Compare commits

...

No commits in common. "main" and "docs" have entirely different histories.
main ... docs

30 changed files with 335 additions and 1279 deletions

View File

@ -1,161 +0,0 @@
local PipelineLinting = {
kind: 'pipeline',
name: 'linting',
platform: {
os: 'linux',
arch: 'amd64',
},
steps: [
{
name: 'ansible-later',
image: 'thegeeklab/ansible-later',
commands: [
'ansible-later',
],
},
{
name: 'python-format',
image: 'python:3.11',
environment: {
PY_COLORS: 1,
},
commands: [
'pip install -qq yapf',
'[ ! -z "$(find . -type f -name *.py)" ] && yapf -rd ./',
],
},
{
name: 'python-flake8',
image: 'python:3.11',
environment: {
PY_COLORS: 1,
},
commands: [
'pip install -qq flake8',
'flake8',
],
},
],
trigger: {
ref: ['refs/heads/main', 'refs/tags/**', 'refs/pull/**'],
},
};
local PipelineDeployment(scenario='centos7') = {
kind: 'pipeline',
name: 'testing-' + scenario,
platform: {
os: 'linux',
arch: 'amd64',
},
concurrency: {
limit: 1,
},
workspace: {
base: '/drone/src',
path: '${DRONE_REPO_NAME}',
},
steps: [
{
name: 'ansible-molecule',
image: 'thegeeklab/molecule:4',
environment: {
HCLOUD_TOKEN: { from_secret: 'hcloud_token' },
},
commands: [
'molecule test -s ' + scenario,
],
},
],
depends_on: [
'linting',
],
trigger: {
ref: ['refs/heads/main', 'refs/tags/**', 'refs/pull/**'],
},
};
local PipelineDocumentation = {
kind: 'pipeline',
name: 'documentation',
platform: {
os: 'linux',
arch: 'amd64',
},
steps: [
{
name: 'generate',
image: 'thegeeklab/ansible-doctor',
environment: {
ANSIBLE_DOCTOR_LOG_LEVEL: 'INFO',
ANSIBLE_DOCTOR_FORCE_OVERWRITE: true,
ANSIBLE_DOCTOR_EXCLUDE_FILES: 'molecule/',
ANSIBLE_DOCTOR_TEMPLATE: 'hugo-book',
ANSIBLE_DOCTOR_ROLE_NAME: '${DRONE_REPO_NAME#*.}',
ANSIBLE_DOCTOR_OUTPUT_DIR: '_docs/',
},
},
{
name: 'publish',
image: 'plugins/gh-pages',
settings: {
remote_url: 'https://gitea.rknet.org/ansible/${DRONE_REPO_NAME}',
netrc_machine: 'gitea.rknet.org',
username: { from_secret: 'gitea_username' },
password: { from_secret: 'gitea_token' },
pages_directory: '_docs/',
target_branch: 'docs',
},
when: {
ref: ['refs/heads/main'],
},
},
],
trigger: {
ref: ['refs/heads/main', 'refs/tags/**', 'refs/pull/**'],
},
depends_on: [
'testing-centos7',
'testing-rocky8',
],
};
local PipelineNotification = {
kind: 'pipeline',
name: 'notification',
platform: {
os: 'linux',
arch: 'amd64',
},
clone: {
disable: true,
},
steps: [
{
name: 'matrix',
image: 'thegeeklab/drone-matrix',
settings: {
homeserver: { from_secret: 'matrix_homeserver' },
roomid: { from_secret: 'matrix_roomid' },
template: 'Status: **{{ .Build.Status }}**<br/> Build: [{{ .Repo.Owner }}/{{ .Repo.Name }}]({{ .Build.Link }}){{ if .Build.Branch }} ({{ .Build.Branch }}){{ end }} by {{ .Commit.Author }}<br/> Message: {{ .Commit.Message.Title }}',
username: { from_secret: 'matrix_username' },
password: { from_secret: 'matrix_password' },
},
},
],
depends_on: [
'documentation',
],
trigger: {
status: ['success', 'failure'],
ref: ['refs/heads/main', 'refs/tags/**'],
},
};
[
PipelineLinting,
PipelineDeployment(scenario='centos7'),
PipelineDeployment(scenario='rocky8'),
PipelineDocumentation,
PipelineNotification,
]

