diff --git a/.github/workflows/galaxy.yml b/.github/workflows/galaxy.yml index 7553ee6..50de838 100644 --- a/.github/workflows/galaxy.yml +++ b/.github/workflows/galaxy.yml @@ -19,7 +19,7 @@ jobs: python-version: 3.x - name: Install Ansible core - run: pip3 install -r .github/workflows/requirements/requirements_galaxy.txt + run: pip3 install -r .github/workflows/requirements/requirements_ansible.txt - name: Import role releases to Ansible Galaxy run: ansible-galaxy role import --api-key ${{ secrets.GALAXY_API_KEY }} $(echo ${{ github.repository }} | cut -d/ -f1) $(echo ${{ github.repository }} | cut -d/ -f2) diff --git a/.github/workflows/molecule.yml b/.github/workflows/molecule.yml index f3da3ca..0a5fcbc 100644 --- a/.github/workflows/molecule.yml +++ b/.github/workflows/molecule.yml @@ -27,7 +27,7 @@ jobs: run: pip3 install -r .github/workflows/requirements/requirements_ansible_lint.txt - name: Install Ansible core collection dependencies - run: ansible-galaxy install -r .github/workflows/requirements/requirements_ansible.yml + run: ansible-galaxy install -r .github/workflows/requirements/requirements_collections.yml - name: Run Ansible Lint run: ansible-lint --force-color @@ -69,7 +69,7 @@ jobs: - name: Install Ansible core collection dependencies if: ${{ !(contains(matrix.scenario, 'plus')) || (env.NGINX_CRT != 0 && env.NGINX_KEY != 0) }} - run: ansible-galaxy install -r .github/workflows/requirements/requirements_ansible.yml + run: ansible-galaxy install -r .github/workflows/requirements/requirements_collections.yml - name: Run Molecule tests if: ${{ !(contains(matrix.scenario, 'plus')) || (env.NGINX_CRT != 0 && env.NGINX_KEY != 0) }} diff --git a/.github/workflows/requirements/requirements_ansible.yml b/.github/workflows/requirements/requirements_collections.yml similarity index 100% rename from .github/workflows/requirements/requirements_ansible.yml rename to .github/workflows/requirements/requirements_collections.yml diff --git a/.github/workflows/requirements/requirements_galaxy.txt b/.github/workflows/requirements/requirements_galaxy.txt index 274cf66..9ba8b8e 100644 --- a/.github/workflows/requirements/requirements_galaxy.txt +++ b/.github/workflows/requirements/requirements_galaxy.txt @@ -1 +1,2 @@ ansible-core==2.16.6 +jinja2==3.1.4 diff --git a/CHANGELOG.md b/CHANGELOG.md index 709b147..10661d2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -19,6 +19,7 @@ TESTS: DOCUMENTATION: - Update community docs per the latest [NGINX template repository](https://github.com/nginxinc/template-repository) guidelines. +- Update and tweak the README. In order to make the installation instructions easier, some file names used by the various GitHub Actions workflows have been renamed. CI/CD: diff --git a/README.md b/README.md index 49d1f32..9dcf8bf 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,8 @@ [![Molecule CI/CD](https://github.com/nginxinc/ansible-role-nginx-config/workflows/Molecule%20CI/CD/badge.svg)](https://github.com/nginxinc/ansible-role-nginx-config/actions) [![License](https://img.shields.io/badge/License-Apache--2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0) [![Project Status: Active – The project has reached a stable, usable state and is being actively developed.](https://www.repostatus.org/badges/latest/active.svg)](https://www.repostatus.org/#active) -[![Community Support](https://badgen.net/badge/support/community/cyan?icon=awesome)](https://github.com/nginxinc/ansible-role-nginx-config/blob/main/SUPPORT.md) +[![Community Support](https://badgen.net/badge/support/community/cyan?icon=awesome)](/SUPPORT.md) +[![Contributor Covenant](https://img.shields.io/badge/Contributor%20Covenant-2.1-4baaaa.svg)](/CODE_OF_CONDUCT.md) # 👾 *Help make the NGINX config Ansible role better by participating in our [survey](https://forms.office.com/Pages/ResponsePage.aspx?id=L_093Ttq0UCb4L-DJ9gcUKLQ7uTJaE1PitM_37KR881UM0NCWkY5UlE5MUYyWU1aTUcxV0NRUllJSC4u)!