tonykay · rrgautam · Jul 23, 2018 · Jul 23, 2018 · Jul 23, 2018 · Jul 23, 2018
diff --git a/3tier-bad/ad.yml b/3tier-bad/ad.yml
@@ -0,0 +1,22 @@
+---
+# Bad ansible! This playbook is an example of poor/bad practices!
+# Bad practices may include:
+#
+#   Poor formatting and structure
+#   Poor use of YAML - but good enough to parse
+#   Inconsistent style
+#   Incorrect use of modules
+#   Poor module choice
+#   Unclear names
+#   Hard coding / poor use of variables
+#   Roles - what are roles?
+#   Bare variables
+#   No use of handlers
+
+- hosts: windows
+  gather_facts: true
+  become: true
+  roles:
+    - win_ad_install
+
+
diff --git a/3tier-bad/bad-playbook.yml b/3tier-bad/bad-playbook.yml
@@ -13,144 +13,33 @@
 #   Bare variables
 #   No use of handlers
 
-- name: configuration
-  hosts: all
-  gather_facts: false # remove later! speeds up testing
+- hosts: all
+  gather_facts: true
   become: true
+  roles:
+    - base
 
-  tasks:
-  - name: enable repos
-    template:
-      src: ./open_three-tier-app.repo
-      dest: /etc/yum.repos.d/open_three-tier-app.repo
-      mode: 0644
-
-- name: deploy haproxy
-  hosts: frontends
-  gather_facts: false # remove later! speeds up testing
-  become: true
-
-  tasks:
-  - name: http
-    package:
-      name: httpie
-      state: latest
-  - name: install HAProxy
-    yum:
-      name=haproxy state=latest
-  - name: enable HAProxy
-    service:
-      name: haproxy
-      state: started
-  - name: configure haproxy
-    template:
-      src: ./haproxy.cfg.j2
-      dest: /etc/haproxy/haproxy.cfg
-  - name: restart HAproxy
-    service:
-      name: haproxy
-      state: restarted
-
-
-- name: deploy tomcat
-  hosts: apps
-  gather_facts: false
+- hosts: frontends
+  gather_facts: true
   become: true
+  roles:
+    - haproxy
 
-  tasks:
-  - name: install tomcat
-    package:
-      name: tomcat
-      state: latest
-  - name: enable tomcat at boot
-    service:
-      name: tomcat
-      enabled: yes
-
-  - name: create ansible tomcat directory
-    file:
-      path: /usr/share/tomcat/webapps/ROOT
-      state: directory
-
-  - name: copy static index.html to tomcat webapps/ansible/index.html
-    template:
-      src: index.html.j2
-      dest: /usr/share/tomcat/webapps/ROOT/index.html
-      mode: 0644
-
-  - name: start tomcat
-    service:
-      name: tomcat
-      state: started
-
-- name: index.html on app 1
-  hosts: app1
-  gather_facts: false
+- hosts: apps
+  gather_facts: true
   become: true
-
-  tasks:
-  - name: copy static index.html to tomcat webapps/ansible/index.html
-    template:
-      src: index.html.app1
-      dest: /usr/share/tomcat/webapps/ansible/index.html
-
-- name: index.html on app 1
-  hosts: app2
-  gather_facts: false
+  roles:
+    - tomcat
+
+- hosts: appdbs
+  gather_facts: true
   become: true
-
-  tasks:
-  - name: copy static index.html to tomcat webapps/ansible/index.html
-    template:
-      src: index.html.app2
-      dest: /usr/share/tomcat/webapps/ansible/index.html
-
-- name: deploy postgres
-  hosts: apps
-  gather_facts: false
+  roles:
+    - pgsql
+
+- hosts: apps
+  gather_facts: true
   become: true
-  hosts: appdbs
-  tasks:
-  - name: install progress
-    command: "yum install -y postgresql-server"
-
-  #- name: install postgres
-  #  yum:
-  #    name: postgresql-server
-  #    state: latest
-  - name: enable apache at boot
-    se
9E7A
rvice:
-      name: postgresql
-      enabled: yes
-  - name: tell user to finish setting up postgres
-    debug:
-      msg: "Either uncomment the postgres setup or manually login and initialize"
+  roles:
+    - apache
 
- # only run the next 2 tasks once!
