[Ansible] JFrog Platform 10.0.1 release (#166)

Ansible/ansible_collections/jfrog/platform/roles/artifactory/defaults/main.yml

@@ -1,7 +1,7 @@
 # defaults file for artifactory
 
 # The version of artifactory to install
-artifactory_version: 7.25.7
+artifactory_version: 7.27.6
 
 # Set this to true when SSL is enabled (to use artifactory_nginx_ssl role), default to false (implies artifactory uses artifactory_nginx role )
 artifactory_nginx_ssl_enabled: false
@@ -9,10 +9,7 @@ artifactory_nginx_ssl_enabled: false
 # Set this to false when ngnix is disabled, defaults to true (implies artifactory uses artifactory_nginx role )
 artifactory_nginx_enabled: true
 
-# Provide single node license
-# artifactory_single_license:
-
-# Provide individual (HA) licenses file separated by new line and 2-space indentation and set artifactory_ha_enabled: true.
+# Provide single or HA individual licenses file separated by new line and 2-space indentation and for HA, set artifactory_ha_enabled: true.
 # Example: Replace <license_1> , <license_2> , <license_3> with original licenses
 # artifactory_licenses: |-
 #   <license_1>
@@ -27,6 +24,9 @@ artifactory_ha_enabled: false
 # By default, all nodes are primary (CNHA) - https://www.jfrog.com/confluence/display/JFROG/High+Availability#HighAvailability-Cloud-NativeHighAvailability
 artifactory_taskaffinity: any
 
+# To enable mission-control in artifactory (>= 7.27.x) applicable only on E+ license
+artifactory_mc_enabled: true
+
 # The location where Artifactory should install
 jfrog_home_directory: /opt/jfrog
 
@@ -43,7 +43,7 @@ artifactory_untar_home: "{{ jfrog_home_directory }}/artifactory-{{ artifactory_f
 # Timeout in seconds for URL request
 artifactory_download_timeout: 10
 
-postgres_driver_version: 42.2.23
+postgres_driver_version: 42.2.24
 postgres_driver_download_url: https://repo1.maven.org/maven2/org/postgresql/postgresql/{{ postgres_driver_version }}/postgresql-{{ postgres_driver_version }}.jar
 
 artifactory_user: artifactory
@@ -88,6 +88,8 @@ artifactory_systemyaml: |-
       url: "{{ artifactory_db_url }}"
       username: "{{ artifactory_db_user }}"
       password: "{{ artifactory_db_password }}"
+  mc:
+    enabled: {{ artifactory_mc_enabled }}
   router:
     entrypoints:
       internalPort: 8046

Ansible/ansible_collections/jfrog/platform/roles/artifactory/tasks/RedHat.yml

@@ -1,5 +1,13 @@
 - name: Install prerequisite packages
   become: yes
   yum:
-    name: net-tools
+    name: ['net-tools', '{{ selinux_policy_package }}']
     state: present
+
+- name: Configure SELinux context 
+  become: yes
+  sefcontext:
+    target: "{{ jfrog_home_directory }}/artifactory/app/bin(/.*)?"
+    setype: bin_t
+    state: present
+  when: ansible_selinux.status == 'enabled'

Ansible/ansible_collections/jfrog/platform/roles/artifactory/tasks/install.yml

@@ -1,3 +1,14 @@
+- name: Include distro specific variables
+  include_vars: "{{ distro_vars_file }}"
+  vars:
+    distro_vars_file: "{{ lookup('first_found', distro_vars, errors='ignore') }}"
+    distro_vars:
+      files:
+        - "vars/distro/{{ ansible_distribution ~ ansible_distribution_major_version }}.yml"
+        - "vars/distro/{{ ansible_distribution }}.yml"
+        - "vars/distro/{{ ansible_os_family }}.yml"
+        - "vars/distro/default.yml"
+
 - name: Install prerequisite packages
   include_tasks: "{{ ansible_os_family }}.yml"
 
@@ -53,10 +64,10 @@
   unarchive:
     src: "{{ jfrog_home_directory }}/{{ artifactory_tar_file_name }}"
     dest: "{{ jfrog_home_directory }}"
-    remote_src: true
     owner: "{{ artifactory_user }}"
     group: "{{ artifactory_group }}"
     creates: "{{ artifactory_untar_home }}"
+    remote_src: true
   when: download_artifactory is succeeded
 
 - name: Check if app directory exists
@@ -70,6 +81,9 @@
   copy:
     src: "{{ artifactory_untar_home }}/"
     dest: "{{ artifactory_home }}"
+    owner: "{{ artifactory_user }}"
+    group: "{{ artifactory_group }}"
+    mode: 0755
     remote_src: yes
   when: not app_dir_check.stat.exists
 
