{"id":382540,"date":"2024-06-29T04:20:45","date_gmt":"2024-06-29T04:20:45","guid":{"rendered":"http:\/\/savepearlharbor.com\/?p=382540"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T21:00:00","slug":"","status":"publish","type":"post","link":"https:\/\/savepearlharbor.com\/?p=382540","title":{"rendered":"<span>\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 Jenkins \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f Ansible \u0438 \u043f\u043b\u0430\u0433\u0438\u043d Configuration as Code \u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435<\/span>"},"content":{"rendered":"<div><!--[--><!--]--><\/div>\n<div id=\"post-content-body\">\n<div>\n<div class=\"article-formatted-body article-formatted-body article-formatted-body_version-1\">\n<div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\">\n<p>\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 Jenkins \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f Ansible \u0438 \u043f\u043b\u0430\u0433\u0438\u043d Configuration as Code \u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435<\/p>\n<p>  <\/p>\n<p>Jenkins Configuration as Code (aka JCasC) \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u0430 \u0431\u044b\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0441\u0432\u043e\u0439 Jenkins \u0432 \u043f\u0430\u0440\u0430\u0434\u0438\u0433\u043c\u0435 Infrastructure as Code \u0438\u043b\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u043a\u0430\u043a \u043a\u043e\u0434 (IaC).<\/p>\n<p>  <\/p>\n<p>\u042d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u0441\u0442\u043e\u044f\u0442\u044c \u0438\u0437 \u0434\u0432\u0443\u0445 \u0447\u0430\u0441\u0442\u0435\u0439. \u041f\u0435\u0440\u0432\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u2014 \u0431\u044b\u0441\u0442\u0440\u044b\u0439 \u0437\u0430\u043f\u0443\u0441\u043a \u0442\u0435\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u0430. \u0412\u0442\u043e\u0440\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u2014 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435.<\/p>\n<p><a name=\"habracut\"><\/a>  <\/p>\n<p>\u0414\u043b\u044f \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0442\u0435\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u0430 \u0431\u0443\u0434\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c Yandex Cloud. \u041a\u043b\u043e\u043d\u0438\u0440\u0443\u0435\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u043a\u0440\u0435\u0434\u044b Yandex cloud \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443.<\/p>\n<p>  <\/p>\n<h4 id=\"pervaya-chast-bystryy-zapusk-testovogo-primera\">\u041f\u0435\u0440\u0432\u0430\u044f \u0447\u0430\u0441\u0442\u044c. \u0411\u044b\u0441\u0442\u0440\u044b\u0439 \u0437\u0430\u043f\u0443\u0441\u043a \u0442\u0435\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u0430.<\/h4>\n<p>  <\/p>\n<p>\u041f\u0435\u0440\u0435\u0434 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0443\u0442\u0438\u043b\u0438\u0442\u044b. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u0432 <a href=\"https:\/\/github.com\/patsevanton\/yandex-iac-ansible-example\/blob\/main\/README.md\" rel=\"nofollow noopener noreferrer\">readme \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f<\/a>.<\/p>\n<p>  <\/p>\n<p>\u0421\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439:<\/p>\n<p>  <\/p>\n<pre><code class=\"plaintext\">git clone https:\/\/github.com\/patsevanton\/yandex-iac-ansible-example.git cd jenkins-geerlingguy-jenkins cp private.auto.tfvars.example private.auto.tfvars<\/code><\/pre>\n<p>  <\/p>\n<p>\u0417\u0430\u043f\u043e\u043b\u043d\u044f\u0435\u043c \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u043a\u0440\u0435\u0434\u044b Yandex cloud \u0432 private.auto.tfvars.<\/p>\n<p>  <\/p>\n<p>\u0417\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 Jenkins:<\/p>\n<p>  <\/p>\n<pre><code class=\"plaintext\">jenkins_install.sh<\/code><\/pre>\n<p>  <\/p>\n<h4 id=\"vtoraya-chast-podrobnoe-opisanie\">\u0412\u0442\u043e\u0440\u0430\u044f \u0447\u0430\u0441\u0442\u044c. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435.