-#  - name: initilize postgres
-#    command: postgresql-setup initdb
-#  - name: initilize postgres some more
-#    command: chkconfig postgresql on
-  - name: start postgres
-    service:
-      name: postgresql.service
-      state: started
-
-- name: deploy apache
-  hosts: apps
-  gather_facts: false
-  become: true
-  hosts: apps
-  tasks:
-  - name: install apache
-    yum:
-      name: httpd
-      state: latest
-  - name: enable apache at boot
-    service:
-      name: httpd
-      enabled: yes
-  - name: start apache
-    service:
-      name: httpd
-      state: started
diff --git a/3tier-bad/my_ad_vars.yml b/3tier-bad/my_ad_vars.yml
@@ -0,0 +1,4 @@
+ad_domain_name: ad1.5f79.example.opentlc.com
+ad_safe_mode_password: "jVMijRwLbI02gFCo2xkjlZ9lxEA7bm7zgg=="
+ad_admin_user: "admin@{{ ad_domain_name}}"
+ad_admin_password: "jVMijRwLbI02gFCo2xkjlZ9lxEA7bm7zgg=="
diff --git a/3tier-bad/roles/apache/tasks/main.yml b/3tier-bad/roles/apache/tasks/main.yml
@@ -0,0 +1,14 @@
+# base role for repo and packages
+---
+- name: install apache
+  yum:
+    name: httpd
+    state: latest
+- name: enable apache at boot
+  service:
+    name: httpd
+    enabled: yes
+- name: start apache
+  service:
+    name: httpd
+    state: started
diff --git a/3tier-bad/roles/base/tasks/main.yml b/3tier-bad/roles/base/tasks/main.yml
@@ -0,0 +1,8 @@
+# base role for repo and packages
+---
+- name: enable repos
+  template:
+    # src: ./open_three-tier-app.repo
+    src: /home/rewati.raman.gautam-accenture.co/ansiblegit/bad-ansible/open_three-tier-app.repo
+    dest: /etc/yum.repos.d/open_three-tier-app.repo
+    mode: 0644
diff --git a/3tier-bad/roles/haproxy/tasks/main.yml b/3tier-bad/roles/haproxy/tasks/main.yml
@@ -0,0 +1,21 @@
+# base role for repo and packages
+---
+- name: http
+  package:
+    name: httpie
+    state: latest
+- name: install HAProxy
+  yum:
+    name=haproxy state=latest
+- name: enable HAProxy
+  service:
+    name: haproxy
+    state: started
+- name: configure haproxy
+  template:
+    src: ./haproxy.cfg.j2
+    dest: /etc/haproxy/haproxy.cfg
+- name: restart HAproxy
+  service:
+    name: haproxy
+    state: restarted
diff --git a/3tier-bad/haproxy.cfg.j2 → ...ad/roles/haproxy/templates/haproxy.cfg.j2 b/3tier-bad/haproxy.cfg.j2 → ...ad/roles/haproxy/templates/haproxy.cfg.j2
@@ -25,5 +25,13 @@ backend app-servers
     mode http
     balance roundrobin
     option forwardfor
-    server app1 app1.{{GUID}}.internal:8080 cookie app1 check
-    server app2 app2.{{GUID}}.internal:8080 cookie app2 check
+    # {% for server in groups.apps %}
+    #   server {{server.split('.')[0] }} {{server}}:8080 cookie {{server.split('.')[0] }} check
+    # {%endfor %}
+
+    {% for server in groups.apps %}
+      server app{{ loop.index }} {{ inventory_hostname }}:8080 cookie app{{ loop.index }}  check
+    {%endfor %}
+
+    # server app1 app1.{{GUID}}.internal:8080 cookie app1 check
+    # server app2 app2.{{GUID}}.internal:8080 cookie app2 check
diff --git a/3tier-bad/roles/pgsql/tasks/main.yml b/3tier-bad/roles/pgsql/tasks/main.yml
@@ -0,0 +1,51 @@
+# base role for repo and packages
+---
+- name: install progress
+  command: "yum install -y postgresql-server"
+
+- name: whoami
+  shell: whoami
+
+- name: whoami
+  shell: ls -lart /var/lib/pgsql/
+
+# - name: install postgres
+#  yum:
+#    name: postgresql-server
+#    state: latest
+- name: enable apache at boot
+  service:
+    name: postgresql
+    enabled: yes
+- name: tell user to finish setting up postgres
+  debug:
+    msg: "Either uncomment the postgres setup or manually login and initialize"
+
+# - name: stat ansible configuration file
+#   stat:
+#     path: "/var/lib/pgsql/data"
+#   register: stat_ansible_config
+
+- name: Check if PostgreSQL database is initialized.
