Lab9

.github/workflows/ci.yml

@@ -0,0 +1,98 @@
+
+name: CI
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  build-and-test:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v3
+
+    - name: Set up Python
+      uses: actions/setup-python@v4
+      with:
+        python-version: '3.x'
+        cache: 'pip'
+
+    - name: Cache Python dependencies
+      uses: actions/cache@v3
+      with:
+        path: ~/.cache/pip
+        key: ${{ runner.os }}-pip-${{ hashFiles('app_python/requirements.txt') }}
+        restore-keys: |
+          ${{ runner.os }}-pip-
+
+    - name: Install dependencies
+      run: |
+        python -m pip install --upgrade pip
+        pip install flake8 pytest requests
+
+    - name: Run linters
+      run: |
+        flake8 app_python/ --count --select=E9,F63,F7,F82 --show-source --statistics
+        flake8 app_python/ --count --exit-zero --max-complexity=10 --max-line-length=127 --statistics
+
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v2
+
+    - name: Cache Docker layers
+      uses: actions/cache@v3
+      with:
+        path: /tmp/.buildx-cache
+        key: ${{ runner.os }}-buildx-${{ github.sha }}
+        restore-keys: |
+          ${{ runner.os }}-buildx-
+
+    - name: Build docker container
+      uses: docker/build-push-action@v4
+      with:
+        context: app_python/
+        load: true
+        tags: flask-time-server:latest
+        cache-from: type=local,src=/tmp/.buildx-cache
+        cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max
+
+    - name: Move cache
+      run: |
+        rm -rf /tmp/.buildx-cache
+        mv /tmp/.buildx-cache-new /tmp/.buildx-cache
+
+    - name: Start docker container
+      run: |
+        docker run -d -p 5000:5000 flask-time-server:latest
+        sleep 10
+
+    - name: Run tests
+      run: |
+        pytest app_python/tests/*.py
+
+    - name: Login to Docker Hub
+      if: github.event_name != 'pull_request'
+      uses: docker/login-action@v2
+      with:
+        username: ${{ secrets.DOCKERHUB_USERNAME }}
+        password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+    - name: Push Docker image
+      if: github.event_name != 'pull_request'
+      run: |
+        IMAGE_ID=${{ secrets.DOCKERHUB_USERNAME }}/flask-time-server
+
+        VERSION=$(echo "${{ github.sha }}" | cut -c1-7)
+
+        docker tag flask-time-server $IMAGE_ID:$VERSION
+        docker tag flask-time-server $IMAGE_ID:latest
+        docker push $IMAGE_ID:$VERSION
+        docker push $IMAGE_ID:latest
+
+    - name: Clean up
+      run: |
+        docker ps -q | xargs -r docker stop
+        docker ps -aq | xargs -r docker rm
+

.gitignore

@@ -0,0 +1,7 @@
+venv
+__pycache__
+*tfstate*
+key.json
+*tfvars*
+.terraform/
+*.hcl