<\/h4>\n<p>  <\/p>\n<p>\u0412 \u0444\u0430\u0439\u043b\u0435 private.auto.tfvars \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b. \u042f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e sslip.io \u0434\u043b\u044f \u0440\u0435\u0437\u043e\u043b\u0432\u0438\u043d\u0433\u0430 DNS \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e IP. \u0412\u044b \u043c\u043e\u0436\u0435\u0442\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b.<\/p>\n<p>  <\/p>\n<p>\u0412 jenkins_install.sh \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Ansible \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f java, jenkins, nginx \u0438 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f letsencrypt \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442.<\/p>\n<p>  <\/p>\n<p><a href=\"https:\/\/github.com\/patsevanton\/yandex-iac-ansible-example\/blob\/main\/jenkins-geerlingguy-jenkins\/inventory_yml.tpl\" rel=\"nofollow noopener noreferrer\">\u0424\u0430\u0439\u043b inventory<\/a> \u0441\u043e\u0437\u0434\u0430\u0435\u0442\u0441\u044f \u0438\u0437 \u0448\u0430\u0431\u043b\u043e\u043d\u0430 terraform. \u0420\u0430\u0437\u0431\u0435\u0440\u0435\u043c \u0435\u0433\u043e.<\/p>\n<p>  <\/p>\n<p>\u041f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0440\u043e\u043b\u044c geerlingguy.ansible-role-jenkins \u043d\u0435\u043b\u044c\u0437\u044f \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u0442\u043e\u0447\u043d\u0443\u044e LTS \u0432\u0435\u0440\u0441\u0438\u044e Jenkins. Issue \u2014 <a href=\"https:\/\/github.com\/geerlingguy\/ansible-role-jenkins\/issues\/359\" rel=\"nofollow noopener noreferrer\">https:\/\/github.com\/geerlingguy\/ansible-role-jenkins\/issues\/359<\/a>:<\/p>\n<p>  <\/p>\n<pre><code class=\"plaintext\">    jenkins_prefer_lts: true     #jenkins_version: \"2.346\"<\/code><\/pre>\n<p>  <\/p>\n<p>\u041f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b letsencrypt ansible \u0440\u043e\u043b\u0438. \u0420\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u043c letsencrypt \u0431\u0435\u0437 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u044f email \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c http \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0434\u043e\u043c\u0435\u043d\u0430:<\/p>\n<p>  <\/p>\n<pre><code class=\"plaintext\">    letsencrypt_opts_extra: \"--register-unsafely-without-email\"     letsencrypt_cert:       name: ${hostname}.${public_ip}.${domain}       domains:         - ${hostname}.${public_ip}.${domain}       challenge: http       http_auth: standalone       reuse_key: True<\/code><\/pre>\n<p>  <\/p>\n<p>\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f letsencrypt \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u043c \u0438 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c nginx c \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0440\u043e\u043b\u0438 geerlingguy.nginx. \u0412 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u044f\u0435\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0445\u043e\u0441\u0442 default, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0438 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0445\u043e\u0441\u0442 \u0434\u043b\u044f jenkins:<\/p>\n<p>  <\/p>\n<pre><code class=\"plaintext\">    nginx_remove_default_vhost: true     nginx_vhosts:       - listen: \"80\"         server_name: \"${hostname}.${public_ip}.${domain}\"         return: \"301 https:\/\/${hostname}.${public_ip}.${domain}$request_uri\"         filename: \"${hostname}.${public_ip}.${domain}.80.conf\"       - listen: \"443 ssl\"         server_name: ${hostname}.${public_ip}.${domain}         state: \"present\"         extra_parameters: |           location \/ {             proxy_set_header        Host $host:$server_port;             proxy_set_header        X-Real-IP $remote_addr;             proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;             proxy_set_header        X-Forwarded-Proto $scheme;              # Fix the \"It appears that your reverse proxy set up is broken\" error.             proxy_pass          http:\/\/127.0.0.1:8080;             proxy_read_timeout  90;            }           ssl_certificate     \/etc\/letsencrypt\/live\/${hostname}.${public_ip}.${domain}\/cert.pem;           ssl_certificate_key \/etc\/letsencrypt\/live\/${hostname}.${public_ip}.${domain}\/privkey.pem;<\/code><\/pre>\n<p>  <\/p>\n<p>\u0420\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c playbook.yml. Jenkins \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a systemd \u0441\u0435\u0440\u0432\u0438\u0441. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 Jenkins \u0432 Kubernetes \u0434\u0443\u043c\u0430\u044e \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u0431\u0443\u0434\u0443\u0449\u0435\u043c. <\/p>\n<p>  <\/p>\n<p>\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a Jenkins \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043d\u0435\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0434\u043e\u043f\u0438\u043b\u0438\u0442\u044c \u0435\u0433\u043e \u043d\u0430\u043f\u0438\u043b\u044c\u043d\u0438\u043a\u043e\u043c \u0438\u043b\u0438 \u0434\u043e\u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c. <\/p>\n<p>  <\/p>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044e \/var\/lib\/jenkins\/jcasc \u0438 \u043f\u043e\u043c\u0435\u0449\u0430\u0435\u043c \u0442\u0443\u0434\u0430 \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 Jenkins Configuration as Code (aka JCasC).<\/p>\n<p>  <\/p>\n<p>\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 jcasc.yaml \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043d\u0438\u0436\u0435:<\/p>\n<p>  <\/p>\n<pre><code class=\"plaintext\">    - name: Create directory \/var\/lib\/jenkins\/jcasc       ansible.builtin.file:         path: \/var\/lib\/jenkins\/jcasc         state: directory         owner: jenkins         group: jenkins      - name: Copy jcasc.yaml with owner and permissions       ansible.builtin.copy:         src: jcasc.yaml         dest: \/var\/lib\/jenkins\/jcasc\/jcasc.yaml         owner: jenkins         group: jenkins         mode: '0644'<\/code><\/pre>\n<p>  <\/p>\n<p>\u0414\u0430\u043b\u0435\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c override systemd \u0441\u0435\u0440\u0432\u0438\u0441\u0430 jenkins \u0438 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c environment \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e \u0447\u0442\u043e\u0431\u044b \u043f\u043b\u0430\u0433\u0438\u043d Jenkins Configuration as Code (aka JCasC) \u0437\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u043b. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 <a href=\"https:\/\/github.com\/MatthewRFennell\/ansible-role-jenkins\/tree\/use-systemd-instead-of-init\" rel=\"nofollow noopener noreferrer\">https:\/\/github.com\/MatthewRFennell\/ansible-role-jenkins\/tree\/use-systemd-instead-of-init<\/a>.<\/p>\n<p>  <\/p>\n<p>\u0423\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u043c \u0440\u043e\u043b\u044c \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f:<\/p>\n<p>  <\/p>\n<pre><code class=\"plaintext\">ansible-galaxy install --force git+https:\/\/github.com\/MatthewRFennell\/ansible-role-jenkins.git,use-systemd-instead-of-init<\/code><\/pre>\n<p>  <\/p>\n<p>\u0418\u0437 \u044d\u0442\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 geerlingguy\/ansible-role-jenkins \u0441\u0434\u0435\u043b\u0430\u043d pull request <a href=\"https:\/\/github.com\/geerlingguy\/ansible-role-jenkins\/pull\/354\" rel=\"nofollow noopener noreferrer\">https:\/\/github.com\/geerlingguy\/ansible-role-jenkins\/pull\/354<\/a>.<\/p>\n<p>  <\/p>\n<p>\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c env \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e <code>CASC_JENKINS_CONFIG<\/code> \u0432 inventory. \u0422\u0430\u043a \u043a\u0430\u043a JAVA_OPTS \u043f\u0435\u0440\u0435\u0437\u0430\u0442\u0438\u0440\u0430\u0435\u0442\u0441\u044f, \u0442\u043e \u0432 \u043d\u0435\u0435 \u0442\u043e\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c <code>-Djenkins.install.runSetupWizard=false<\/code> <\/p>\n<p>  <\/p>\n<pre><code class=\"plaintext\">    jenkins_java_options: \"-Djava.awt.headless=true -Djenkins.install.runSetupWizard=false\"      jenkins_init_changes:       - option: \"JAVA_OPTS\"         value: \"{{ jenkins_java_options }}\"       - option: \"CASC_JENKINS_CONFIG\"         value: \"\/var\/lib\/jenkins\/jcasc\/\"<\/code><\/pre>\n<p>  <\/p>\n<p>\u0414\u0430\u043b\u0435\u0435 \u0438\u0434\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 jenkins \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 jenkins-plugin-manager. \u0421\u043a\u0440\u0438\u043f\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Jenkins \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 (<a href=\"https:\/\/github.com\/jenkinsci\/docker\/blob\/master\/install-plugins.sh\" rel=\"nofollow noopener noreferrer\">https:\/\/github.com\/jenkinsci\/docker\/blob\/master\/install-plugins.sh<\/a>) \u0443\u0441\u0442\u0430\u0440\u0435\u043b \u0438 \u0431\u044b\u043b \u0443\u0434\u0430\u043b\u0435\u043d \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f. \u0412 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 files \u043d\u0430\u0445\u043e\u0434\u0438\u043c\u044f \u0444\u0430\u0439\u043b plugins.txt, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438.<\/p>\n<p>  <\/p>\n<p>\u0422\u0430\u043a \u0436\u0435 \u0437\u0430\u0432\u0435\u0434\u0435\u043d\u0430 issue \u0432 community.general.jenkins_plugin. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e with_dependencies \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430, \u043d\u043e \u043e\u043d\u0430 \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u2014 <a href=\"https:\/\/github.com\/ansible-collections\/community.general\/issues\/4995\" rel=\"nofollow noopener noreferrer\">https:\/\/github.com\/ansible-collections\/community.general\/issues\/4995<\/a>.<\/p>\n<p>  <\/p>\n<p>\u0414\u0430\u043b\u044c\u0448\u0435 \u0438\u0434\u0435\u0442 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u044f api token \u0434\u043b\u044f \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u044e\u0437\u0435\u0440\u0430 admin:<\/p>\n<p>  <\/p>\n<pre><code class=\"plaintext\">    - name: Generate generate-jenkins-api-token.sh from template       template:         src: generate-jenkins-api-token.sh.j2         dest: \/var\/lib\/jenkins\/generate-jenkins-api-token.sh         owner: jenkins         group: jenkins         mode: 0755      - name: Create API token from script       shell: \"\/var\/lib\/jenkins\/generate-jenkins-api-token.sh\"       register: script_api_token_output       args:         creates: \/var\/lib\/jenkins\/api_token.txt      - name: Read api_token from \/var\/lib\/jenkins\/api_token.txt       slurp:         src: \/var\/lib\/jenkins\/api_token.txt       register: api_token      - name: Set fact api_token       set_fact:         api_token: \"{{ api_token.content | b64decode }}\"<\/code><\/pre>\n<p>  <\/p>\n<p>\u0421\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0444\u0430\u0439\u043b\u0430 generate-jenkins-api-token.sh. \u041f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 api token \u043d\u0430\u0448\u0435\u043b \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u043e\u0434\u043d\u043e\u043c \u043c\u0435\u0441\u0442\u0435: <a href=\"https:\/\/stackoverflow.com\/a\/72906138\/3698532\" rel=\"nofollow noopener noreferrer\">https:\/\/stackoverflow.com\/a\/72906138\/3698532<\/a>. \u041e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438. \u041f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0439 \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u0441\u043a\u0440\u0438\u043f\u0442:<\/p>\n<p>  <\/p>\n<pre><code class=\"plaintext\">#!\/bin\/bash  FILE=\/var\/lib\/jenkins\/api_token.txt  if [ -f \"$FILE\" ]; then     echo \"$FILE exists.\" else      echo \"$FILE does not exist.