molecule troubleshooting and restructure - not completed yet
This commit is contained in:
parent
1610554eea
commit
4fc8504edc
|
|
@ -0,0 +1,35 @@
|
||||||
|
name: Molecule CI
|
||||||
|
|
||||||
|
on:
|
||||||
|
push:
|
||||||
|
branches:
|
||||||
|
- main
|
||||||
|
pull_request:
|
||||||
|
branches:
|
||||||
|
- main
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
molecule:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
strategy:
|
||||||
|
matrix:
|
||||||
|
role:
|
||||||
|
- secure_ubuntu
|
||||||
|
- podman_services
|
||||||
|
- identity
|
||||||
|
- file_storage
|
||||||
|
- monitoring
|
||||||
|
- preflight
|
||||||
|
steps:
|
||||||
|
- uses: actions/checkout@v4
|
||||||
|
- name: Set up Python
|
||||||
|
uses: actions/setup-python@v4
|
||||||
|
with:
|
||||||
|
python-version: 3.12
|
||||||
|
- name: Install Ansible and Molecule
|
||||||
|
run: |
|
||||||
|
pip install ansible molecule molecule-plugins[docker] docker
|
||||||
|
- name: Test Molecule Scenario
|
||||||
|
run: |
|
||||||
|
cd collections/ansible_collections/kellengineering/open_cmmc_stack/roles/${{ matrix.role }}
|
||||||
|
molecule test
|
||||||
|
|
@ -0,0 +1,32 @@
|
||||||
|
name: Terraform Validation
|
||||||
|
|
||||||
|
on:
|
||||||
|
push:
|
||||||
|
branches:
|
||||||
|
- main
|
||||||
|
pull_request:
|
||||||
|
branches:
|
||||||
|
- main
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
terraform:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
defaults:
|
||||||
|
run:
|
||||||
|
working-directory: terraform/envs/dev
|
||||||
|
|
||||||
|
steps:
|
||||||
|
- uses: actions/checkout@v4
|
||||||
|
- name: Setup Terraform
|
||||||
|
uses: hashicorp/setup-terraform@v2
|
||||||
|
with:
|
||||||
|
terraform_version: 1.5.7
|
||||||
|
|
||||||
|
- name: Terraform Init
|
||||||
|
run: terraform init -backend-config=../../backend-config/dev.tfbackend
|
||||||
|
|
||||||
|
- name: Terraform Validate
|
||||||
|
run: terraform validate
|
||||||
|
|
||||||
|
- name: Terraform Plan
|
||||||
|
run: terraform plan -input=false
|
||||||
|
|
@ -1,9 +0,0 @@
|
||||||
---
|
|
||||||
galaxy_info:
|
|
||||||
role_name: secure_ubuntu
|
|
||||||
author: open-cmmc
|
|
||||||
description: Harden Ubuntu system for CMMC Level 2
|
|
||||||
license: MIT
|
|
||||||
min_ansible_version: "2.10"
|
|
||||||
|
|
||||||
dependencies: []
|
|
||||||
|
|
@ -0,0 +1,2 @@
|
||||||
|
# OpenCMMC Stack Collection
|
||||||
|
Ansible collection containing roles for secure, auditable deployment of the OpenCMMC Stack.
|
||||||
|
|
@ -0,0 +1,11 @@
|
||||||
|
namespace: kellengineering
|
||||||
|
name: open_cmmc_stack
|
||||||
|
version: 1.0.0
|
||||||
|
readme: README.md
|
||||||
|
authors:
|
||||||
|
- Mike Kell
|
||||||
|
description: Collection for OpenCMMC Stack
|
||||||
|
license: MIT
|
||||||
|
repository: https://github.com/mtkell/open-cmmc-stack
|
||||||
|
|
||||||
|
build_ignore: []
|
||||||
|
|
@ -0,0 +1,12 @@
|
||||||
|
---
|
||||||
|
galaxy_info:
|
||||||
|
role_name: secure_ubuntu
|
||||||
|
author: Mike Kell
|
||||||
|
description: Hardens Ubuntu to meet CMMC Level 2 minimums
|
||||||
|
license: MIT
|
||||||
|
min_ansible_version: "2.12"
|
||||||
|
platforms:
|
||||||
|
- name: Ubuntu
|
||||||
|
versions:
|
||||||
|
- 20.04
|
||||||
|
- 22.04
|
||||||
Loading…
Reference in New Issue