ansible/ANSIBLE.md

@@ -0,0 +1,142 @@
+# Ansible lab
+
+## Command output for docker role
+
+### ansible-playbook playbooks/dev/main.yml --diff
+
+```
+PLAY [Install Docker] *************************************************************
+
+TASK [Gathering Facts] ************************************************************
+[WARNING]: Platform linux on host default_host is using the discovered Python
+interpreter at /usr/bin/python3.12, but future installation of another Python
+interpreter could change the meaning of that path. See
+https://docs.ansible.com/ansible-
+core/2.17/reference_appendices/interpreter_discovery.html for more information.
+ok: [default_host]
+
+TASK [docker : include_tasks] *****************************************************
+included: /home/qexik/S24-core-course-labs/ansible/roles/docker/tasks/install_docker.yml for default_host
+
+TASK [docker : Install apt dependencies] ******************************************
+ok: [default_host]
+
+TASK [docker : Add Docker’s GPG key] **********************************************
+ok: [default_host]
+
+TASK [docker : Add Docker apt repository] *****************************************
+ok: [default_host]
+
+TASK [docker : Install Docker] ****************************************************
+ok: [default_host]
+
+TASK [docker : include_tasks] *****************************************************
+included: /home/qexik/S24-core-course-labs/ansible/roles/docker/tasks/install_compose.yml for default_host
+
+TASK [docker : Install compose via apt] *******************************************
+The following additional packages will be installed:
+  python3-compose python3-docker python3-dockerpty python3-docopt
+  python3-dotenv python3-packaging python3-texttable python3-websocket
+Recommended packages:
+  docker.io
+The following NEW packages will be installed:
+  docker-compose python3-compose python3-docker python3-dockerpty
+  python3-docopt python3-dotenv python3-packaging python3-texttable
+  python3-websocket
+0 upgraded, 9 newly installed, 0 to remove and 17 not upgraded.
+changed: [default_host]
+
+PLAY RECAP ************************************************************************
+default_host               : ok=8    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
+```
+
+### ansible-inventory -i inventory/default_yandex_compute.yml --list
+
+```
+{
+    "_meta": {
+        "hostvars": {
+            "default_host": {
+                "ansible_host": "89.169.138.171",
+                "ansible_user": "ubuntu"
+            }
+        }
+    },
+    "all": {
+        "children": [
+            "ungrouped",
+            "myhosts"
+        ]
+    },
+    "myhosts": {
+        "hosts": [
+            "default_host"
+        ]
+    }
+}
+```
+
+## Command output for web_app role
+
+### ansible-playbook playbooks/dev/main.yml --diff
+
+```
+PLAY [Install flask time server] **************************************************
+
+TASK [Gathering Facts] ************************************************************
+[WARNING]: Platform linux on host default_host is using the discovered Python
+interpreter at /usr/bin/python3.12, but future installation of another Python
+interpreter could change the meaning of that path. See
+https://docs.ansible.com/ansible-
+core/2.17/reference_appendices/interpreter_discovery.html for more information.
+ok: [default_host]
+
+TASK [docker : include_tasks] *****************************************************
+included: /home/qexik/S24-core-course-labs/ansible/roles/docker/tasks/install_docker.yml for default_host
+
+TASK [docker : Install apt dependencies] ******************************************
+ok: [default_host]
+
+TASK [docker : Add Docker’s GPG key] **********************************************
+ok: [default_host]
+
+TASK [docker : Add Docker apt repository] *****************************************
+ok: [default_host]
+
+TASK [docker : Install Docker] ****************************************************
+ok: [default_host]
+
+TASK [docker : include_tasks] *****************************************************
+included: /home/qexik/S24-core-course-labs/ansible/roles/docker/tasks/install_compose.yml for default_host
+
+TASK [docker : Install compose via apt] *******************************************
+ok: [default_host]
+
+TASK [web_app : Create app directory] *********************************************
+ok: [default_host]
+
+TASK [web_app : Docker compose] ***************************************************
+--- before
++++ after: /home/qexik/.ansible/tmp/ansible-local-52812vb7z8_f/tmpl1bhyw13/docker-compose.yml.j2
+@@ -0,0 +1,6 @@
++services:
++  web_app:
++    image: qexik1/flask-time-server:latest
++    ports:
++      - 5000:5000
++
+
+changed: [default_host]
+
+TASK [web_app : Start the app] ****************************************************
+changed: [default_host]
+
+TASK [web_app : Remove build] *****************************************************
+skipping: [default_host]
+
+TASK [web_app : Remove source] ****************************************************
+skipping: [default_host]
+
+PLAY RECAP ************************************************************************
+default_host               : ok=11   changed=2    unreachable=0    failed=0    skipped=2    rescued=0    ignored=0
+```

ansible/ansible.cfg

@@ -0,0 +1,13 @@
+[defaults]
+inventory = inventory
+remote_user = ubuntu
+host_key_checking = false
+playbook_dir = playbooks
+roles_path = roles
+
+[privelege_escalation]
+become = true
+become_method = sudo
+become_user = ubuntu
+become_ask_pass = false
+

