kitchen-ansible
A Test Kitchen Provisioner for Ansible.
The provisioner works by passing the ansible repository based on attributes in .kitchen.yml
& calling ansible-playbook
.
It installs Ansible on the server and runs ansible-playbook
using host localhost.
It has been tested against the Ubuntu 12.04, Ubuntu 14.04, Centos 6.5 and Debian 6/7/8 boxes running in vagrant/virtualbox.
Requirements
- test-kitchen
- a driver box without a chef installation so ansible can be installed.
Installation & Setup
Install the kitchen-ansible gem in your system, along with kitchen-vagrant or some other suitable driver for test-kitchen:
gem install kitchen-ansible
gem install kitchen-vagrant
Example kitchen.yml file
Based on the example ansible setup for tomcat at https://github.com/ansible/ansible-examples/tree/master/tomcat-standalone
---
driver:
name: vagrant
provisioner:
name: ansible_playbook
roles_path: roles
hosts: tomcat-servers
require_ansible_repo: true
ansible_verbose: true
ansible_version: latest
extra_vars:
a: b
platforms:
- name: nocm_centos-6.5
driver_plugin: vagrant
driver_config:
box: nocm_centos-6.5
box_url: http://puppet-vagrant-boxes.puppetlabs.com/centos-65-x64-virtualbox-nocm.box
network:
- ['forwarded_port', {guest: 8080, host: 8080}]
- [ 'private_network', { ip: '192.168.33.11' } ]
Test-Kitchen Ansible Windows Support
Windows is supported by creating a linux server to run ansible with software required to support winrm. Then the winrm connection is used to configure the windows server.
In kitchen.yml set
ansible_connection: winrm
require_windows_support: true
require_chef_for_busser: false
See example https://github.com/neillturner/ansible_windows_repo.
Ruby install to run serverspec verify
By default test-kitchen installs chef to get a ruby version suitable to run serverspec in the verify
step.
Instead ruby can just be installed by specifying the provisioner option:
require_ruby_for_busser: true
And set the verifier section:
verifier:
name: serverspec
sudo_path: true
suites:
- name: ansible
driver_config:
hostname: '54.229.34.169'
verifier:
patterns:
- roles/tomcat/spec/tomcat_spec.rb
bundler_path: '/usr/local/bin'
rspec_path: '/usr/local/bin'
env_vars:
TARGET_HOST: 54.229.104.40
LOGIN_USER: centos
SUDO: true
SSH_KEY: spec/test.pem
Please see the Provisioner Options for a complete listing.
Test-Kitchen Ansiblespec
By using kitchen-verifier-serverspec and the Runner ansiblespec_runner tests can be run against multiple servers with multiple roles in the ansiblespec format.
Serverspec uses ssh to communicate with the server to be tested and reads the ansible playbook and inventory files to determine the hosts to test and the roles for each host.
See example https://github.com/neillturner/ansible_repo
Example usage to create tomcat servers:
Usage
Directory
In the ansible repository specify:
- spec files with the roles.
- spec_helper in the spec folder (with code as below).
.
+-- roles
¦ +-- mariadb
¦ ¦ +-- spec
¦ ¦ ¦ +-- mariadb_spec.rb
¦ ¦ +-- tasks
¦ ¦ ¦ +-- main.yml
¦ ¦ +-- templates
¦ ¦ +-- mariadb.repo
¦ +-- nginx
¦ +-- handlers
¦ ¦ +-- main.yml
¦ +-- spec
¦ ¦ +-- nginx_spec.rb
¦ +-- tasks
¦ ¦ +-- main.yml
¦ +-- templates
¦ ¦ +-- nginx.repo
¦ +-- vars
¦ +-- main.yml
+-- spec
+-- spec_helper.rb
+-- my_private_key.pem
spec_helper
require 'rubygems'
require 'bundler/setup'
require 'serverspec'
require 'pathname'
require 'net/ssh'
RSpec.configure do |config|
set :host, ENV['TARGET_HOST']
# ssh options at http://net-ssh.github.io/ssh/v1/chapter-2.html
# ssh via password
set :ssh_options, :user => ENV['LOGIN_USER'], :paranoid => false, :verbose => :error, :password => ENV['LOGIN_PASSWORD'] if ENV['LOGIN_PASSWORD']
# ssh via ssh key
set :ssh_options, :user => ENV['LOGIN_USER'], :paranoid => false, :verbose => :error, :host_key => 'ssh-rsa', :keys => [ ENV['SSH_KEY'] ] if ENV['SSH_KEY']
set :backend, :ssh
set :request_pty, true
end
See kitchen-verifier-serverspec
Alternative Virtualization/Cloud providers for Vagrant
This could be adapted to use alternative virtualization/cloud providers such as Openstack/AWS/VMware Fusion according to whatever is supported by Vagrant.
platforms:
- name: ubuntu-12.04
driver_config:
provider: aws
box: my_base_box
# username is based on what is configured in your box/ami
username: ubuntu
customize:
access_key_id: "AKKJHG659868LHGLH"
secret_access_key: "G8t7o+6HLG876JGF/58"
ami: ami-7865ab765d
instance_type: t2.micro
# more customisation can go here, based on what the vagrant provider supports
#security-groups: []
Notes
- The
default
in all of the above is the name of the test suite defined in the 'suites' section of your.kitchen.yml
, so if you have more than suite of tests or change the name, you'll need to adapt the example accordingly. - serverspec test files must be named
_spec.rb
- Since I'm using Vagrant, my
box
definitions refer to Vagrant boxes, either standard, published boxes available from http://atlas.hashicorp.com/boxes or custom-created boxes (perhaps using [Packer][packer] and [bento][bento]), in which case you'll need to provide the url inbox_url
.
[Serverspec]: http://serverspec.org [packer]: https://packer.io [bento]: https://github.com/chef/bento
Tips
You can easily skip previous instructions and jump directly to the broken statement you just fixed by passing
an environment variable. Add the following to your .kitchen.yml
:
provisioner:
name: ansible_playbook
ansible_extra_flags: <%= ENV['ANSIBLE_EXTRA_FLAGS'] %>
Then run:
ANSIBLE_EXTRA_FLAGS='--start-at-task="myrole | name of last working instruction"' kitchen converge
You save a lot of time not running working instructions.