ansible/vars/app_bonus.yml'
+      - 'ansible/playbooks/deploy-bonus.yml'
+
+env:
+  ANSIBLE_CONFIG: ansible/ansible.cfg
+  ANSIBLE_ROLES_PATH: ${{ github.workspace }}/ansible/roles
+  ANSIBLE_HOST_KEY_CHECKING: False
+  ANSIBLE_SSH_ARGS: '-o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null'
+  VM_HOST: ${{ secrets.VM_HOST }}
+  VM_USER: ${{ secrets.VM_USER }}
+  APP_NAME: 'devops-go'
+
+jobs:
+  lint:
+    name: Lint Go App Ansible
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+          cache: 'pip'
+
+      - name: Install dependencies
+        run: |
+          pip install ansible ansible-lint yamllint
+          ansible-galaxy collection install community.docker
+
+      - name: Syntax check Go playbook
+        run: |
+          cd ansible
+          export ANSIBLE_ROLES_PATH="$GITHUB_WORKSPACE/ansible/roles"
+          ansible-playbook playbooks/deploy-bonus.yml --syntax-check
+
+      - name: Run ansible-lint
+        run: |
+          cd ansible
+          ansible-lint playbooks/deploy-bonus.yml
+
+  deploy:
+    name: Deploy Go App
+    needs: lint
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
+      - name: Install Ansible
+        run: |
+          pip install ansible
+          ansible-galaxy collection install community.docker
+
+      - name: Setup Ansible Vault
+        run: |
+          echo "${{ secrets.ANSIBLE_VAULT_PASSWORD }}" > /tmp/vault_pass
+          chmod 600 /tmp/vault_pass
+
+      - name: Setup roles
+        run: |
+          mkdir -p ansible/playbooks/roles
+          cp -r ansible/roles/* ansible/playbooks/roles/ 2>/dev/null || true
+          cp -r roles/* ansible/playbooks/roles/ 2>/dev/null || true
+
+      - name: Deploy Go
+        run: |
+          cd ansible
+          export ANSIBLE_ROLES_PATH=$(pwd)/roles
+          export ANSIBLE_HOST_KEY_CHECKING=False
+          ansible-playbook playbooks/deploy-bonus.yml --syntax-check\
+            --vault-password-file /tmp/vault_pass
+
+      - name: Cleanup
+        run: rm -f /tmp/vault_pass
+        if: always()

.github/workflows/ansible-deploy-matrix.yml

@@ -0,0 +1,74 @@
+name: Ansible Deployment Matrix
+
+on:
+  push:
+    branches: [ main, master, lab06 ]
+    paths:
+      - 'ansible/roles/web_app/**'
+      - '.github/workflows/ansible-deploy-matrix.yml'
+
+env:
+  ANSIBLE_CONFIG: ansible/ansible.cfg
+  ANSIBLE_ROLES_PATH: ${{ github.workspace }}/ansible/roles
+
+jobs:
+  matrix-deploy:
+    name: Deploy ${{ matrix.app.name }}
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        app:
+          - name: Python
+            var_file: app_python.yml
+            playbook: deploy-python.yml
+            port: 8000
+            image: info-service-python
+            container_port: 8000
+
+          - name: Go
+            var_file: app_bonus.yml
+            playbook: deploy_bonus.yml
+            port: 8001
+            image: info-service-go
+            container_port: 8080
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
+      - name: Install Ansible
+        run: |
+          pip install ansible
+          ansible-galaxy collection install community.docker
+
+      - name: Setup Ansible Vault
+        run: |
+          echo "${{ secrets.ANSIBLE_VAULT_PASSWORD }}" > /tmp/vault_pass
+          chmod 600 /tmp/vault_pass
+
+      - name: Setup roles
+        run: |
+          mkdir -p ansible/playbooks/roles
+          cp -r ansible/roles/* ansible/playbooks/roles/ 2>/dev/null || true
+          cp -r roles/* ansible/playbooks/roles/ 2>/dev/null || true
+
+      - name: Deploy ${{ matrix.app.name }}
+        run: |
+          cd ansible
+          export ANSIBLE_ROLES_PATH="$GITHUB_WORKSPACE/ansible/roles"
+
+          ansible-playbook playbooks/deploy-python.yml --syntax-check\
+            --vault-password-file /tmp/vault_pass
+
+          ansible-playbook playbooks/deploy-bonus.yml --syntax-check\
+            --vault-password-file /tmp/vault_pass
+
+      - name: Cleanup
+        run: rm -f /tmp/vault_pass
+        if: always()