View File

@ -1,187 +0,0 @@
---
kind: pipeline
name: linting
platform:
os: linux
arch: amd64
steps:
- name: ansible-later
image: thegeeklab/ansible-later
commands:
- ansible-later
- name: python-format
image: python:3.11
commands:
- pip install -qq yapf
- "[ ! -z \"$(find . -type f -name *.py)\" ] && yapf -rd ./"
environment:
PY_COLORS: 1
- name: python-flake8
image: python:3.11
commands:
- pip install -qq flake8
- flake8
environment:
PY_COLORS: 1
trigger:
ref:
- refs/heads/main
- refs/tags/**
- refs/pull/**
---
kind: pipeline
name: testing-centos7
platform:
os: linux
arch: amd64
concurrency:
limit: 1
workspace:
base: /drone/src
path: ${DRONE_REPO_NAME}
steps:
- name: ansible-molecule
image: thegeeklab/molecule:4
commands:
- molecule test -s centos7
environment:
HCLOUD_TOKEN:
from_secret: hcloud_token
trigger:
ref:
- refs/heads/main
- refs/tags/**
- refs/pull/**
depends_on:
- linting
---
kind: pipeline
name: testing-rocky8
platform:
os: linux
arch: amd64
concurrency:
limit: 1
workspace:
base: /drone/src
path: ${DRONE_REPO_NAME}
steps:
- name: ansible-molecule
image: thegeeklab/molecule:4
commands:
- molecule test -s rocky8
environment:
HCLOUD_TOKEN:
from_secret: hcloud_token
trigger:
ref:
- refs/heads/main
- refs/tags/**
- refs/pull/**
depends_on:
- linting
---
kind: pipeline
name: documentation
platform:
os: linux
arch: amd64
steps:
- name: generate
image: thegeeklab/ansible-doctor
environment:
ANSIBLE_DOCTOR_EXCLUDE_FILES: molecule/
ANSIBLE_DOCTOR_FORCE_OVERWRITE: true
ANSIBLE_DOCTOR_LOG_LEVEL: INFO
ANSIBLE_DOCTOR_OUTPUT_DIR: _docs/
ANSIBLE_DOCTOR_ROLE_NAME: ${DRONE_REPO_NAME#*.}
ANSIBLE_DOCTOR_TEMPLATE: hugo-book
- name: publish
image: plugins/gh-pages
settings:
netrc_machine: gitea.rknet.org
pages_directory: _docs/
password:
from_secret: gitea_token
remote_url: https://gitea.rknet.org/ansible/${DRONE_REPO_NAME}
target_branch: docs
username:
from_secret: gitea_username
when:
ref:
- refs/heads/main
trigger:
ref:
- refs/heads/main
- refs/tags/**
- refs/pull/**
depends_on:
- testing-centos7
- testing-rocky8
---
kind: pipeline
name: notification
platform:
os: linux
arch: amd64
clone:
disable: true
steps:
- name: matrix
image: thegeeklab/drone-matrix
settings:
homeserver:
from_secret: matrix_homeserver
password:
from_secret: matrix_password
roomid:
from_secret: matrix_roomid
template: "Status: **{{ .Build.Status }}**<br/> Build: [{{ .Repo.Owner }}/{{ .Repo.Name }}]({{ .Build.Link }}){{ if .Build.Branch }} ({{ .Build.Branch }}){{ end }} by {{ .Commit.Author }}<br/> Message: {{ .Commit.Message.Title }}"
username:
from_secret: matrix_username
trigger:
ref:
- refs/heads/main
- refs/tags/**
status:
- success
- failure
depends_on:
- documentation
---
kind: signature
hmac: a85a0f26bfdfed6bfd1a50f09f9eccb82ab305df4935ae0068e1c317037e51b4
...

13
.gitignore vendored
View File

@ -1,13 +0,0 @@
# ---> Ansible
*.retry
plugins
library
# ---> Python
# Byte-compiled / optimized / DLL files
__pycache__/
*.py[cod]
*$py.class
# ---> Docs
/_docs

View File

@ -1,19 +0,0 @@
---
ansible:
custom_modules:
- iptables_raw
- openssl_pkcs12
- proxmox_kvm
- ucr
- corenetworks_dns
- corenetworks_token
rules:
exclude_files:
- molecule/
- "LICENSE*"
- "**/*.md"
- "**/*.ini"
exclude_filter:
- LINT0009

View File

@ -1 +0,0 @@
.drone*

21
LICENSE
View File

@ -1,21 +0,0 @@
MIT License
Copyright (c) 2022 Robert Kaussow <mail@thegeeklab.de>
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is furnished
to do so, subject to the following conditions:
The above copyright notice and this permission notice (including the next
paragraph) shall be included in all copies or substantial portions of the
Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS
OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF
OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

View File

@ -1,10 +0,0 @@
# xoxys.grafana
[![Build Status](https://img.shields.io/drone/build/ansible/xoxys.grafana?logo=drone&server=https%3A%2F%2Fdrone.rknet.org)](https://drone.rknet.org/ansible/xoxys.grafana)
[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg?label=license)](LICENSE)
Setup Grafana observability platform. You can find the full documentation at [https://galaxy.geekdocs.de](https://galaxy.geekdocs.de/roles/cloud/grafana/).
## License
This project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.

