157 lines
5.3 KiB
Bash
Executable File
157 lines
5.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
# Copyright 2016, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# WARNING:
|
|
# This file is use by all OpenStack-Ansible roles for testing purposes.
|
|
# Any changes here will affect all OpenStack-Ansible role repositories
|
|
# with immediate effect.
|
|
|
|
# PURPOSE:
|
|
# This script executes a test Ansible playbook for the purpose of
|
|
# functionally testing the role. It supports a convergence test,
|
|
# check mode and an idempotence test.
|
|
|
|
## Shell Opts ----------------------------------------------------------------
|
|
|
|
set -e
|
|
|
|
## Vars ----------------------------------------------------------------------
|
|
|
|
export TESTING_HOME=${TESTING_HOME:-$HOME}
|
|
export WORKING_DIR=${WORKING_DIR:-$(pwd)}
|
|
export ROLE_NAME=${ROLE_NAME:-''}
|
|
|
|
export ANSIBLE_OVERRIDES=${ANSIBLE_OVERRIDES:-$WORKING_DIR/tests/$ROLE_NAME-overrides.yml}
|
|
export ANSIBLE_PARAMETERS=${ANSIBLE_PARAMETERS:-""}
|
|
export TEST_PLAYBOOK=${TEST_PLAYBOOK:-$WORKING_DIR/tests/test.yml}
|
|
export TEST_CHECK_MODE=${TEST_CHECK_MODE:-false}
|
|
export TEST_IDEMPOTENCE=${TEST_IDEMPOTENCE:-false}
|
|
|
|
export COMMON_TESTS_PATH="${WORKING_DIR}/tests/common"
|
|
|
|
echo "ANSIBLE_OVERRIDES: ${ANSIBLE_OVERRIDES}"
|
|
echo "ANSIBLE_PARAMETERS: ${ANSIBLE_PARAMETERS}"
|
|
echo "TEST_PLAYBOOK: ${TEST_PLAYBOOK}"
|
|
echo "TEST_CHECK_MODE: ${TEST_CHECK_MODE}"
|
|
echo "TEST_IDEMPOTENCE: ${TEST_IDEMPOTENCE}"
|
|
|
|
## Functions -----------------------------------------------------------------
|
|
|
|
function set_ansible_parameters {
|
|
|
|
if [ -f "${ANSIBLE_OVERRIDES}" ]; then
|
|
ANSIBLE_CLI_PARAMETERS="${ANSIBLE_PARAMETERS} -e @${ANSIBLE_OVERRIDES}"
|
|
else
|
|
ANSIBLE_CLI_PARAMETERS="${ANSIBLE_PARAMETERS}"
|
|
fi
|
|
|
|
}
|
|
|
|
function execute_ansible_playbook {
|
|
|
|
CMD_TO_EXECUTE="ansible-playbook ${TEST_PLAYBOOK} $@ ${ANSIBLE_CLI_PARAMETERS}"
|
|
echo "Executing: ${CMD_TO_EXECUTE}"
|
|
echo "With:"
|
|
echo " ANSIBLE_INVENTORY: ${ANSIBLE_INVENTORY}"
|
|
echo " ANSIBLE_LOG_PATH: ${ANSIBLE_LOG_PATH}"
|
|
|
|
${CMD_TO_EXECUTE}
|
|
|
|
}
|
|
|
|
## Main ----------------------------------------------------------------------
|
|
|
|
# NOTE(mhayden): CentOS images in the gate have several slow mirrors enabled
|
|
# by default. This step ensures that only the base and updates
|
|
# repositories are enabled.
|
|
#
|
|
# NOTE(logan): Due to the way Ansible's yum module works, we should leave all
|
|
# except these two repos globally disabled. See the link below for more info:
|
|
# https://github.com/ansible/ansible/issues/26995#issuecomment-392288700
|
|
#
|
|
# Rather than enabling repos globally, we can use the yum repository module to
|
|
# selectively pull in packages from other repos (ie. extras, EPEL, RDO, etc.)
|
|
# on an as-needed basis in the roles where they are required using includepkgs.
|
|
# See the example here:
|
|
# https://opendev.org/openstack/openstack-ansible-lxc_hosts/src/commit/a6cae27fa3e6d03b48ba34468df4af90c77f4880/tasks/lxc_install_yum.yml#L46-L58
|
|
if [[ -x /usr/bin/yum-config-manager ]] && [[ -e /etc/centos-release ]]; then
|
|
sudo yum-config-manager --disable \* > /dev/null
|
|
sudo yum-config-manager --enable base > /dev/null
|
|
sudo yum-config-manager --enable updates > /dev/null
|
|
fi
|
|
|
|
# Check if SELinux is present and which mode is currently set.
|
|
if [[ -x /usr/sbin/getenforce ]]; then
|
|
SELINUX_STATUS=$(/usr/sbin/getenforce)
|
|
else
|
|
SELINUX_STATUS="Unavailable"
|
|
fi
|
|
echo "Current SELinux status: ${SELINUX_STATUS}"
|
|
|
|
# NOTE(mhayden): SELinux policies for CentOS 7 are still incomplete. Ensure
|
|
# SELinux is not in enforcing mode during tests.
|
|
if [ "${SELINUX_STATUS}" == "Enforcing" ]; then
|
|
echo "NOTE: CentOS 7 SELinux policies are incomplete."
|
|
echo "Switching SELinux mode from Enforcing to Permissive."
|
|
sudo /usr/sbin/setenforce 0
|
|
fi
|
|
|
|
# Ensure that the Ansible environment is properly prepared
|
|
source "${COMMON_TESTS_PATH}/test-ansible-env-prep.sh"
|
|
|
|
# Prepare the extra CLI parameters used in each execution
|
|
set_ansible_parameters
|
|
|
|
# If the test for check mode is enabled, then execute it
|
|
if [ "${TEST_CHECK_MODE}" == "true" ]; then
|
|
|
|
# Set the path for the output log
|
|
export ANSIBLE_LOG_PATH="${ANSIBLE_LOG_DIR}/ansible-check.log"
|
|
|
|
# Execute the test playbook in check mode
|
|
execute_ansible_playbook --check
|
|
|
|
fi
|
|
|
|
# Set the path for the output log
|
|
export ANSIBLE_LOG_PATH="${ANSIBLE_LOG_DIR}/ansible-execute.log"
|
|
|
|
# Execute the test playbook
|
|
execute_ansible_playbook
|
|
|
|
# If the idempotence test is enabled, then execute the
|
|
# playbook again and verify that nothing changed/failed
|
|
# in the output log.
|
|
|
|
if [ "${TEST_IDEMPOTENCE}" == "true" ]; then
|
|
|
|
# Set the path for the output log
|
|
export ANSIBLE_LOG_PATH="${ANSIBLE_LOG_DIR}/ansible-idempotence.log"
|
|
|
|
# Execute the test playbook
|
|
execute_ansible_playbook
|
|
|
|
# Exit with a failure if we find "changed" or "failed" followed by anything
|
|
# other than a zero.
|
|
if grep -qP '(changed|failed)=(?!0)' ${ANSIBLE_LOG_PATH}; then
|
|
echo "Idempotence test: fail"
|
|
exit 1
|
|
else
|
|
echo "Idempotence test: pass"
|
|
fi
|
|
|
|
fi
|