mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 4.8
4039313266
Add tests/lint/repository/test_task_file_numbering.py: numbered task files use exactly two leading digits, a numbered *_core.yml must be 00_core.yml, per directory the numbers are unique/consecutive and start at 01 (00 with a core file), numbered includes appear in ascending order, and shared helpers live in tasks/utils/ instead of the numbered chain. Apply it across every role: rename NN_core.yml to 00_core.yml with a consecutive down-shift of the siblings, move letter-suffix children into a subdirectory named after their parent task, relocate helpers included from more than one place into tasks/utils/, and update every reference (include_tasks, path_absolute, .ansible-lint-ignore, requirement docs). Legacy narration comments in the touched files are deleted; the upstream xwiki.properties reference block opts out via nocheck. The unused MAILU_IP6_PUBLIC var (only ever named in now-removed comments) is dropped. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
97 lines
3.6 KiB
YAML
97 lines
3.6 KiB
YAML
---
|
|
- name: "✅ Assert correct context"
|
|
ansible.builtin.assert:
|
|
that:
|
|
- application_id == 'svc-db-rabbitmq'
|
|
- database_consumer_id != 'svc-db-rabbitmq'
|
|
|
|
- name: "🔍 Resolve consumer vhost + credentials"
|
|
ansible.builtin.set_fact:
|
|
rabbitmq_consumer_vhost: "{{ database_consumer_id | get_entity_name }}"
|
|
rabbitmq_consumer_username: "{{ lookup('engine', 'rabbitmq', database_consumer_id, 'username') }}"
|
|
rabbitmq_consumer_password: "{{ database_password | default(lookup('engine', 'rabbitmq', database_consumer_id, 'password')) | string }}"
|
|
changed_when: false
|
|
no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
|
|
|
|
- name: "⏳ RABBITMQ | Wait for management API readiness"
|
|
ansible.builtin.shell: >
|
|
{{ RABBITMQ_EXEC_SHELL }}
|
|
'rabbitmqctl -q await_startup'
|
|
register: rmq_startup_ready
|
|
until: rmq_startup_ready.rc == 0
|
|
retries: 30
|
|
delay: 5
|
|
changed_when: false
|
|
|
|
- name: "📋 RABBITMQ | List existing vhosts"
|
|
ansible.builtin.shell: >
|
|
{{ RABBITMQ_EXEC_SHELL }}
|
|
'rabbitmqctl -q list_vhosts --formatter json'
|
|
register: rmq_vhosts
|
|
changed_when: false
|
|
retries: "{{ RABBITMQ_RETRIES }}"
|
|
delay: "{{ RABBITMQ_DELAY }}"
|
|
until: rmq_vhosts.rc == 0
|
|
|
|
- name: "📁 Create vhost: {{ rabbitmq_consumer_vhost }}"
|
|
ansible.builtin.shell: >
|
|
{{ RABBITMQ_EXEC_SHELL }}
|
|
'rabbitmqctl -q add_vhost {{ rabbitmq_consumer_vhost | quote }}'
|
|
register: rmq_add_vhost
|
|
changed_when: rmq_add_vhost.rc == 0
|
|
retries: "{{ RABBITMQ_RETRIES }}"
|
|
delay: "{{ RABBITMQ_DELAY }}"
|
|
until: rmq_add_vhost.rc == 0
|
|
when: >
|
|
rabbitmq_consumer_vhost not in
|
|
(rmq_vhosts.stdout | from_json | map(attribute='name') | list)
|
|
|
|
- name: "📋 RABBITMQ | List existing users"
|
|
ansible.builtin.shell: >
|
|
{{ RABBITMQ_EXEC_SHELL }}
|
|
'rabbitmqctl -q list_users --formatter json'
|
|
register: rmq_users
|
|
changed_when: false
|
|
retries: "{{ RABBITMQ_RETRIES }}"
|
|
delay: "{{ RABBITMQ_DELAY }}"
|
|
until: rmq_users.rc == 0
|
|
|
|
- name: "📁 Create user: {{ rabbitmq_consumer_username }}"
|
|
ansible.builtin.shell: >
|
|
container exec -e RMQ_PW={{ rabbitmq_consumer_password | quote }} {{ RABBITMQ_CONTAINER_ADDRESS }} sh -lc
|
|
'rabbitmqctl -q add_user {{ rabbitmq_consumer_username | quote }} "$RMQ_PW"'
|
|
register: rmq_add_user
|
|
changed_when: rmq_add_user.rc == 0
|
|
retries: "{{ RABBITMQ_RETRIES }}"
|
|
delay: "{{ RABBITMQ_DELAY }}"
|
|
until: rmq_add_user.rc == 0
|
|
no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
|
|
when: >
|
|
rabbitmq_consumer_username not in
|
|
(rmq_users.stdout | from_json | map(attribute='user') | list)
|
|
|
|
- name: "✅ Ensure user password matches inventory: {{ rabbitmq_consumer_username }}"
|
|
ansible.builtin.shell: >
|
|
container exec -e RMQ_PW={{ rabbitmq_consumer_password | quote }} {{ RABBITMQ_CONTAINER_ADDRESS }} sh -lc
|
|
'rabbitmqctl -q change_password {{ rabbitmq_consumer_username | quote }} "$RMQ_PW"'
|
|
register: rmq_change_password
|
|
changed_when: false
|
|
retries: "{{ RABBITMQ_RETRIES }}"
|
|
delay: "{{ RABBITMQ_DELAY }}"
|
|
until: rmq_change_password.rc == 0
|
|
no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
|
|
when: >
|
|
rabbitmq_consumer_username in
|
|
(rmq_users.stdout | from_json | map(attribute='user') | list)
|
|
|
|
- name: "🔐 Grant full perms on vhost '{{ rabbitmq_consumer_vhost }}' to consumer user"
|
|
ansible.builtin.shell: >
|
|
{{ RABBITMQ_EXEC_SHELL }}
|
|
'rabbitmqctl -q set_permissions -p {{ rabbitmq_consumer_vhost | quote }}
|
|
{{ rabbitmq_consumer_username | quote }} ".*" ".*" ".*"'
|
|
register: rmq_set_permissions
|
|
changed_when: false
|
|
retries: "{{ RABBITMQ_RETRIES }}"
|
|
delay: "{{ RABBITMQ_DELAY }}"
|
|
until: rmq_set_permissions.rc == 0
|