View File

@ -1,63 +0,0 @@
---
grafana_packages_extra: []
grafana_instance_name: grafana
grafana_data_dir: /var/lib/grafana
grafana_log_dir: /var/log/grafana
grafana_plugin_dir: "{{ grafana_data_dir }}/plugins"
grafana_bind_ip: 127.0.0.1
grafana_bind_port: 61000
grafana_listen_address: http://localhost
grafana_admin_user: admin
grafana_admin_password: secure
# @var grafana_secret_key:description: Should be replaced by your own secret.
grafana_secret_key: "1234567ABCDEFG"
# @var grafana_db_type:description: >
# Database provider to use. Available options are `mysql`, 'postgres' and `sqlite3`.
# Extended configuration options are only applies to non-sqlite provider.
# @end
grafana_db_type: sqlite3
grafana_db_server: localhost
grafana_db_port: 5432
grafana_db_name: grafana
grafana_db_user: pggrafana
grafana_db_password: secure
grafana_db_ssl_mode: disable
# @var grafana_cache_provider:description: Either `redis`, `memcached' or `database`.
grafana_cache_provider: database
# @var grafana_cache_provider_config:description: >
# Cache connection string options:\
# - `database`: use Grafana's primary database\
# - `redis`: Redis connection URI e.g. `addr=127.0.0.1:6379,pool_size=100,db=0,ssl=false`\
# - `memcache`: Memcache connection URI e.g. `127.0.0.1:11211`\
# @end
# @var grafana_cache_provider_config: $ "_unset_"
# @var grafana_smtp_host: $ "_unset_"
grafana_smtp_from: "grafana@localhost"
grafana_smtp_from_name: "Grafana"
grafana_smtp_port: 587
# @var grafana_smtp_username: $ "_unset_"
# @var grafana_smtp_password: $ "_unset_"
grafana_login_form_enabled: True
grafana_logout_menu_enabled: True
grafana_auth_providers: []
grafana_log_mode:
- console
- file
grafana_log_level: info
grafana_log_providers: []
grafana_datasource_files:
- grafana/datasources/*.yml.j2

View File

@ -1,10 +0,0 @@
---
- name: Restart Grafana
service:
name: grafana-server
state: restarted
daemon_reload: yes
enabled: yes
listen: __grafana_restart
become: True
become_user: root

335
index.md Normal file
View File

@ -0,0 +1,335 @@
---
title: grafana
type: docs
---
[![Source Code](https://img.shields.io/badge/gitea-source%20code-blue?logo=gitea&logoColor=white)](https://gitea.rknet.org/ansible/xoxys.grafana) [![Build Status](https://img.shields.io/drone/build/ansible/xoxys.grafana?logo=drone&server=https%3A%2F%2Fdrone.rknet.org)](https://drone.rknet.org/ansible/xoxys.grafana) [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg?label=license)](https://gitea.rknet.org/ansible/xoxys.grafana/src/branch/main/LICENSE)
Setup [Grafana](https://grafana.com) observability platform.
<!--more-->
- [Default Variables](#default-variables)
- [grafana_admin_password](#grafana_admin_password)
- [grafana_admin_user](#grafana_admin_user)
- [grafana_auth_providers](#grafana_auth_providers)
- [grafana_bind_ip](#grafana_bind_ip)
- [grafana_bind_port](#grafana_bind_port)
- [grafana_cache_provider](#grafana_cache_provider)
- [grafana_cache_provider_config](#grafana_cache_provider_config)
- [grafana_data_dir](#grafana_data_dir)
- [grafana_datasource_files](#grafana_datasource_files)
- [grafana_db_name](#grafana_db_name)
- [grafana_db_password](#grafana_db_password)
- [grafana_db_port](#grafana_db_port)
- [grafana_db_server](#grafana_db_server)
- [grafana_db_ssl_mode](#grafana_db_ssl_mode)
- [grafana_db_type](#grafana_db_type)
- [grafana_db_user](#grafana_db_user)
- [grafana_instance_name](#grafana_instance_name)
- [grafana_listen_address](#grafana_listen_address)
- [grafana_log_dir](#grafana_log_dir)
- [grafana_log_level](#grafana_log_level)
- [grafana_log_mode](#grafana_log_mode)
- [grafana_log_providers](#grafana_log_providers)
- [grafana_login_form_enabled](#grafana_login_form_enabled)
- [grafana_logout_menu_enabled](#grafana_logout_menu_enabled)
- [grafana_packages_extra](#grafana_packages_extra)