* 👾 @@ -10,39 +11,78 @@ This role configures NGINX Open Source and NGINX Plus on your target host. -**Note:** This role is still in active development. There may be unidentified issues and the role variables may change as development continues. +> [!IMPORTANT] +> This role is still in active development. There may be unidentified issues and the role variables may change as development continues. -## Requirements +## Role Requirements ### Ansible -- This role is developed and tested with [maintained](https://docs.ansible.com/ansible/devel/reference_appendices/release_and_maintenance.html) versions of Ansible core (above `2.16`). -- When using Ansible core, you will also need to install the following collections: +If you want to use this role, you will need to use a supported version of Ansible core and Jinja2 as well as a few Ansible collections. - ```yaml - --- - collections: - - name: ansible.posix - version: 1.5.4 - - name: community.general - version: 9.2.0 - - name: community.docker # Only required if you plan to use Molecule (see below) - version: 3.11.0 - ``` +For ease of use, you can install and/or upgrade Ansible core, Jinja2, and the aforementioned Ansible collections by running the following four commands on your Ansible host: - **Note:** You can alternatively install the Ansible community distribution (what is known as the "old" Ansible) if you don't want to manage individual collections. -- Instructions on how to install Ansible can be found in the [Ansible website](https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html#upgrading-ansible-from-version-2-9-and-older-to-version-2-10-or-later). +```bash +pip install --upgrade -r https://raw.githubusercontent.com/nginxinc/ansible-role-nginx-config/main/.github/workflows/requirements/requirements_ansible.txt +curl -O https://raw.githubusercontent.com/nginxinc/ansible-role-nginx-config/main/.github/workflows/requirements/requirements_collections.yml +ansible-galaxy install --force -r requirements_collections.yml +rm -f requirements_collections.yml +``` + +This will also ensure you are deploying/running this role with a fully tested version of the aforementioned packages/collections. + +#### Ansible core + +- This role is developed and tested with [maintained](https://docs.ansible.com/ansible/devel/reference_appendices/release_and_maintenance.html) versions of Ansible core and Python. +- When using Ansible core, you will also need to install the following Ansible collections: + + ```yaml + --- + collections: + - name: ansible.posix + version: 1.5.4 + - name: community.general + version: 9.0.1 + - name: community.docker # Only required if you plan to use Molecule (see below) + version: 3.10.3 + ``` + +- Instructions on how to install Ansible core can be found in the [Ansible](https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html#upgrading-ansible-from-version-2-9-and-older-to-version-2-10-or-later) docs. +- Instructions on how to install Ansible collections can be found in the [Ansible collections](https://docs.ansible.com/ansible/latest/collections_guide/collections_installing.html) guide. + +> [!TIP] +> You can alternatively install the [Ansible community distribution](https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html#selecting-an-ansible-package-and-version-to-install) (what is still known Ansible -- instead of Ansible core) if you don't want to manage individual collections. ### Jinja2 - This role uses Jinja2 templates. Ansible core installs Jinja2 by default, but depending on your install and/or upgrade path, you might be running an outdated version of Jinja2. The minimum version of Jinja2 required for the role to properly function is `3.1`. - Instructions on how to install Jinja2 can be found in the [Jinja2 website](https://jinja.palletsprojects.com/en/3.1.x/intro/#installation). -### Molecule (Optional) +### Testing suite (Optional) + +If you want to contribute to this role, you will also need to install Ansible Lint and Molecule. + +#### Ansible Lint (Optional) + +- Ansible Lint is used to lint the role for both Ansible best practices and potential Ansible/YAML issues. +- Instructions on how to install Ansible Lint can be found in the [Ansible Lint website](https://ansible.readthedocs.io/projects/lint/installing/). +- Once installed, using Ansible Lint is as easy as running: -- Molecule is used to test the various functionalities of the role. The recommended version of Molecule to test this role is `4.x`. -- Instructions on how to install Molecule can be found in the [Molecule website](https://molecule.readthedocs.io/en/latest/installation.html). *You will also need to install the Molecule Docker driver.