\"     JENKINS_URL=\"http:\/\/localhost:8080\"     JENKINS_USER=admin     JENKINS_USER_PASS={{ jenkins_admin_password }}      JENKINS_CRUMB=$(curl -u \"$JENKINS_USER:$JENKINS_USER_PASS\" -s --cookie-jar \/tmp\/cookies $JENKINS_URL'\/crumbIssuer\/api\/xml?xpath=concat(\/\/crumbRequestField,\":\",\/\/crumb)')      ACCESS_TOKEN=$(curl -u \"$JENKINS_USER:$JENKINS_USER_PASS\" -H $JENKINS_CRUMB -s \\                         --cookie \/tmp\/cookies $JENKINS_URL'\/me\/descriptorByName\/jenkins.security.ApiTokenProperty\/generateNewToken' \\                         --data 'newTokenName=GlobalToken' | jq -r '.data.tokenValue')      echo $ACCESS_TOKEN > \/var\/lib\/jenkins\/api_token.txt fi<\/code><\/pre>\n<p>  <\/p>\n<p>\u0414\u0430\u043b\u0435\u0435 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c job \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e jenkins-job-builder:<\/p>\n<p>  <\/p>\n<pre><code class=\"plaintext\">    - name: Generate jenkins-jobs-config from template       template:         src: jenkins-jobs-config.j2         dest: \/var\/lib\/jenkins\/jenkins-jobs-config         owner: jenkins         group: jenkins         mode: 0644      - name: Create directory \/var\/lib\/jenkins\/jobs       ansible.builtin.file:         path: \/var\/lib\/jenkins\/jobs         state: directory         owner: jenkins         group: jenkins         mode: '0755'      - name: Copy job-template.yaml       ansible.builtin.copy:         src: job-template.yaml         dest: \/var\/lib\/jenkins\/jobs\/job-template.yaml         owner: jenkins         group: jenkins      - name: Copy defaults.yaml       ansible.builtin.copy:         src: defaults.yaml         dest: \/var\/lib\/jenkins\/jobs\/defaults.yaml         owner: jenkins         group: jenkins      - name: Copy projects.yaml       ansible.builtin.copy:         src: projects.yaml         dest: \/var\/lib\/jenkins\/jobs\/projects.yaml         owner: jenkins         group: jenkins      - name: Create Jenkins jobs using Jenkins job builder       shell: \"jenkins-jobs --conf=jenkins-jobs-config update jobs\"       register: jenkins_job_builder_output       args:         chdir: \/var\/lib\/jenkins<\/code><\/pre>\n<p>  <\/p>\n<p>\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 jenkins-job-builder<br \/>  defaults.yaml:<\/p>\n<p>  <\/p>\n<pre><code class=\"plaintext\">- defaults:     name: global     logrotate:       daysToKeep: 30       numToKeep: 5       artifactDaysToKeep: -1       artifactNumToKeep: -1<\/code><\/pre>\n<p>  <\/p>\n<p>job-template.yaml:<\/p>\n<p>  <\/p>\n<pre><code class=\"plaintext\">- project:     name: project-example     jobs:       - '{name}_job':           name: getspace           command: df -h       - '{name}_job':           name: listEtc           command: ls \/etc<\/code><\/pre>\n<p>  <\/p>\n<p>\u042d\u0442\u0438 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u044b\u043b\u0438 \u0432\u0437\u044f\u0442\u044b \u0438\u0437 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0432\u0438\u0434\u0435\u043e \u043f\u043e jenkins-job-builder: <a href=\"https:\/\/www.youtube.com\/watch?v=SoP05dLe5kA\" rel=\"nofollow noopener noreferrer\">https:\/\/www.youtube.com\/watch?v=SoP05dLe5kA<\/a><\/p>\n<p>  <\/p>\n<p>\u0412 \u043a\u043e\u043d\u0446\u0435 playbook \u043f\u043e\u0434\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0435\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u044b\u0439 \u043a\u043e\u043d\u0444\u0438\u0433 jcasc.yaml<\/p>\n<p>  <\/p>\n<pre><code class=\"plaintext\">- name: Enable googleOAuth2   hosts: jenkins   become: true   tasks:     - name: Copy jcasc_googleoauth2.yaml       ansible.builtin.copy:         src: jcasc_googleoauth2.yaml         dest: \/var\/lib\/jenkins\/jcasc\/jcasc.yaml         owner: jenkins         group: jenkins         mode: '0644'       register: jcasc_googleoauth2_yaml      - name: Restart service jenkins       ansible.builtin.systemd:         state: restarted         daemon_reload: yes         name: jenkins       when: jcasc_googleoauth2_yaml.changed<\/code><\/pre>\n<p>  <\/p>\n<p>\u0412 \u043a\u043e\u043d\u0444\u0438\u0433\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0447\u0442\u043e \u0432\u0445\u043e\u0434 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Google \u0443\u0447\u0435\u0442\u043a\u0438. \u0418\u0434\u0435\u043c \u0432 <code>APIs &amp; serivces<\/code> \u0432\u0430\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432 <a href=\"https:\/\/console.developers.google.com\" rel=\"nofollow noopener noreferrer\">https:\/\/console.developers.google.com<\/a>, \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043d\u043e\u0432\u044b\u0435 <code>credentials<\/code>, \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u043c <code>OAuth client ID<\/code>, \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u043c <code>Application Type<\/code>: <code>Web Application<\/code>. \u0412\u044b\u0431\u0438\u0440\u0430\u0435\u043c \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 <code>name<\/code>. \u0412 <code>Authorized JavaScript origins<\/code> \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c URI \u0441\u0441\u044b\u043b\u043a\u0443, \u0432\u0435\u0434\u0443\u0449\u0443\u044e \u043d\u0430 \u0432\u0430\u0448 jenkins \u0441\u0430\u0439\u0442 (\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c HTTPS \u0432 URL). \u0412 <code>Authorized redirect URIs<\/code> \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c ${\u0432\u0430\u0448-jenkins-\u0441\u0430\u0439\u0442}\/securityRealm\/finishLogin. \u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 clientId \u0438 clientSecret \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0435 jcasc_googleoauth2.yaml. \u0412 <code>domain<\/code> \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0434\u043e\u043c\u0435\u043d, \u0441 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0432\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u044d\u0442\u043e\u0442 Jenkins.<\/p>\n<p>  <\/p>\n<pre><code class=\"plaintext\">jenkins:   securityRealm:     googleOAuth2:       # https:\/\/stackoverflow.com\/questions\/17699656\/how-to-configure-jenkins-login-with-google-apps       # The Client ID from the https:\/\/console.developers.google.com\/       clientId: \"xxx-xxx.apps.googleusercontent.com\"       # The Client Secret from the Google Developer Console.       clientSecret: \"xxx-xxx\"       # Optional. If present, access to Jenkins will be restricted to users in the provided Google Apps Domain.       #           A comma separated list can be used to specify multiple domains.       domain: \"\"<\/code><\/pre>\n<\/div>\n<\/div>\n<\/div>\n<p><!----><!----><\/div>\n<p><!----><!----><br \/> \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0441\u0442\u0430\u0442\u044c\u0438 <a href=\"https:\/\/habr.com\/ru\/articles\/680170\/\"> https:\/\/habr.com\/ru\/articles\/680170\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<div><!--[--><!--]--><\/div>\n<div id=\"post-content-body\">\n<div>\n<div class=\"article-formatted-body article-formatted-body article-formatted-body_version-1\">\n<div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\">\n<p>\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 Jenkins \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f Ansible \u0438 \u043f\u043b\u0430\u0433\u0438\u043d Configuration as Code \u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435<\/p>\n<p>  <\/p>\n<p>Jenkins Configuration as Code (aka JCasC) \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u0430 \u0431\u044b\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0441\u0432\u043e\u0439 Jenkins \u0432 \u043f\u0430\u0440\u0430\u0434\u0438\u0433\u043c\u0435 Infrastructure as Code \u0438\u043b\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u043a\u0430\u043a \u043a\u043e\u0434 (IaC).<\/p>\n<p>  <\/p>\n<p>\u042d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u0441\u0442\u043e\u044f\u0442\u044c \u0438\u0437 \u0434\u0432\u0443\u0445 \u0447\u0430\u0441\u0442\u0435\u0439. \u041f\u0435\u0440\u0432\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u2014 \u0431\u044b\u0441\u0442\u0440\u044b\u0439 \u0437\u0430\u043f\u0443\u0441\u043a \u0442\u0435\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u0430. \u0412\u0442\u043e\u0440\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u2014 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-382540","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/382540","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=382540"}],"version-history":[{"count":0,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/382540\/revisions"}],"wp:attachment":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=382540"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=382540"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=382540"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}