- [grafana_plugin_dir](#grafana_plugin_dir)
- [grafana_secret_key](#grafana_secret_key)
- [grafana_smtp_from](#grafana_smtp_from)
- [grafana_smtp_from_name](#grafana_smtp_from_name)
- [grafana_smtp_host](#grafana_smtp_host)
- [grafana_smtp_password](#grafana_smtp_password)
- [grafana_smtp_port](#grafana_smtp_port)
- [grafana_smtp_username](#grafana_smtp_username)
- [Dependencies](#dependencies)
---
## Default Variables
### grafana_admin_password
#### Default value
```YAML
grafana_admin_password: secure
```
### grafana_admin_user
#### Default value
```YAML
grafana_admin_user: admin
```
### grafana_auth_providers
#### Default value
```YAML
grafana_auth_providers: []
```
### grafana_bind_ip
#### Default value
```YAML
grafana_bind_ip: 127.0.0.1
```
### grafana_bind_port
#### Default value
```YAML
grafana_bind_port: 61000
```
### grafana_cache_provider
Either `redis`, `memcached' or `database`.
#### Default value
```YAML
grafana_cache_provider: database
```
### grafana_cache_provider_config
Cache connection string options:
- `database`: use Grafana's primary database
- `redis`: Redis connection URI e.g. `addr=127.0.0.1:6379,pool_size=100,db=0,ssl=false`
- `memcache`: Memcache connection URI e.g. `127.0.0.1:11211`
#### Default value
```YAML
grafana_cache_provider_config: _unset_
```
### grafana_data_dir
#### Default value
```YAML
grafana_data_dir: /var/lib/grafana
```
### grafana_datasource_files
#### Default value
```YAML
grafana_datasource_files:
- grafana/datasources/*.yml.j2
```
### grafana_db_name
#### Default value
```YAML
grafana_db_name: grafana
```
### grafana_db_password
#### Default value
```YAML
grafana_db_password: secure
```
### grafana_db_port
#### Default value
```YAML
grafana_db_port: 5432
```
### grafana_db_server
#### Default value
```YAML
grafana_db_server: localhost
```
### grafana_db_ssl_mode
#### Default value
```YAML
grafana_db_ssl_mode: disable
```
### grafana_db_type
Database provider to use. Available options are `mysql`, 'postgres' and `sqlite3`. Extended configuration options are only applies to non-sqlite provider.
#### Default value
```YAML
grafana_db_type: sqlite3
```
### grafana_db_user
#### Default value
```YAML
grafana_db_user: pggrafana
```
### grafana_instance_name
#### Default value
```YAML
grafana_instance_name: grafana
```
### grafana_listen_address
#### Default value
```YAML
grafana_listen_address: http://localhost
```
### grafana_log_dir
#### Default value
```YAML
grafana_log_dir: /var/log/grafana
```
### grafana_log_level
#### Default value
```YAML
grafana_log_level: info
```
### grafana_log_mode
#### Default value
```YAML
grafana_log_mode:
- console
- file
```
### grafana_log_providers
#### Default value
```YAML
grafana_log_providers: []
```
### grafana_login_form_enabled
#### Default value
```YAML
grafana_login_form_enabled: true
```
### grafana_logout_menu_enabled
#### Default value
```YAML
grafana_logout_menu_enabled: true
```
### grafana_packages_extra
#### Default value
```YAML
grafana_packages_extra: []
```
### grafana_plugin_dir
#### Default value
```YAML
grafana_plugin_dir: '{{ grafana_data_dir }}/plugins'
```
### grafana_secret_key
Should be replaced by your own secret.
#### Default value
```YAML
grafana_secret_key: 1234567ABCDEFG
```
### grafana_smtp_from
#### Default value
```YAML
grafana_smtp_from: grafana@localhost
```
### grafana_smtp_from_name
#### Default value
```YAML
grafana_smtp_from_name: Grafana
```
### grafana_smtp_host
#### Default value
```YAML
grafana_smtp_host: _unset_
```
### grafana_smtp_password
#### Default value
```YAML
grafana_smtp_password: _unset_
```
### grafana_smtp_port
#### Default value
```YAML
grafana_smtp_port: 587
```
### grafana_smtp_username
#### Default value
```YAML
grafana_smtp_username: _unset_
```
## Dependencies
None.

View File

@ -1,23 +0,0 @@
# Standards: 0.2
---
galaxy_info:
# @meta author:value: [Robert Kaussow](https://gitea.rknet.org/xoxys)
author: "Robert Kaussow <mail@thegeeklab.de>"
namespace: xoxys
role_name: grafana
# @meta description: >
# [![Source Code](https://img.shields.io/badge/gitea-source%20code-blue?logo=gitea&logoColor=white)](https://gitea.rknet.org/ansible/xoxys.grafana)
# [![Build Status](https://img.shields.io/drone/build/ansible/xoxys.grafana?logo=drone&server=https%3A%2F%2Fdrone.rknet.org)](https://drone.rknet.org/ansible/xoxys.grafana)
# [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg?label=license)](https://gitea.rknet.org/ansible/xoxys.grafana/src/branch/main/LICENSE)
#
# Setup [Grafana](https://grafana.com) observability platform.
# @end
description: Setup Grafana observability platform
license: MIT
min_ansible_version: 2.10
platforms:
- name: EL
versions:
- 7
galaxy_tags: []
dependencies: []

View File

@ -1,5 +0,0 @@
---
- name: Converge
hosts: all
roles:
- role: xoxys.grafana

View File

@ -1,120 +0,0 @@
---
- name: Create
hosts: localhost
connection: local
gather_facts: false
no_log: "{{ molecule_no_log }}"
vars:
ssh_port: 22
ssh_user: root
ssh_path: "{{ lookup('env', 'MOLECULE_EPHEMERAL_DIRECTORY') }}/ssh_key"
tasks:
- name: Create SSH key
user:
name: "{{ lookup('env', 'USER') }}"
generate_ssh_key: true
ssh_key_file: "{{ ssh_path }}"
force: true
register: generated_ssh_key
- name: Register the SSH key name
set_fact:
ssh_key_name: "molecule-generated-{{ 12345 | random | to_uuid }}"
- name: Register SSH key for test instance(s)
hcloud_ssh_key:
name: "{{ ssh_key_name }}"
public_key: "{{ generated_ssh_key.ssh_public_key }}"
state: present
- name: Create molecule instance(s)
hcloud_server:
name: "{{ item.name }}"
server_type: "{{ item.server_type }}"
ssh_keys:
- "{{ ssh_key_name }}"
image: "{{ item.image }}"
location: "{{ item.location | default(omit) }}"
datacenter: "{{ item.datacenter | default(omit) }}"
user_data: "{{ item.user_data | default(omit) }}"
api_token: "{{ lookup('env', 'HCLOUD_TOKEN') }}"
state: present
register: server
loop: "{{ molecule_yml.platforms }}"
async: 7200
poll: 0
- name: Wait for instance(s) creation to complete
async_status:
jid: "{{ item.ansible_job_id }}"
register: hetzner_jobs
until: hetzner_jobs.finished
retries: 300
loop: "{{ server.results }}"
- name: Create volume(s)
hcloud_volume:
name: "{{ item.name }}"
server: "{{ item.name }}"
location: "{{ item.location | default(omit) }}"
size: "{{ item.volume_size | default(10) }}"
api_token: "{{ lookup('env', 'HCLOUD_TOKEN') }}"
state: "present"
loop: "{{ molecule_yml.platforms }}"
when: item.volume | default(False) | bool
register: volumes
async: 7200
poll: 0
- name: Wait for volume(s) creation to complete
async_status:
jid: "{{ item.ansible_job_id }}"
register: hetzner_volumes
until: hetzner_volumes.finished
retries: 300
when: volumes.changed
loop: "{{ volumes.results }}"
# Mandatory configuration for Molecule to function.
- name: Populate instance config dict
set_fact:
instance_conf_dict:
{
"instance": "{{ item.hcloud_server.name }}",
"ssh_key_name": "{{ ssh_key_name }}",
"address": "{{ item.hcloud_server.ipv4_address }}",
"user": "{{ ssh_user }}",
"port": "{{ ssh_port }}",
"identity_file": "{{ ssh_path }}",
"volume": "{{ item.item.item.volume | default(False) | bool }}",
}
loop: "{{ hetzner_jobs.results }}"
register: instance_config_dict
when: server.changed | bool
- name: Convert instance config dict to a list
set_fact:
instance_conf: "{{ instance_config_dict.results | map(attribute='ansible_facts.instance_conf_dict') | list }}"
when: server.changed | bool
- name: Dump instance config
copy:
content: |
# Molecule managed
{{ instance_conf | to_nice_yaml(indent=2) }}
dest: "{{ molecule_instance_config }}"
when: server.changed | bool
- name: Wait for SSH
wait_for:
port: "{{ ssh_port }}"
host: "{{ item.address }}"
search_regex: SSH
delay: 10
loop: "{{ lookup('file', molecule_instance_config) | from_yaml }}"
- name: Wait for VM to settle down
pause:
seconds: 30

View File

@ -1,78 +0,0 @@
---
- name: Destroy
hosts: localhost
connection: local
gather_facts: false
no_log: "{{ molecule_no_log }}"
tasks:
- name: Check existing instance config file
stat:
path: "{{ molecule_instance_config }}"
register: cfg
- name: Populate the instance config
set_fact:
instance_conf: "{{ (lookup('file', molecule_instance_config) | from_yaml) if cfg.stat.exists else [] }}"
- name: Destroy molecule instance(s)
hcloud_server:
name: "{{ item.instance }}"
api_token: "{{ lookup('env', 'HCLOUD_TOKEN') }}"
state: absent
register: server
loop: "{{ instance_conf }}"
async: 7200
poll: 0
- name: Wait for instance(s) deletion to complete
async_status:
jid: "{{ item.ansible_job_id }}"
register: hetzner_jobs
until: hetzner_jobs.finished
retries: 300
loop: "{{ server.results }}"
- pause:
seconds: 5
- name: Destroy volume(s)
hcloud_volume:
name: "{{ item.instance }}"
server: "{{ item.instance }}"
api_token: "{{ lookup('env', 'HCLOUD_TOKEN') }}"
state: "absent"
register: volumes
loop: "{{ instance_conf }}"
when: item.volume | default(False) | bool
async: 7200
poll: 0
- name: Wait for volume(s) deletion to complete
async_status:
jid: "{{ item.ansible_job_id }}"
register: hetzner_volumes
until: hetzner_volumes.finished
retries: 300
when: volumes.changed
loop: "{{ volumes.results }}"
- name: Remove registered SSH key
hcloud_ssh_key:
name: "{{ instance_conf[0].ssh_key_name }}"
state: absent
when: (instance_conf | default([])) | length > 0
# Mandatory configuration for Molecule to function.
- name: Populate instance config
set_fact:
instance_conf: {}
- name: Dump instance config
copy:
content: |
# Molecule managed
{{ instance_conf | to_nice_yaml(indent=2) }}
dest: "{{ molecule_instance_config }}"
when: server.changed | bool

View File

@ -1,24 +0,0 @@
---
dependency:
name: galaxy
options:
role-file: molecule/requirements.yml
requirements-file: molecule/requirements.yml
env:
ANSIBLE_GALAXY_DISPLAY_PROGRESS: "false"
driver:
name: delegated
platforms:
- name: centos7-grafana
image: centos-7
server_type: cx11
lint: |
/usr/local/bin/flake8
provisioner:
name: ansible
env:
ANSIBLE_FILTER_PLUGINS: ${ANSIBLE_FILTER_PLUGINS:-./plugins/filter}
ANSIBLE_LIBRARY: ${ANSIBLE_LIBRARY:-./library}
log: False
verifier:
name: testinfra

