74 lines
2.5 KiB
YAML
74 lines
2.5 KiB
YAML
# kics-scan disable=2e8d4922-8362-4606-8c14-aa10466a1ce3
|
|
---
|
|
- name: Verify
|
|
hosts: all
|
|
gather_facts: false
|
|
any_errors_fatal: true
|
|
|
|
pre_tasks:
|
|
- name: "Include default vars"
|
|
ansible.builtin.include_vars:
|
|
dir: '{{ lookup("env", "MOLECULE_PROJECT_DIRECTORY") }}/defaults/'
|
|
extensions:
|
|
- 'yml'
|
|
|
|
tasks:
|
|
- name: "Verify NGINX version"
|
|
register: nginx_version_output
|
|
changed_when: false
|
|
failed_when: nginx_version_output.rc != 0
|
|
ansible.builtin.command: /usr/sbin/nginx -v
|
|
|
|
# version is displayed as e.g. 'nginx version: nginx/1.26.3'
|
|
- name: "Extract NGINX version"
|
|
ansible.builtin.set_fact:
|
|
nginx_version: "{{ nginx_version_output.stderr.split('/')[1] }}"
|
|
|
|
- name: "Check expected NGINX version"
|
|
ansible.builtin.assert:
|
|
that: nginx_version.startswith(nginx_version)
|
|
fail_msg: "Unexpected NGINX version found: '{{ nginx_version }}'"
|
|
|
|
- name: "Gather service facts"
|
|
ansible.builtin.service_facts:
|
|
|
|
- name: "Assert NGINX service is running"
|
|
ansible.builtin.assert:
|
|
that: ansible_facts.services['nginx.service'].state == 'running'
|
|
fail_msg: "NGINX service is not running."
|
|
|
|
- name: "Assert NGINX service is enabled"
|
|
ansible.builtin.assert:
|
|
that: ansible_facts.services['nginx.service'].status == 'enabled'
|
|
fail_msg: "NGINX service is not enabled."
|
|
|
|
- name: "Get an HTTP response from the test site (single site deployment from a variable)"
|
|
register: nginx_response
|
|
ansible.builtin.uri:
|
|
url: http://localhost:80
|
|
status_code: 200
|
|
return_content: true
|
|
|
|
- name: "Check the response correctness on port 80"
|
|
vars:
|
|
message: "{{ nginx_response.content | trim }}"
|
|
ansible.builtin.assert:
|
|
that: message == 'Hello from ansible-nginx!'
|
|
success_msg: "{{ message }}"
|
|
fail_msg: "Unexpected response from the test site: '{{ message }}'"
|
|
|
|
- name: "Get an HTTP response from the test site (site deployment from a dictionary)"
|
|
register: nginx_response
|
|
ansible.builtin.uri:
|
|
url: http://localhost:8080
|
|
status_code: 200
|
|
return_content: true
|
|
|
|
- name: "Check the response correctness on port 8080"
|
|
vars:
|
|
message: "{{ nginx_response.content | trim }}"
|
|
ansible.builtin.assert:
|
|
that: message == 'Hello from ansible-nginx!'
|
|
success_msg: "{{ message }}"
|
|
fail_msg: "Unexpected response from the test site: '{{ message }}'"
|