Aliia Bashirova, LAB09, SD-03

.github/workflows/ansible-deploy.yml

@@ -0,0 +1,79 @@
+name: Ansible Deployment
+
+on:
+    push:
+        branches: [main, master, lab06]
+        paths:
+            - "ansible/**"
+            - ".github/workflows/ansible-deploy.yml"
+    pull_request:
+        branches: [main, master, lab06]
+        paths:
+            - "ansible/**"
+
+jobs:
+    lint:
+        name: Ansible Lint
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout code
+              uses: actions/checkout@v4
+
+            - name: Set up Python
+              uses: actions/setup-python@v5
+              with:
+                  python-version: "3.12"
+
+            - name: Install dependencies
+              run: |
+                  pip install ansible ansible-lint
+
+            - name: Run ansible-lint
+              env:
+                  ANSIBLE_VAULT_PASSWORD: ${{ secrets.ANSIBLE_VAULT_PASSWORD }}
+              run: |
+                  cd ansible
+                  echo "$ANSIBLE_VAULT_PASSWORD" > /tmp/vault_pass
+                  export ANSIBLE_VAULT_PASSWORD_FILE=/tmp/vault_pass
+                  ansible-lint playbooks/*.yml
+                  rm /tmp/vault_pass
+
+    deploy:
+        name: Deploy Application
+        needs: lint
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout code
+              uses: actions/checkout@v4
+
+            - name: Set up Python
+              uses: actions/setup-python@v5
+              with:
+                  python-version: "3.12"
+
+            - name: Install Ansible
+              run: pip install ansible
+
+            - name: Setup SSH
+              run: |
+                  mkdir -p ~/.ssh
+                  echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_rsa
+                  chmod 600 ~/.ssh/id_rsa
+
+            - name: Deploy with Ansible
+              env:
+                  ANSIBLE_VAULT_PASSWORD: ${{ secrets.ANSIBLE_VAULT_PASSWORD }}
+                  ANSIBLE_HOST_KEY_CHECKING: False
+              run: |
+                  cd ansible
+                  echo "$ANSIBLE_VAULT_PASSWORD" > /tmp/vault_pass
+                  ansible-playbook playbooks/deploy.yml \
+                    -i inventory/hosts.ini \
+                    --vault-password-file /tmp/vault_pass
+                  rm /tmp/vault_pass
+
+            - name: Verify Deployment
+              run: |
+                  sleep 10
+                  curl -f http://${{ secrets.VM_HOST }}:5000 || exit 1
+                  curl -f http://${{ secrets.VM_HOST }}:5000/health || exit 1

.github/workflows/python-ci.yml

@@ -0,0 +1,67 @@
+name: Python CI
+
+on:
+  push:
+    paths:
+      - "app_python/**"
+      - ".github/workflows/python-ci.yml"
+  pull_request:
+    paths:
+      - "app_python/**"
+
+jobs:
+  test-and-build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v4
+
+      - name: Cache pip dependencies
+        uses: actions/cache@v3
+        with:
+          path: ~/.cache/pip
+          key: ${{ runner.os }}-pip-${{ hashFiles('app_python/requirements.txt') }}
+          restore-keys: |
+            ${{ runner.os }}-pip-
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install dependencies
+        run: |
+          pip install --upgrade pip
+          pip install -r app_python/requirements.txt
+
+      - name: Run tests
+        run: |
+          cd app_python
+          pytest
+
+      - name: Docker login
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Set Docker image version
+        run: echo "VERSION=$(date +%Y.%m.%d)" >> $GITHUB_ENV
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v6 
+        with:
+          context: app_python
+          push: true
+          tags: |
+            ${{ secrets.DOCKERHUB_USERNAME }}/devops-info-python:${{ env.VERSION }}
+            ${{ secrets.DOCKERHUB_USERNAME }}/devops-info-python:latest
+
+      - name: Install Snyk
+        run: npm install -g snyk
+
+      - name: Run Snyk test
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        run: snyk test --all-projects --severity-threshold=high

.gitignore

@@ -0,0 +1,5 @@
+test
+minikube-darwin-arm64
+*.dmg
+*.pkg
+minikube*