View File

@ -1,15 +0,0 @@
---
- name: Prepare
hosts: all
gather_facts: false
tasks:
- name: Bootstrap python for Ansible
raw: |
command -v python3 python || (
(test -e /usr/bin/dnf && sudo dnf install -y python3) ||
(test -e /usr/bin/apt && (apt -y update && apt install -y python-minimal)) ||
(test -e /usr/bin/yum && sudo yum -y -qq install python3) ||
echo "Warning: Python not boostrapped due to unknown platform."
)
become: true
changed_when: false

View File

@ -1,18 +0,0 @@
import os
import testinfra.utils.ansible_runner
testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(
os.environ["MOLECULE_INVENTORY_FILE"]
).get_hosts("all")
def test_grafana_running_and_enabled(host):
grafana = host.service("grafana-server")
assert grafana.is_running
assert grafana.is_enabled
def test_grafana_socket(host):
# Verify the socket is listening for HTTP traffic
assert host.socket("tcp://127.0.0.1:61000").is_listening

View File

@ -1 +0,0 @@
rocky8

View File

@ -1,3 +0,0 @@
[pytest]
filterwarnings =
ignore::DeprecationWarning

View File

@ -1,6 +0,0 @@
---
collections:
- name: https://gitea.rknet.org/ansible/xoxys.general/releases/download/v2.1.1/xoxys-general-2.1.1.tar.gz
- name: community.general
roles: []

View File

@ -1,5 +0,0 @@
---
- name: Converge
hosts: all
roles:
- role: xoxys.grafana

View File

@ -1,120 +0,0 @@
---
- name: Create
hosts: localhost
connection: local
gather_facts: false
no_log: "{{ molecule_no_log }}"
vars:
ssh_port: 22
ssh_user: root
ssh_path: "{{ lookup('env', 'MOLECULE_EPHEMERAL_DIRECTORY') }}/ssh_key"
tasks:
- name: Create SSH key
user:
name: "{{ lookup('env', 'USER') }}"
generate_ssh_key: true
ssh_key_file: "{{ ssh_path }}"
force: true
register: generated_ssh_key
- name: Register the SSH key name
set_fact:
ssh_key_name: "molecule-generated-{{ 12345 | random | to_uuid }}"
- name: Register SSH key for test instance(s)
hcloud_ssh_key:
name: "{{ ssh_key_name }}"
public_key: "{{ generated_ssh_key.ssh_public_key }}"
state: present
- name: Create molecule instance(s)
hcloud_server:
name: "{{ item.name }}"
server_type: "{{ item.server_type }}"
ssh_keys:
- "{{ ssh_key_name }}"
image: "{{ item.image }}"
location: "{{ item.location | default(omit) }}"
datacenter: "{{ item.datacenter | default(omit) }}"
user_data: "{{ item.user_data | default(omit) }}"
api_token: "{{ lookup('env', 'HCLOUD_TOKEN') }}"
state: present
register: server
loop: "{{ molecule_yml.platforms }}"
async: 7200
poll: 0
- name: Wait for instance(s) creation to complete
async_status:
jid: "{{ item.ansible_job_id }}"
register: hetzner_jobs
until: hetzner_jobs.finished
retries: 300
loop: "{{ server.results }}"
- name: Create volume(s)
hcloud_volume:
name: "{{ item.name }}"
server: "{{ item.name }}"
location: "{{ item.location | default(omit) }}"
size: "{{ item.volume_size | default(10) }}"
api_token: "{{ lookup('env', 'HCLOUD_TOKEN') }}"
state: "present"
loop: "{{ molecule_yml.platforms }}"
when: item.volume | default(False) | bool
register: volumes
async: 7200
poll: 0
- name: Wait for volume(s) creation to complete
async_status:
jid: "{{ item.ansible_job_id }}"
register: hetzner_volumes
until: hetzner_volumes.finished
retries: 300
when: volumes.changed
loop: "{{ volumes.results }}"
# Mandatory configuration for Molecule to function.
- name: Populate instance config dict
set_fact:
instance_conf_dict:
{
"instance": "{{ item.hcloud_server.name }}",
"ssh_key_name": "{{ ssh_key_name }}",
"address": "{{ item.hcloud_server.ipv4_address }}",
"user": "{{ ssh_user }}",
"port": "{{ ssh_port }}",
"identity_file": "{{ ssh_path }}",
"volume": "{{ item.item.item.volume | default(False) | bool }}",
}
loop: "{{ hetzner_jobs.results }}"
register: instance_config_dict
when: server.changed | bool
- name: Convert instance config dict to a list
set_fact:
instance_conf: "{{ instance_config_dict.results | map(attribute='ansible_facts.instance_conf_dict') | list }}"
when: server.changed | bool
- name: Dump instance config
copy:
content: |
# Molecule managed
{{ instance_conf | to_nice_yaml(indent=2) }}
dest: "{{ molecule_instance_config }}"
when: server.changed | bool
- name: Wait for SSH
wait_for:
port: "{{ ssh_port }}"
host: "{{ item.address }}"
search_regex: SSH
delay: 10
loop: "{{ lookup('file', molecule_instance_config) | from_yaml }}"
- name: Wait for VM to settle down
pause:
seconds: 30