* -- To run the NGINX Plus/App Protect config Molecule tests, you must copy your NGINX Plus/App Protect license to the role's [`files/license`](https://github.com/nginxinc/ansible-role-nginx-config/blob/main/files/license/) directory. + ```bash + ansible-lint + ``` + +- For ease of use, you can install and/or upgrade Ansible Lint by running the following command on your Ansible host: + + ```bash + pip install -r https://raw.githubusercontent.com/nginxinc/ansible-role-nginx-config/main/.github/workflows/requirements/requirements_ansible_lint.txt + ``` + +#### Molecule (Optional) + +- Molecule is used to test the various functionalities of the role. +- Instructions on how to install Molecule can be found in the [Molecule website](https://molecule.readthedocs.io/en/latest/installation.html). *You will also need to install the Molecule plugins package and the Docker Python SDK.* +- To run the NGINX Plus/App Protect config Molecule tests, you must copy your NGINX Plus/App Protect license to the role's Molecule [`common/files/license`](/molecule/common/files/license/) directory. You can alternatively add your NGINX Plus/App Protect repository certificate and key to the local environment. Run the following commands to export these files as base64-encoded variables and execute the Molecule tests: @@ -52,9 +92,15 @@ This role configures NGINX Open Source and NGINX Plus on your target host. molecule test -s plus ``` -## Installation +- For ease of use, you can install and/or upgrade Molecule, the Molecule plugins package, and the Docker Python SDK by running the following command on your Ansible host: + + ```bash + pip install --upgrade -r https://raw.githubusercontent.com/nginxinc/ansible-role-nginx-config/main/.github/workflows/requirements/requirements_molecule.txt + ``` + +## Role Installation -This role can be installed via either Ansible Galaxy (the Ansible community marketplace) or by cloning this repo. Once installed, you will need to include the role it in your Ansible playbook using [the `roles` keyword, the `import_role` module, or the `include_role` module](https://docs.ansible.com/ansible/latest/playbook_guide/playbooks_reuse_roles.html#using-roles). +This role can be installed via either Ansible Galaxy (the Ansible community marketplace) or by cloning this repo. Once installed, you will need to include the role in your Ansible playbook using [the `roles` keyword, the `import_role` module, or the `include_role` module](https://docs.ansible.com/ansible/latest/playbook_guide/playbooks_reuse_roles.html#using-roles). ### Ansible Galaxy @@ -98,36 +144,38 @@ To use the role, include the following task in your playbook: The NGINX config Ansible role supports all platforms supported by [NGINX Open Source](https://nginx.org/en/linux_packages.html#mainline) and [NGINX Plus](https://www.nginx.com/products/technical-specs/). -***Note:** You should be able to use this role to configure any NGINX installation -- wherever/however it's been installed -- at your own risk. Any potential bugs with the role involving unsupported installation methods/platforms will be addressed in a best effort manner and might be outright dismissed.* +> [!NOTE] +> You should be able to use this role to configure any NGINX installation -- wherever/however it's been installed -- at your own risk. Any potential bugs with the role involving unsupported installation methods/platforms will be addressed in a best effort manner and might be outright dismissed.* ## Role Variables -This role has multiple variables. The descriptions and defaults for all these variables can be found in the **[`defaults/main/`](https://github.com/nginxinc/ansible-role-nginx-config/blob/main/defaults/main/)** directory in the following files: +This role has multiple variables. The descriptions and defaults for all these variables can be found in the **[`defaults/main/`](/defaults/main/)** directory in the following files: | Name | Description | | ---- | ----------- | -| **[`main.yml`](https://github.com/nginxinc/ansible-role-nginx-config/blob/main/defaults/main/main.yml)** | NGINX simple config variables | -| **[`selinux.yml`](https://github.com/nginxinc/ansible-role-nginx-config/blob/main/defaults/main/selinux.yml)** | Set up SELinux to allow the necessary connections to your NGINX setup | -| **[`template.yml`](https://github.com/nginxinc/ansible-role-nginx-config/blob/main/defaults/main/template.yml)** | NGINX config template variables | -| **[`upload.yml`](https://github.com/nginxinc/ansible-role-nginx-config/blob/main/defaults/main/upload.yml)** | NGINX