mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 4.8
4039313266
Add tests/lint/repository/test_task_file_numbering.py: numbered task files use exactly two leading digits, a numbered *_core.yml must be 00_core.yml, per directory the numbers are unique/consecutive and start at 01 (00 with a core file), numbered includes appear in ascending order, and shared helpers live in tasks/utils/ instead of the numbered chain. Apply it across every role: rename NN_core.yml to 00_core.yml with a consecutive down-shift of the siblings, move letter-suffix children into a subdirectory named after their parent task, relocate helpers included from more than one place into tasks/utils/, and update every reference (include_tasks, path_absolute, .ansible-lint-ignore, requirement docs). Legacy narration comments in the touched files are deleted; the upstream xwiki.properties reference block opts out via nocheck. The unused MAILU_IP6_PUBLIC var (only ever named in now-removed comments) is dropped. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
24 lines
939 B
YAML
24 lines
939 B
YAML
---
|
|
- name: "✅ Assert correct context"
|
|
ansible.builtin.assert:
|
|
that:
|
|
- application_id == 'svc-dns-unbound'
|
|
- database_consumer_id != 'svc-dns-unbound'
|
|
|
|
- name: "⏳ UNBOUND | Wait for resolver before handing to {{ database_consumer_id }}"
|
|
ansible.builtin.shell: >
|
|
container exec {{ UNBOUND_CONTAINER_ADDRESS }} sh -lc
|
|
'drill -p 53 localhost @127.0.0.1 >/dev/null 2>&1 || nslookup -port=53 localhost 127.0.0.1 >/dev/null 2>&1'
|
|
register: unbound_consumer_ready
|
|
retries: 30
|
|
delay: 5
|
|
until: unbound_consumer_ready.rc == 0
|
|
changed_when: false
|
|
|
|
- name: "🚫 UNBOUND | No per-consumer provisioning (isolation: none)"
|
|
ansible.builtin.debug:
|
|
msg: >-
|
|
svc-dns-unbound is a shared recursive/forwarding DNSSEC resolver; consumer
|
|
'{{ database_consumer_id }}' reaches it at the static IP {{ UNBOUND_RESOLVER_IP }}
|
|
on the '{{ UNBOUND_NETWORK_NAME }}' network. No isolated slice is created.
|