View File

@ -1,78 +0,0 @@
---
- name: Destroy
hosts: localhost
connection: local
gather_facts: false
no_log: "{{ molecule_no_log }}"
tasks:
- name: Check existing instance config file
stat:
path: "{{ molecule_instance_config }}"
register: cfg
- name: Populate the instance config
set_fact:
instance_conf: "{{ (lookup('file', molecule_instance_config) | from_yaml) if cfg.stat.exists else [] }}"
- name: Destroy molecule instance(s)
hcloud_server:
name: "{{ item.instance }}"
api_token: "{{ lookup('env', 'HCLOUD_TOKEN') }}"
state: absent
register: server
loop: "{{ instance_conf }}"
async: 7200
poll: 0
- name: Wait for instance(s) deletion to complete
async_status:
jid: "{{ item.ansible_job_id }}"
register: hetzner_jobs
until: hetzner_jobs.finished
retries: 300
loop: "{{ server.results }}"
- pause:
seconds: 5
- name: Destroy volume(s)
hcloud_volume:
name: "{{ item.instance }}"
server: "{{ item.instance }}"
api_token: "{{ lookup('env', 'HCLOUD_TOKEN') }}"
state: "absent"
register: volumes
loop: "{{ instance_conf }}"
when: item.volume | default(False) | bool
async: 7200
poll: 0
- name: Wait for volume(s) deletion to complete
async_status:
jid: "{{ item.ansible_job_id }}"
register: hetzner_volumes
until: hetzner_volumes.finished
retries: 300
when: volumes.changed
loop: "{{ volumes.results }}"
- name: Remove registered SSH key
hcloud_ssh_key:
name: "{{ instance_conf[0].ssh_key_name }}"
state: absent
when: (instance_conf | default([])) | length > 0
# Mandatory configuration for Molecule to function.
- name: Populate instance config
set_fact:
instance_conf: {}
- name: Dump instance config
copy:
content: |
# Molecule managed
{{ instance_conf | to_nice_yaml(indent=2) }}
dest: "{{ molecule_instance_config }}"
when: server.changed | bool

View File

@ -1,24 +0,0 @@
---
dependency:
name: galaxy
options:
role-file: molecule/requirements.yml
requirements-file: molecule/requirements.yml
env:
ANSIBLE_GALAXY_DISPLAY_PROGRESS: "false"
driver:
name: delegated
platforms:
- name: rocky8-grafana
image: rocky-8
server_type: cx11
lint: |
/usr/local/bin/flake8
provisioner:
name: ansible
env:
ANSIBLE_FILTER_PLUGINS: ${ANSIBLE_FILTER_PLUGINS:-./plugins/filter}
ANSIBLE_LIBRARY: ${ANSIBLE_LIBRARY:-./library}
log: False
verifier:
name: testinfra

View File

@ -1,15 +0,0 @@
---
- name: Prepare
hosts: all
gather_facts: false
tasks:
- name: Bootstrap python for Ansible
raw: |
command -v python3 python || (
(test -e /usr/bin/dnf && sudo dnf install -y python3) ||
(test -e /usr/bin/apt && (apt -y update && apt install -y python-minimal)) ||
(test -e /usr/bin/yum && sudo yum -y -qq install python3) ||
echo "Warning: Python not boostrapped due to unknown platform."
)
become: true
changed_when: false

View File

@ -1,18 +0,0 @@
import os
import testinfra.utils.ansible_runner
testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(
os.environ["MOLECULE_INVENTORY_FILE"]
).get_hosts("all")
def test_grafana_running_and_enabled(host):
grafana = host.service("grafana-server")
assert grafana.is_running
assert grafana.is_enabled
def test_grafana_socket(host):
# Verify the socket is listening for HTTP traffic
assert host.socket("tcp://127.0.0.1:61000").is_listening

View File

@ -1,12 +0,0 @@
[flake8]
ignore = D100, D101, D102, D103, D105, D107, E402, W503
max-line-length = 99
inline-quotes = double
exclude = .git,.tox,__pycache__,build,dist,tests,*.pyc,*.egg-info,.cache,.eggs,env*
[yapf]
based_on_style = google
column_limit = 99
dedent_closing_brackets = true
coalesce_brackets = true
split_before_logical_operator = true