+  stat:
+    path: "/var/lib/pgsql/data"
+  register: pgdata_dir_version
+
+ # only run the next 2 tasks once!
+# - name: initilize postgres
+#   command: postgresql-setup initdb
+# - name: initilize postgres some more
+#   command: chkconfig postgresql on
+
+- name: Ensure PostgreSQL database is initialized.
+  command: postgresql-setup initdb
+  when: not pgdata_dir_version.stat.exists
+
+- name: Ensure PostgreSQL database is Checkconfig on.
+  command: chkconfig postgresql on
+  when: not pgdata_dir_version.stat.exists
+
+- name: start postgres
+  service:
+    name: postgresql.service
+    state: started
diff --git a/3tier-bad/index.html.app1 → 3tier-bad/roles/tomcat/files/index.html.app1 b/3tier-bad/index.html.app1 → 3tier-bad/roles/tomcat/files/index.html.app1
diff --git a/3tier-bad/index.html.app2 → 3tier-bad/roles/tomcat/files/index.html.app2 b/3tier-bad/index.html.app2 → 3tier-bad/roles/tomcat/files/index.html.app2
diff --git a/3tier-bad/roles/tomcat/tasks/main.yml b/3tier-bad/roles/tomcat/tasks/main.yml
@@ -0,0 +1,40 @@
+# base role for repo and packages
+---
+- name: install tomcat
+  package:
+    name: tomcat
+    state: latest
+- name: enable tomcat at boot
+  service:
+    name: tomcat
+    enabled: yes
+
+- name: create  tomcat directory
+  file:
+    path: /usr/share/tomcat/webapps/ROOT/
+    state: directory
+    mode: 0755
+
+- name: create ansible tomcat directory
+  file:
+    path: /usr/share/tomcat/webapps/ansible
+    state: directory
+    mode: 0755
+
+- name: copy static index.html to tomcat webapps/ansible/index.html
+  template:
+    src: index.html.j2
+    dest: /usr/share/tomcat/webapps/ROOT/index.html
+    mode: 0755
+
+- name: start tomcat
+  service:
+    name: tomcat
+    state: started
+
+
+- name: copy static index.html to tomcat webapps/ansible/index.html
+  template:
+    src: index.html.j2
+    dest: /usr/share/tomcat/webapps/ansible/index.html
+
diff --git a/3tier-bad/index.html.j2 → ...-bad/roles/tomcat/templates/index.html.j2 b/3tier-bad/index.html.j2 → ...-bad/roles/tomcat/templates/index.html.j2
diff --git a/3tier-bad/roles/win_ad_install/tasks/main.yml b/3tier-bad/roles/win_ad_install/tasks/main.yml
@@ -0,0 +1,36 @@
+---
+
+- name: Include vars 
+  include_vars:
+    file: ad.yml
+
+
+- name: Install AD-Domain-Services
+  win_feature:
+    name: AD-Domain-Services
+    state: present
+
+# - name: Domain Controller
+#   include_vars: ad.yml
+#   win_domain_controller: 
+#      dns_domain_name: ad1.766a.example.opentlc.com
+#      domain_admin_user: admin@ad1.766a.example.opentlc.com
+#      domain_admin_password: jVMijRwLbI02gFCo2xkjlZ9lxEA7bm7zgg==
+#      safe_mode_password: jVMijRwLbI02gFCo2xkjlZ9lxEA7bm7zgg==
+#      state: domain_controller
+#      log_path: c:\ansible_win_domain_controller.txt
+
+- name: Domain Controller
+  # include_vars: ad.yml
+  win_domain: 
+     dns_domain_name: "{{ad_domain_name}}"
+     domain_admin_user: "{{ad_admin_user }}"
+     domain_admin_password: "{{ad_safe_mode_password}}"
+     safe_mode_password: "{{ad_safe_mode_password}}"
+
+- name: Reboot win machine
+  win_reboot:
+    reboot_timeout: 3600
+
+- name: Reboot win machine
+  shell: nltest /dclist:"{{ ad_domain_name }}" 
diff --git a/3tier-bad/roles/win_ad_install/vars/ad.yml b/3tier-bad/roles/win_ad_install/vars/ad.yml
@@ -0,0 +1,4 @@
+ad_domain_name: ad1.5f79.example.opentlc.com
+ad_safe_mode_password: "jVMijRwLbI02gFCo2xkjlZ9lxEA7bm7zgg=="
+ad_admin_user: "admin@{{ ad_domain_name}}"
+ad_admin_password: "jVMijRwLbI02gFCo2xkjlZ9lxEA7bm7zgg=="