Update Ansible to 2.9.12 and explicitly set mode on relevant tasks (#309)

*   Explicitly define `mode` in relevant tasks.
*   Explicitly define the `nginx` `apt_repository` filename in Debian based distros.
*   Building OpenSSL from source should now work properly in CentOS 8.

Author: alessfg

.travis.yml

@@ -57,15 +57,17 @@ jobs:
     - name: "(CentOS) Install from Source"
       env:
         scenario: source_centos
-before_install: sudo apt-get -qq update
+before_install:
+  - curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
+  - sudo add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"
+  - sudo apt-get update
+  - sudo apt-get -y -o Dpkg::Options::="--force-confnew" install docker-ce
 install:
-  - pip install ansible==2.9.11
-  - pip install molecule==3.0.6
-  - pip install docker==4.2.2
-  - pip install ansible-lint==4.2.0
+  - pip install ansible==2.9.12
+  - pip install ansible-lint==4.3.2
+  - pip install molecule==3.0.8
+  - pip install docker==4.3.1
 script:
-  - molecule --version
-  - ansible --version
   - travis_wait 50 molecule test -s $scenario
 notifications:
   webhooks: https://galaxy.ansible.com/api/v1/notifications/

CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## 0.16.0 (August 28, 2020)
+
+BREAKING CHANGES:
+
+*   The Debian and Ubuntu repositories have slightly changed. You may run into some duplication issues when running the role on a preexisting target that already has had NGINX installed using the role. To fix this, manually remove the old repository source.
+
+ENHANCEMENTS:
+
+*   Update Ansible to `2.9.12` and Ansible Lint to `4.3.2`.
+*   Explicitly define `mode` in relevant tasks.
+*   Explicitly define the `nginx` `apt_repository` filename in Debian based distros.
+
+FEATURES:
+
+*   TravisCI now always uses the latest version of Docker.
+
+BUG FIXES:
+
+*   Building OpenSSL from source should now work properly in CentOS 8.
+
 ## 0.15.0 (August 20, 2020)
 
 DEPRECATION WARNING:

README.md

@@ -9,8 +9,9 @@ This role installs NGINX Open Source, NGINX Plus, the NGINX Amplify agent, or NG
 **Note:** This role is still in active development. There may be unidentified issues and the role variables may change as development continues.
 
 **Deprecation Warnings:**
-*   There now is a separate role to manage and create NGINX configurations available [here](https://github.com/nginxinc/ansible-role-nginx-config). Any new issues or PRs related to configuring NGINX should be submitted in the new NGINX Config repository. New issues or PRs related to configuring NGINX submitted in this repository will not be worked on. The NGINX configuration functionalities included in this role will be removed in an upcoming release.
-*   NGINX Unit now has a separate role available [here](https://github.com/nginxinc/ansible-role-nginx-unit). Any new issues or PRs related to NGINX Unit should be submitted in the new NGINX Unit repository. New issues or PRs related to NGINX Unit submitted in this repository will not be worked on. The NGINX Unit functionalities included in this role will be removed in an upcoming release.
+
+*   There now is a separate role to manage and create NGINX configurations available [here](https://github.com/nginxinc/ansible-role-nginx-config). Any new issues or PRs related to configuring NGINX should be submitted in the new NGINX Config repository. New issues or PRs related to configuring NGINX submitted in this repository will not be worked on (with the exception of major bugfixes). The NGINX configuration functionalities included in this role will be removed in an upcoming release.
+*   NGINX Unit now has a separate role available [here](https://github.com/nginxinc/ansible-role-nginx-unit). Any new issues or PRs related to NGINX Unit should be submitted in the new NGINX Unit repository. New issues or PRs related to NGINX Unit submitted in this repository will not be worked on (with the exception of major bugfixes). The NGINX Unit functionalities included in this role will be removed in an upcoming release.
 
 Requirements
 ------------

defaults/main/linux.yml

@@ -8,6 +8,6 @@ nginx_linux_families: ['Alpine', 'Debian', 'RedHat', 'Suse']
 nginx_plus_linux_families: ['Alpine', 'Debian', 'RedHat', 'Suse']
 
 # Default locations and versions when 'nginx_install_from; is set to 'source'
-pcre_version: pcre-8.43
+pcre_version: pcre-8.44
 zlib_version: zlib-1.2.11
-openssl_version: openssl-1.1.1c
+openssl_version: openssl-1.1.1g

handlers/main.yml

@@ -22,7 +22,7 @@
       changed_when: false
   when:
     - nginx_start | bool
-    - not ansible_check_mode
+    - not ansible_check_mode | bool
 
 - name: "(Handler: All OSs) Start NGINX Amplify Agent"
   service:

molecule/common/playbooks/module_verify.yml

@@ -21,5 +21,6 @@
     - name: Check default.conf does not exist
       stat:
         path: /etc/nginx/conf.d/default.conf
+      check_mode: yes
       register: stat_result
       failed_when: stat_result.stat.exists

molecule/common/playbooks/stable_push_verify.yml

@@ -26,6 +26,7 @@
     - name: Check default.conf exists
       stat:
         path: /etc/nginx/conf.d/default.conf
+      check_mode: yes
       register: stat_result
       failed_when: not stat_result.stat.exists
 

molecule/common/playbooks/template_converge.yml

@@ -6,7 +6,7 @@
       include_role:
         name: ansible-role-nginx
       vars:
-        nginx_debug_output: true
+        # nginx_debug_output: true
 
         nginx_service_modify: true
         nginx_service_timeout: 95

molecule/common/playbooks/template_verify.yml

@@ -26,18 +26,21 @@
     - name: Check default.conf exists
       stat:
         path: /etc/nginx/conf.d/default.conf
+      check_mode: yes
       register: stat_result
       failed_when: not stat_result.stat.exists
 
     - name: Check frontend_default.conf exists
       stat:
         path: /etc/nginx/conf.d/frontend_default.conf
+      check_mode: yes
       register: stat_result
       failed_when: not stat_result.stat.exists
 
     - name: Check backend_default.conf exists
       stat:
         path: /etc/nginx/conf.d/backend_default.conf
+      check_mode: yes
       register: stat_result
       failed_when: not stat_result.stat.exists
 

tasks/amplify/install-amplify.yml

@@ -14,6 +14,7 @@
     remote_src: yes
     src: /etc/amplify-agent/agent.conf.default
     dest: /etc/amplify-agent/agent.conf
+    mode: 0644
 
 - name: "(Setup: All OSs) Configure NGINX Amplify Agent API Key"
   lineinfile: