Feature/minio testonly (#517)

* add minio role

* add minio  role to playbooks

* add minio to check script

Author: crosmuller

deploy_containers_playbook.yml

@@ -157,3 +157,9 @@
   become: true
   roles:
     - { role: voot, tags: ['voot'] }
+
+- name: Deploy minio app
+  hosts: docker_minio
+  become: true
+  roles:
+    - { role: minio, tags: ['minio'] }

provision.yml

@@ -133,4 +133,9 @@
     - { role: mariadbdocker, tags: ['mariadbdocker']}
     - { role: mongodbdocker, tags: ['mongodbdocker']}
 
+- hosts: docker_minio
+  become: true
+  roles:
+    - { role: minio, tags: ["minio"] }
+
 - import_playbook: "{{ environment_dir }}/playbook.yml"

roles/minio/defaults/main.yml

@@ -0,0 +1,7 @@
+---
+minio_dir: /opt/openconext/minio
+minio_data_dir: "{{ minio_dir }}/data"
+minio_version: RELEASE.2025-05-24T17-08-30Z
+minio_data_dir_oncontainer: "/mnt/data"
+minio_root_user: "minioadmin"
+# minio_root_password get from vault

roles/minio/handlers/main.yml

@@ -0,0 +1,11 @@
+---
+- name: Restart minio
+  community.docker.docker_container:
+    name: minio
+    state: started
+    restart: true
+    # avoid restarting it creates unexpected data loss according to docker_container_module notes
+    # https://docs.ansible.com/ansible/latest/collections/community/docker/docker_container_module.html#notes
+    comparisons:
+      '*': ignore
+  when: miniocontainer is success and miniocontainer is not change

roles/minio/tasks/main.yml

@@ -0,0 +1,70 @@
+---
+- name: Create minio files directory
+  ansible.builtin.file:
+    state: directory
+    path: "{{ minio_dir }}"
+    owner: root
+    group: root
+    mode: "0755"
+
+- name: Create minio data directory
+  ansible.builtin.file:
+    state: directory
+    path: "{{ minio_data_dir }}"
+    owner: root
+    group: root
+    mode: "0755"
+
+- name: Place the serverapplication configfiles
+  ansible.builtin.template:
+    src: "{{ item }}.j2"
+    dest: /opt/openconext/minio/{{ item }}
+    owner: root
+    group: root
+    mode: "0644"
+  with_items:
+    - config.env
+  notify: Restart minio
+
+- name: Create and start the server container
+  community.docker.docker_container:
+    name: minio
+    image: quay.io/minio/minio:{{ minio_version }}
+    pull: true
+    restart_policy: "always"
+    state: started
+    env:
+      MINIO_CONFIG_ENV_FILE: "/etc/config.env"
+    networks:
+      - name: "loadbalancer"
+    mounts:
+      - source: "{{ minio_data_dir }}"
+        target: "{{ minio_data_dir_oncontainer }}"
+        type: bind
+      - source: "{{ minio_dir }}/config.env"
+        target: /etc/config.env
+        type: bind
+    command: server --console-address ":9090" {{ minio_data_dir_oncontainer }}
+    labels:
+      traefik.http.routers.minio.rule: "Host(`minio.{{ base_domain }}`)"
+      traefik.http.routers.minio.tls: "true"
+      traefik.http.routers.minio.service: "minio"
+      traefik.http.services.minio.loadbalancer.server.port: "9090"
+      traefik.http.routers.minioapi.rule: "Host(`minioapi.{{ base_domain }}`)"
+      traefik.http.routers.minioapi.tls: "true"
+      traefik.http.routers.minioapi.service: "minioapi"
+      traefik.http.services.minioapi.loadbalancer.server.port: "9000"
+      traefik.enable: "true"
+    healthcheck:
+      test:
+        [
+          "CMD",
+          "curl",
+          "--fail",
+          "http://localhost:9000/minio/health/live"
+        ]
+      interval: 10s
+      timeout: 10s
+      retries: 3
+      start_period: 10s
+  register: miniocontainer

roles/minio/templates/config.env.j2

@@ -0,0 +1,3 @@
+MINIO_ROOT_USER={{ minio_root_user }}
+MINIO_ROOT_PASSWORD={{ minio_root_password }}
+MINIO_VOLUMES="{{ minio_data_dir_oncontainer }}"

test_containers_playbook.yml

@@ -94,6 +94,19 @@
         - manageserver
         - managegui
 
+- name: Test minio containers
+  hosts: docker_minio
+  become: true
+  tasks:
+    - name: Check minio containers state
+      ansible.builtin.command:
+        cmd: docker inspect -f '{{ '{{' }} .State.Status {{ '}}' }}' "{{ item  }}"
+      register: container_state
+      failed_when: container_state.stdout != "running"
+      changed_when: false
+      with_items:
+        - minio
+
 - name: Test mujina-idp containers
   hosts: docker_mujina_idp
   become: true