View File

@ -1,2 +0,0 @@
---
- include_tasks: setup.yml

View File

@ -1,65 +0,0 @@
---
- block:
- name: Add Grafana repository
yum_repository:
name: grafana
file: Grafana
description: Grafana Repository
baseurl: https://packages.grafana.com/oss/rpm
gpgkey: https://packages.grafana.com/gpg.key
gpgcheck: yes
- name: Ensure dependencies are installed
package:
name: "{{ item }}"
state: present
loop: "{{ grafana_packages_extra }}"
- name: Ensure Grafana is installed
package:
name: "{{ item }}"
state: present
loop:
- grafana
- name: Ensure Grafana directories exist
file:
path: "{{ item }}"
state: directory
owner: grafana
group: grafana
mode: 0750
loop:
- "{{ grafana_data_dir }}"
- "{{ grafana_log_dir }}"
- "{{ grafana_plugin_dir }}"
- name: Write config file
template:
src: etc/grafana/grafana.ini.j2
dest: /etc/grafana/grafana.ini
owner: root
group: grafana
mode: 0640
notify: __grafana_restart
- name: Copy custom grafana datasource files
template:
src: "{{ item }}"
dest: /etc/grafana/provisioning/datasources/{{ item | basename | splitext | first }}
owner: root
group: grafana
mode: 0640
with_fileglob: "{{ grafana_datasource_files }}"
loop_control:
label: "{{ item | basename | splitext | first }}"
notify: __grafana_restart
- name: Ensure Grafana is up and running
service:
name: grafana-server
daemon_reload: yes
enabled: yes
state: started
become: True
become_user: root

View File

@ -1,162 +0,0 @@
{{ ansible_managed | comment }}
# More informations:
# http://docs.grafana.org/installation/configuration
# https://github.com/grafana/grafana/blob/master/conf/sample.ini
app_mode = production
instance_name = {{ grafana_instance_name }}
[paths]
data = {{ grafana_data_dir }}
logs = {{ grafana_log_dir }}
plugins = {{ grafana_plugin_dir }}
[server]
protocol = http
http_addr = {{ grafana_bind_ip }}
http_port = {{ grafana_bind_port }}
domain = {{ grafana_listen_address | urlsplit('hostname') }}
enforce_domain = true
root_url = {{ grafana_listen_address }}
serve_from_sub_path = false
router_logging = false
static_root_path = public
enable_gzip = true
[database]
type = {{ grafana_db_type }}
{% if grafana_db_type == "sqlite3" %}
path = {{ grafana_data_dir }}/grafana.db
cache_mode = private
{% else %}
host = {{ grafana_db_server }}:{{ grafana_db_port }}
name = {{ grafana_db_name }}
user = {{ grafana_db_user }}
password = """{{ grafana_db_password }}"""
ssl_mode = {{ grafana_db_ssl_mode }}
{% endif %}
max_idle_conn = 2
max_open_conn = 0
conn_max_lifetime = 14400
[datasources]
datasource_limit = 5000
[remote_cache]
type = {{ grafana_cache_provider }}
{% if not grafana_cache_provider == "database" %}
connstr =
{% endif %}
[analytics]
reporting_enabled = false
check_for_updates = false
[security]
disable_initial_admin_creation = false
admin_user = {{ grafana_admin_user }}
admin_password = {{ grafana_admin_password }}
secret_key = {{ grafana_secret_key }}
disable_gravatar = true
disable_brute_force_login_protection = false
[dashboards]
versions_to_keep = 20
min_refresh_interval = 5s
[users]
allow_sign_up = false
allow_org_create = false
auto_assign_org = true
auto_assign_org_id = 1
auto_assign_org_role = Viewer
default_theme = light
viewers_can_edit = false
editors_can_admin = false
user_invite_max_lifetime_duration = 24h
hidden_users = {{ grafana_admin_user }}
[auth]
login_cookie_name = grafana_session
login_maximum_inactive_lifetime_duration = 12h
login_maximum_lifetime_duration = 30d
token_rotation_interval_minutes = 10
disable_login_form = {{ (not grafana_login_form_enabled | bool) | lower }}
disable_signout_menu = {{ (not grafana_logout_menu_enabled | bool) | lower }}
oauth_auto_login = false
oauth_state_cookie_max_age = 600
api_key_max_seconds_to_live = -1
{% for provider in grafana_auth_providers %}
[auth.{{ provider.name }}]
{% if "enabled" not in provider.config %}
enabled = true
{% endif %}
{% for key, value in provider.config.items() %}
{{ key }} = {{ value }}
{% endfor %}
{% endfor %}
[smtp]
{% if grafana_smtp_host is defined %}
enabled = true
host = {{ grafana_smtp_host }}:{{ grafana_smtp_port }}
user = {{ grafana_smtp_username }}
password = """{{ grafana_smtp_password }}"""
skip_verify = false
from_address = {{ grafana_smtp_from }}
from_name = {{ grafana_smtp_from_name }}
{% else %}
enabled = false
{% endif %}
[emails]
welcome_email_on_sign_up = false
templates_pattern = emails/*.html, emails/*.txt
content_types = text/html
[log]
mode = {{ grafana_log_mode | join(" ") }}
level = {{ grafana_log_level | lower }}
{% for provider in grafana_log_providers %}
[log.{{ provider.name }}]
{% if "enabled" not in provider.config %}
enabled = true
{% endif %}
{% for key, value in provider.config.items() %}
{{ key }} = {{ value }}
{% endfor %}
{% endfor %}
[alerting]
enabled = true
execute_alerts = true
[plugins]
enable_alpha = false
plugin_admin_enabled = false
plugin_admin_external_manage_enabled = false
plugin_catalog_url = https://grafana.com/grafana/plugins/
[date_formats]
full_date = YYYY-MM-DD HH:mm:ss
use_browser_locale = true
default_timezone = browser