@@ -101,7 +115,7 @@
     mode: 0644
   when:
     - artifactory_systemyaml is defined
-    - artifactory_systemyaml|length > 0
+    - artifactory_systemyaml | length > 0
     - artifactory_systemyaml_override or (not systemyaml.stat.exists)
   notify: restart artifactory
 
@@ -133,18 +147,7 @@
     - artifactory_binarystore | length > 0
   notify: restart artifactory
 
-- name: Configure single license
-  become: yes
-  template:
-    src: artifactory.lic.j2
-    dest: "{{ artifactory_home }}/var/etc/artifactory/artifactory.lic"
-    mode: 0644
-  when:
-    - artifactory_single_license is defined
-    - artifactory_single_license|length > 0
-  notify: restart artifactory
-
-- name: Configure HA licenses
+- name: Configure artifactory license(s)
   become: yes
   template:
     src: artifactory.cluster.license.j2
@@ -152,7 +155,7 @@
     mode: 0644
   when:
    - artifactory_licenses is defined
-   - artifactory_licenses|length > 0
+   - artifactory_licenses | length > 0
   notify: restart artifactory
 
 - name: Check if database driver exists
@@ -173,6 +176,12 @@
     - not database_driver.stat.exists
   notify: restart artifactory
 
+- name: Run restore context to reload selinux
+  become: yes
+  shell: |
+    restorecon -R -v "{{ jfrog_home_directory }}/artifactory/app/bin"
+  when: ansible_distribution == 'RedHat'
+
 - name: Create artifactory service
   become: yes
   command: "{{ artifactory_home }}/app/bin/installService.sh"

Ansible/ansible_collections/jfrog/platform/roles/artifactory/tasks/upgrade.yml

@@ -1,4 +1,3 @@
----
 - name: Check if artifactory tar already exists
   become: yes
   stat:
@@ -27,12 +26,13 @@
     creates: "{{ artifactory_untar_home }}"
   when: download_artifactory is succeeded
 
-- name: stop artifactory
+- name: Stop artifactory
   meta: flush_handlers
 
 - name: Ensure jfrog_home_directory exists
   become: yes
   file:
+    mode: 0755
     path: "{{ jfrog_home_directory }}"
     state: directory
 
@@ -56,7 +56,7 @@
     mode: 0644
   when:
     - artifactory_single_license is defined
-    - artifactory_single_license|length > 0
+    - artifactory_single_license | length > 0
   notify: restart artifactory
 
 - name: Configure HA licenses
@@ -70,13 +70,13 @@
    - artifactory_licenses | length > 0
   notify: restart artifactory
 
-- name: Check if database driver exists
+- name: Check if jdbc driver exists
   become: yes
   stat:
     path: "{{ artifactory_home }}/app/artifactory/tomcat/lib/jf_postgresql-{{ postgres_driver_version }}.jar"
   register: database_driver
 
-- name: Download database driver
+- name: Download jdbc driver
   become: yes
   get_url:
     url: "{{ postgres_driver_download_url }}"
@@ -104,16 +104,16 @@
     mode: 0644
   when:
     - artifactory_binarystore is defined
-    - artifactory_binarystore|length > 0
+    - artifactory_binarystore | length > 0
   notify: restart artifactory
 
-- name: Check if systemyaml exists
+- name: Check if system.yaml exists
   become: yes
   stat:
     path: "{{ artifactory_home }}/var/etc/system.yaml"
   register: systemyaml
 
-- name: Configure systemyaml
+- name: Configure system.yaml
   become: yes
   template:
     src: "{{ artifactory_system_yaml_template }}"
@@ -121,7 +121,7 @@
     mode: 0644
   when:
     - artifactory_systemyaml is defined
-    - artifactory_systemyaml|length > 0
+    - artifactory_systemyaml | length > 0
     - artifactory_systemyaml_override or (not systemyaml.stat.exists)
   notify: restart artifactory
 

Ansible/ansible_collections/jfrog/platform/roles/artifactory/templates/artifactory.lic.j2

@@ -1 +0,0 @@
-{{ artifactory_single_license }}

Ansible/ansible_collections/jfrog/platform/roles/artifactory/vars/distro/CentOS7.yml

@@ -0,0 +1 @@
+selinux_policy_package: policycoreutils-python

Ansible/ansible_collections/jfrog/platform/roles/artifactory/vars/distro/RedHat7.yml

@@ -0,0 +1 @@
+selinux_policy_package: policycoreutils-python

Ansible/ansible_collections/jfrog/platform/roles/artifactory/vars/distro/default.yml

@@ -0,0 +1 @@
+selinux_policy_package: python3-policycoreutils

Ansible/ansible_collections/jfrog/platform/roles/artifactory/vars/main.yml

@@ -1,5 +1,5 @@
 # platform collection version
-platform_collection_version: 7.25.7
+platform_collection_version: 10.0.1
 
 # indicates where this collection was downloaded from (galaxy, automation_hub, standalone)
 ansible_marketplace: galaxy