.github/workflows/ansible-deploy-python.yml

@@ -0,0 +1,100 @@
+name: Ansible Deployment Python App
+
+on:
+  push:
+    branches: [ main, master, lab06 ]
+    paths:
+      - 'ansible/vars/app_python.yml'
+      - 'ansible/playbooks/deploy-python.yml'
+      - 'ansible/roles/web_app/tasks/**'
+      - 'ansible/roles/web_app/templates/**'
+      - 'ansible/roles/web_app/defaults/**'
+      - '.github/workflows/ansible-deploy-python.yml'
+  pull_request:
+    branches: [ main, master, lab06 ]
+    paths:
+      - 'ansible/vars/app_python.yml'
+      - 'ansible/playbooks/deploy_python.yml'
+
+env:
+  ANSIBLE_CONFIG: ansible/ansible.cfg
+  ANSIBLE_ROLES_PATH: ${{ github.workspace }}/ansible/roles
+  ANSIBLE_HOST_KEY_CHECKING: False
+  ANSIBLE_SSH_ARGS: '-o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null'
+  VM_HOST: ${{ secrets.VM_HOST }}
+  VM_USER: ${{ secrets.VM_USER }}
+  APP_NAME: 'devops-python'
+
+jobs:
+  lint:
+    name: Lint Python App Ansible
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+          cache: 'pip'
+
+      - name: Install dependencies
+        run: |
+          pip install ansible ansible-lint
+          ansible-galaxy collection install community.docker
+
+      - name: Syntax check Python playbook
+        run: |
+          cd ansible
+          export ANSIBLE_ROLES_PATH="$GITHUB_WORKSPACE/ansible/roles"
+          ansible-playbook playbooks/deploy-python.yml --syntax-check
+
+      - name: Run ansible-lint
+        run: |
+          cd ansible
+          ansible-lint playbooks/deploy-python.yml
+
+  deploy:
+    name: Deploy Python App
+    needs: lint
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
+      - name: Install Ansible
+        run: |
+          pip install ansible
+          ansible-galaxy collection install community.docker
+
+      - name: Setup Ansible Vault
+        run: |
+          echo "${{ secrets.ANSIBLE_VAULT_PASSWORD }}" > /tmp/vault_pass
+          chmod 600 /tmp/vault_pass
+
+      - name: Setup roles
+        run: |
+          mkdir -p ansible/playbooks/roles
+          cp -r ansible/roles/* ansible/playbooks/roles/ 2>/dev/null || true
+          cp -r roles/* ansible/playbooks/roles/ 2>/dev/null || true
+
+      - name: Deploy Python
+        run: |
+          cd ansible
+          export ANSIBLE_ROLES_PATH="$GITHUB_WORKSPACE/ansible/roles"
+          export ANSIBLE_HOST_KEY_CHECKING=False
+          ansible-playbook playbooks/deploy-python.yml --syntax-check\
+            --vault-password-file /tmp/vault_pass
+
+      - name: Cleanup
+        run: rm -f /tmp/vault_pass
+        if: always()

.github/workflows/ansible-deploy.yml

@@ -0,0 +1,78 @@
+name: Ansible Deployment
+
+on:
+  push:
+    branches: [ main, master, lab06 ]
+    paths:
+      - 'ansible/**'
+      - '.github/workflows/ansible-deploy.yml'
+  pull_request:
+    branches: [ main, master, lab06 ]
+    paths:
+      - 'ansible/**'
+
+env:
+  ANSIBLE_CONFIG: ansible/ansible.cfg
+  ANSIBLE_ROLES_PATH: ansible/roles
+  ANSIBLE_HOST_KEY_CHECKING: False
+  ANSIBLE_SSH_ARGS: '-o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null'
+  VM_HOST: ${{ secrets.VM_HOST }}
+  VM_USER: ${{ secrets.VM_USER }}
+
+jobs:
+  lint:
+    name: Ansible Lint
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+          cache: 'pip'
+
+      - name: Install dependencies
+        run: |
+          pip install ansible ansible-lint
+
+      - name: Run ansible-lint
+        run: |
+          cd ansible
+          ansible-lint playbooks/*.yml
+
+
+
+  deploy:
+    name: Deploy Application
+    needs: lint
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup SSH
+        uses: webfactory/ssh-agent@v0.9.0
+        with:
+          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
+
+      - name: Setup Ansible Vault
+        run: |
+          echo "${{ secrets.ANSIBLE_VAULT_PASSWORD }}" > /tmp/vault_pass
+          chmod 600 /tmp/vault_pass
+
+      - name: Run Ansible playbook
+        run: |
+          export ANSIBLE_ROLES_PATH="$GITHUB_WORKSPACE/ansible/roles"
+          export ANSIBLE_HOST_KEY_CHECKING=False
+          export ANSIBLE_SSH_ARGS="-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null"
+          ansible-playbook ansible/playbooks/deploy.yml --syntax-check\
+            --vault-password-file /tmp/vault_pass \
+
+      - name: Cleanup
+        run: rm -f /tmp/vault_pass
+        if: always()