ansible/inventory/default_yandex_compute.yml

@@ -0,0 +1,6 @@
+myhosts:
+  hosts:
+    default_host:
+      ansible_host: 89.169.138.171
+      ansible_user: ubuntu
+

ansible/playbooks/dev/main.yml

@@ -0,0 +1,7 @@
+- name: Install flask time server
+  hosts: all
+  become: true
+
+  roles:
+    - web_app
+

ansible/roles/docker/README.md

@@ -0,0 +1,24 @@
+# Ansible docker role
+
+The role installs docker on the target machine.
+
+# Requirements
+
+## Control node requirements
+
+Host requirements are described in the [docs](https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html#control-node-requirements).
+
+Basically, any UNIX machine with Python installed will suffice.
+
+## Managed node requirements
+
+Basic managed node requirements are described in the [docs](https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html#managed-node-requirements).
+
+Current implementation also assumes that apt is present. Therefore, docker could only be installed on debian-based distros using this role.
+
+# Usage
+
+```bash
+ansible-playbook playbooks/dev/main.yml
+```
+

ansible/roles/docker/handlers/main.yml

@@ -0,0 +1,6 @@
+---
+- name: Restart docker
+  ansible.builtin.service:
+    name: docker
+    state: restarted
+

ansible/roles/docker/tasks/install_compose.yml

@@ -0,0 +1,8 @@
+---
+- name: Install compose via apt
+  ansible.builtin.apt:
+    name:
+      - docker-compose
+    state: present
+    update_cache: yes
+

ansible/roles/docker/tasks/install_docker.yml

@@ -0,0 +1,28 @@
+---
+- name: Install apt dependencies
+  ansible.builtin.apt:
+    name:
+      - apt-transport-https
+      - ca-certificates
+      - curl
+      - software-properties-common
+    state: present
+    update_cache: yes
+
+- name: Add Docker’s GPG key
+  ansible.builtin.apt_key:
+    url: "https://download.docker.com/linux/ubuntu/gpg"
+    state: present
+
+- name: Add Docker apt repository
+  ansible.builtin.apt_repository:
+    repo: deb [arch=amd64] https://download.docker.com/linux/ubuntu {{ ansible_distribution_release }} stable
+    state: present
+
+- name: Install Docker
+  ansible.builtin.apt:
+    name: docker-ce
+    state: present
+    update_cache: yes
+  notify: Restart docker
+

ansible/roles/docker/tasks/main.yml

@@ -0,0 +1,4 @@
+---
+- include_tasks: install_docker.yml
+- include_tasks: install_compose.yml
+

ansible/roles/web_app/README.md

@@ -0,0 +1,17 @@
+# Ansible web_app role
+
+Install qexik1/flask-time-server docker image and run it on port 5000.
+
+# Requirements
+
+## Control node requirements
+
+Host requirements are described in the [docs](https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html#control-node-requirements).
+
+Basically, any UNIX machine with Python installed will suffice.
+
+## Managed node requirements
+
+Basic managed node requirements are described in the [docs](https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html#managed-node-requirements).
+
+Current implementation also assumes that apt is present. Therefore, docker could only be installed on debian-based distros using this role.

ansible/roles/web_app/defaults/main.yml

@@ -0,0 +1,7 @@
+docker_image: "qexik1/flask-time-server"
+image_tag: "latest"
+container_name: "time-server"
+app_directory: "app_python"
+port_forwarding: "5000:5000"
+wipe: false
+

ansible/roles/web_app/meta/main.yml

@@ -0,0 +1,3 @@
+dependencies:
+  - role: docker
+

ansible/roles/web_app/tasks/0-wipe.yml

@@ -0,0 +1,13 @@
+---
+- name: Remove build
+  community.docker.docker_compose_v2:
+    project_src: "{{ app_directory }}"
+    remove_images: all
+    remove_volumes: true
+    state: absent
+
+- name: Remove source
+  ansible.builtin.file:
+    path: "{{ app_directory }}/"
+    state: absent
+