commit

.gitignore

@@ -1 +1,2 @@
-.DS_store
+.DS_store
+.pass

all.yml

@@ -1,5 +1,25 @@
 ---
-- name: All configs
-  hosts: cluster
+- name: Deploy / build server
+  hosts: deploy
   roles:
-    - preconfig
+    - role: preconfig
+      tags: preconfig
+    - role: build
+      tags: build
+    - role: deploy
+      tags: deploy
+#    - swarm_init
+
+- name: Manager
+  hosts: managers
+  roles:
+    - role: preconfig
+      tags: preconfig
+  #  - swarm_join
+
+- name: Worker
+  hosts: workers
+  roles:
+    - role: preconfig
+      tags: preconfig
+ #   - swarm_join

group_vars/all/vars.yml

@@ -0,0 +1,35 @@
+---
+rmq_defaults:
+  - name: AMQP_EXCHANGE
+    value: xchg_integrations
+  - name: AMQP_USER
+    value: "{{rmq.user}}"
+  - name: AMQP_PASSWORD
+    value: "{{rmq.password}}"
+  - name: AMQP_HOSTNAME
+    value: rmq
+
+registry_name: "localhost:5000/"
+
+services:
+  - name: api
+    version: latest
+  - name: app
+    version: latest
+  - name: converter
+    version: latest
+  - name: rmq
+    version: 3-management
+  - name: nginx
+    version: latest
+
+non_build_services:
+  - name: rmq
+    version: 3-management
+  - name: nginx
+    version: latest
+
+
+configs:
+  converter:
+    queue: q_imageProcessor

group_vars/all/vault.yml

@@ -0,0 +1,4 @@
+---
+rmq:
+  user: admin
+  password: admin

inventory/cluster

@@ -1,6 +1,8 @@
-[cluster]
-server1 ansible_host=127.0.0.1 ansible_user=vagrant ansible_port=2223
-server2 ansible_host=127.0.0.1 ansible_user=vagrant ansible_port=2224
-server3 ansible_host=127.0.0.1 ansible_user=vagrant ansible_port=2225
-server4 ansible_host=127.0.0.1 ansible_user=vagrant ansible_port=2226
-server5 ansible_host=127.0.0.1 ansible_user=vagrant ansible_port=2227
+[deploy]
+server1 ansible_host=127.0.0.1 ansible_user=vagrant ansible_port=7001
+[managers]
+server2 ansible_host=127.0.0.1 ansible_user=vagrant ansible_port=7002
+server3 ansible_host=127.0.0.1 ansible_user=vagrant ansible_port=7003
+[workers]
+server4 ansible_host=127.0.0.1 ansible_user=vagrant ansible_port=7004
+server5 ansible_host=127.0.0.1 ansible_user=vagrant ansible_port=7005

requirements.yml

@@ -0,0 +1,2 @@
+collections:
+  - name: community.docker

roles/build/defaults/main.yml

@@ -0,0 +1 @@
+git_folder: /home/vagrant/docker

roles/build/tasks/main.yml

@@ -0,0 +1,24 @@
+---
+- name: Клонируем репозиторий
+  ansible.builtin.git:
+    repo: "https://github.com/Maloquiin/docker-demo.git"
+    dest: "{{ git_folder }}"
+    version: block-14
+
+- name: Собираем image
+  community.docker.docker_image:
+    name: "{{ registry_name }}{{ item.name }}"
+    tag: "{{ item.version }}"
+    push: true
+    force_source: true
+    force_tag: true
+    build:
+      path: "{{ git_folder }}"
+      dockerfile: "{{ git_folder }}/apps/{{ item.name }}/Dockerfile"
+    source: build
+  loop: "{{ services | difference(non_build_services) }}"
+
+- name: Удаляем репозиторий
+  file:
+    state: absent
+    path: "{{ git_folder }}"

roles/deploy/services/api/.env.j2

@@ -0,0 +1,3 @@
+{% for item in rmq_defaults %}
+{{ item.name }} = {{ item.value }}
+{% endfor %}

roles/deploy/services/api/service.yml

@@ -0,0 +1,25 @@
+---
+- name: "[{{ name }}] Конфигурация секрета"
+  include: "../secret.yml"
+
+- name: "[{{ name }}] Выкладка сервиса"
+  block:   
+
+  - name: "[{{ name }}] Выкладываем сервис"
+    community.docker.docker_swarm_service:
+      name: "{{ name }}"
+      image: "{{ registry_name }}{{ name }}:{{ version }}"
+      state: present
+      force_update: true
+      networks: 
+        - name: "{{ network_name }}"
+      publish:
+        - mode: ingress
+          protocol: tcp
+          published_port: 3002
+          target_port: 3000
+      secrets:
+        - secret_name: "{{ name }}.env"
+          filename: "/opt/app/.env"
+
+  tags: "{{ name }}"

roles/deploy/services/app/service.yml

@@ -0,0 +1,19 @@
+---
+- name: "[{{ name }}] Выкладка сервиса"
+  block:   
+
+  - name: "[{{ name }}] Выкладываем сервис"
+    community.docker.docker_swarm_service:
+      name: "{{ name }}"
+      image: "{{ registry_name }}{{ name }}:{{ version }}"
+      state: present
+      force_update: true
+      networks: 
+        - name: "{{ network_name }}"
+      publish:
+        - mode: ingress
+          protocol: tcp
+          published_port: 3001
+          target_port: 80
+
+  tags: "{{ name }}"