config/HTML/SSL upload variables | +| **[`main.yml`](/defaults/main/main.yml)** | NGINX simple config variables | +| **[`selinux.yml`](/defaults/main/selinux.yml)** | Set up SELinux to allow the necessary connections to your NGINX setup | +| **[`template.yml`](/defaults/main/template.yml)** | NGINX config template variables | +| **[`upload.yml`](/defaults/main/upload.yml)** | NGINX config/HTML/SSL upload variables | ## Example Playbooks -Working functional playbook examples can be found in the **[`molecule/`](https://github.com/nginxinc/ansible-role-nginx-config/blob/main/molecule/)** directory in the following files: +Working functional playbook examples can be found in the **[`molecule/`](/molecule/)** directory in the following files: | Name | Description | | ---- | ----------- | -| **[`api/converge.yml`](https://github.com/nginxinc/ansible-role-nginx-config/blob/main/molecule/api/converge.yml)** | Configure the NGINX Plus API and live metrics dashboard | -| **[`cleanup_config/converge.yml`](https://github.com/nginxinc/ansible-role-nginx-config/blob/main/molecule/cleanup_config/converge.yml)** | Cleanup an NGINX config | -| **[`complete/converge.yml`](https://github.com/nginxinc/ansible-role-nginx-config/blob/main/molecule/complete/converge.yml)** | Test all NGINX directives are correctly templated | -| **[`complete_plus/converge.yml`](https://github.com/nginxinc/ansible-role-nginx-config/blob/main/molecule/complete_plus/converge.yml)** | Test all NGINX Plus specific directives are correctly templated | -| **[`default/converge.yml`](https://github.com/nginxinc/ansible-role-nginx-config/blob/main/molecule/default/converge.yml)** | Configure NGINX with a config as close as possible to the default config | -| **[`push_config/converge.yml`](https://github.com/nginxinc/ansible-role-nginx-config/blob/main/molecule/push_config/converge.yml)** | Push a preexisting NGINX config from your system to your NGINX instance | -| **[`reverse_proxy/converge.yml`](https://github.com/nginxinc/ansible-role-nginx-config/blob/main/molecule/reverse_proxy/converge.yml)** | Configure NGINX as a reverse proxy between two web servers | -| **[`stub_status/converge.yml`](https://github.com/nginxinc/ansible-role-nginx-config/blob/main/molecule/stub_status/converge.yml)** | Configure the NGINX Open Source stub status metrics | -| **[`web_server/converge.yml`](https://github.com/nginxinc/ansible-role-nginx-config/blob/main/molecule/web_server/converge.yml)** | Configure NGINX as a web server | - -**Note:** If you install this repository via Ansible Galaxy, you will need to replace the `include_role` variable in the example playbooks from `ansible-role-nginx-config` to `nginxinc.nginx_config`. +| **[`api/converge.yml`](/molecule/api/converge.yml)** | Configure the NGINX Plus API and live metrics dashboard | +| **[`cleanup_config/converge.yml`](/molecule/cleanup_config/converge.yml)** | Cleanup an NGINX config | +| **[`complete/converge.yml`](/molecule/complete/converge.yml)** | Test all NGINX directives are correctly templated | +| **[`complete_plus/converge.yml`](/molecule/complete_plus/converge.yml)** | Test all NGINX Plus specific directives are correctly templated | +| **[`default/converge.yml`](/molecule/default/converge.yml)** | Configure NGINX with a config as close as possible to the default config | +| **[`push_config/converge.yml`](/molecule/push_config/converge.yml)** | Push a preexisting NGINX config from your system to your NGINX instance | +| **[`reverse_proxy/converge.yml`](/molecule/reverse_proxy/converge.yml)** | Configure NGINX as a reverse proxy between two web servers | +| **[`stub_status/converge.yml`](/molecule/stub_status/converge.yml)** | Configure the NGINX Open Source stub status metrics | +| **[`web_server/converge.yml`](/molecule/web_server/converge.yml)** | Configure NGINX as a web server | + +> [!NOTE] +> If you install this repository via Ansible Galaxy, you will need to replace the `include_role` variable in the example playbooks from `ansible-role-nginx-config` to `nginxinc.nginx_config`. ## Other NGINX Ansible Collections and Roles @@ -141,7 +189,7 @@ You can find the Ansible NGINX Unit role to install NGINX Unit [here](https://gi ## License -[Apache License, Version 2.0](https://github.com/nginxinc/ansible-role-nginx-config/blob/main/LICENSE) +[Apache License, Version 2.0](/LICENSE) ## Author Information