roles/deploy/services/config-create.yml

@@ -0,0 +1,11 @@
+---
+- name: "[{{ name }}] Создаём конфиг"
+  vars:
+    config_file: "{{ lookup('template', '{{ name }}/{{ config_item }}.j2') }}"
+  community.docker.docker_config:
+    name: "{{ config_item }}"
+    data: "{{ config_file | b64encode }}"
+    labels:
+      config: "{{ config_file | hash('sha1') }}"
+    data_is_b64: true
+    state: present

roles/deploy/services/config.yml

@@ -0,0 +1,17 @@
+---
+- name: "[{{ name }}] Конфигурация конфига"
+  block:
+
+  - name: "[{{ name }}] Создаем конфиг"
+    include: "config-create.yml"
+
+  tags: "{{ name }}"
+
+  rescue:
+    - name: "[{{ name }}] Удаляем сервис"
+      community.docker.docker_swarm_service:
+        name: "{{ name }}"
+        state: absent
+
+    - name: "[{{ name }}] Создаем конфиг"
+      include: "config-create.yml"

roles/deploy/services/converter/.env.j2

@@ -0,0 +1,4 @@
+{% for item in rmq_defaults %}
+{{ item.name }} = {{ item.value }}
+{% endfor %}
+AMQP_QUEUE = {{ configs.converter.queue }}

roles/deploy/services/converter/service.yml

@@ -0,0 +1,20 @@
+---
+- name: "[{{ name }}] Конфигурация секрета"
+  include: "../secret.yml"
+
+- name: "[{{ name }}] Выкладка сервиса"
+  block:   
+
+  - name: "[{{ name }}] Выкладываем сервис"
+    community.docker.docker_swarm_service:
+      name: "{{ name }}"
+      image: "{{ registry_name }}{{ name }}:{{ version }}"
+      state: present
+      force_update: true
+      networks: 
+        - name: "{{ network_name }}"
+      secrets:
+        - secret_name: "{{ name }}.env"
+          filename: "/opt/app/.env"
+
+  tags: "{{ name }}"

roles/deploy/services/nginx/nginx.conf.j2

@@ -0,0 +1,18 @@
+worker_processes 2;
+
+events { worker_connections 1024; }
+
+http {
+    server {
+        listen 80;
+        server_name image.local;
+
+        location ~ (/uploads/|/upload) {
+            proxy_pass http://api:3000;
+        }
+
+        location ~ (/) {
+            proxy_pass http://app:80;
+        }
+    }
+}

roles/deploy/services/nginx/service.yml

@@ -0,0 +1,26 @@
+---
+- name: "[{{ name }}] Конфигурация конфига"
+  include: "../config.yml"
+  loop:
+    - nginx.conf
+  loop_control:
+    loop_var: config_item
+
+- name: "[{{ name }}] Выкладка сервиса"
+  block:
+    - name: "[{{ name }}] Выкладываем сервис"
+      community.docker.docker_swarm_service:
+        name: "{{ name }}"
+        image: "nginx:{{ version }}"
+        state: present
+        networks:
+          - name: "{{ network_name }}"
+        publish:
+          - mode: ingress
+            protocol: tcp
+            published_port: 80
+            target_port: 80
+        configs:
+          - config_name: nginx.conf
+            filename: "/etc/nginx/nginx.conf"
+  tags: "{{ name }}"

roles/deploy/services/rmq/service.yml

@@ -0,0 +1,16 @@
+---
+- name: "[{{ name }}] Выкладка сервиса"
+  block:   
+
+  - name: "[{{ name }}] Выкладываем сервис"
+    community.docker.docker_swarm_service:
+      name: "{{ name }}"
+      image: "rabbitmq:{{ version }}"
+      state: present
+      networks: 
+        - name: "{{ network_name }}"
+      env:
+        - RABBITMO_DEFAULT_USER={{ rmq.user }}
+        - RABBITMO_DEFAULT_PASS={{ rmq.password }}
+
+  tags: "{{ name }}"

roles/deploy/services/secret-create.yml

@@ -0,0 +1,11 @@
+---
+- name: "[{{ name }}] Создаем секрет"
+  vars:
+    env_file: "{{ lookup('template', '{{ name }}/.env.j2')}}"
+  community.docker.docker_secret:
+    name: "{{ name }}.env"
+    data: env_file | b64encode }}"
+    labels:
+      secret: env_file | hash('sha1') }}"
+    data_is_b64: true
+    state: present

roles/deploy/services/secret.yml

@@ -0,0 +1,17 @@
+---
+- name: "[{{ name }}] Конфигурация секрета"
+  block:
+
+  - name: "[{{ name }}] Создаем секрет"
+    include: "secret-create.yml"
+
+  tags: "{{ name }}"
+
+  rescue:
+    - name: "[{{ name }}] Удаляем сервис"
+      community.docker.docker_swarm_service:
+        name: "{{ name }}"
+        state: absent
+
+    - name: "[{{ name }}] Создаем секрет"
+      include: "secret-create.yml"

roles/deploy/tasks/main.yml

@@ -0,0 +1,12 @@
+---
+- name: Создание сети
+  community.docker.docker_network:
+    name: "{{ network_name }}"
+    driver: overlay
+
+- name: Выкладка сервисов
+  include: "../services/{{ item.name }}/service.yml"
+  vars:
+    name: "{{ item.name }}"
+    version: "{{ item.version }}"
+  loop: "{{ services }}"

roles/deploy/vars/main.yml

@@ -0,0 +1,2 @@
+---
+network_name: app_network