From 5675083f4082f1d6c1b89a73b5a5412728eef7cd Mon Sep 17 00:00:00 2001
From: "im.makarov" <makilya04@gmail.com>
Date: Sun, 1 Jun 2025 13:01:59 +0300
Subject: [PATCH] ADD node_exporter role + molecule

---
 playbooks/blackbox_exporter.yml               |  2 +-
 playbooks/node_exporter.yml                   |  7 ++
 .../molecule/default/molecule.yml             |  1 -
 roles/node_exporter/README.md                 | 38 ++++++++++
 roles/node_exporter/defaults/main.yml         | 15 ++++
 roles/node_exporter/handlers/main.yml         |  8 ++
 roles/node_exporter/meta/main.yml             | 37 +++++++++
 .../molecule/default/converge.yml             |  8 ++
 .../molecule/default/molecule.yml             | 34 +++++++++
 .../node_exporter/molecule/default/pytest.ini |  2 +
 .../molecule/default/tests/test_default.py    | 60 +++++++++++++++
 roles/node_exporter/tasks/delete.yml          | 32 ++++++++
 roles/node_exporter/tasks/install.yml         | 75 +++++++++++++++++++
 roles/node_exporter/tasks/main.yml            |  7 ++
 roles/node_exporter/tasks/update.yml          | 12 +++
 .../templates/node_exporter.service.j2        | 16 ++++
 roles/node_exporter/tests/inventory           |  3 +
 roles/node_exporter/tests/test.yml            |  6 ++
 roles/node_exporter/vars/main.yml             |  3 +
 19 files changed, 364 insertions(+), 2 deletions(-)
 create mode 100644 playbooks/node_exporter.yml
 create mode 100644 roles/node_exporter/README.md
 create mode 100644 roles/node_exporter/defaults/main.yml
 create mode 100644 roles/node_exporter/handlers/main.yml
 create mode 100644 roles/node_exporter/meta/main.yml
 create mode 100644 roles/node_exporter/molecule/default/converge.yml
 create mode 100644 roles/node_exporter/molecule/default/molecule.yml
 create mode 100644 roles/node_exporter/molecule/default/pytest.ini
 create mode 100644 roles/node_exporter/molecule/default/tests/test_default.py
 create mode 100644 roles/node_exporter/tasks/delete.yml
 create mode 100644 roles/node_exporter/tasks/install.yml
 create mode 100644 roles/node_exporter/tasks/main.yml
 create mode 100644 roles/node_exporter/tasks/update.yml
 create mode 100644 roles/node_exporter/templates/node_exporter.service.j2
 create mode 100644 roles/node_exporter/tests/inventory
 create mode 100644 roles/node_exporter/tests/test.yml
 create mode 100644 roles/node_exporter/vars/main.yml

diff --git a/playbooks/blackbox_exporter.yml b/playbooks/blackbox_exporter.yml
index ffc5872..e47789a 100644
--- a/playbooks/blackbox_exporter.yml
+++ b/playbooks/blackbox_exporter.yml
@@ -3,5 +3,5 @@
 - name: Установка и конфигурация blackbox_exporter
   hosts: srv_1
   roles:
-    - ../roles/blackbox_exporter
+    - blackbox_exporter
 
diff --git a/playbooks/node_exporter.yml b/playbooks/node_exporter.yml
new file mode 100644
index 0000000..3ed4cc7
--- /dev/null
+++ b/playbooks/node_exporter.yml
@@ -0,0 +1,7 @@
+---
+
+- name: Установка и конфигурация node_exporter
+  hosts: srv_1
+  roles:
+    - node_exporter
+
diff --git a/roles/blackbox_exporter/molecule/default/molecule.yml b/roles/blackbox_exporter/molecule/default/molecule.yml
index 124f25b..60ad753 100644
--- a/roles/blackbox_exporter/molecule/default/molecule.yml
+++ b/roles/blackbox_exporter/molecule/default/molecule.yml
@@ -19,7 +19,6 @@ platforms:
       - /sys/fs/cgroup:/sys/fs/cgroup:rw
     pre_build_image: true
 
-
 provisioner:
   name: ansible
   config_options:
diff --git a/roles/node_exporter/README.md b/roles/node_exporter/README.md
new file mode 100644
index 0000000..225dd44
--- /dev/null
+++ b/roles/node_exporter/README.md
@@ -0,0 +1,38 @@
+Role Name
+=========
+
+A brief description of the role goes here.
+
+Requirements
+------------
+
+Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required.
+
+Role Variables
+--------------
+
+A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well.
+
+Dependencies
+------------
+
+A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles.
+
+Example Playbook
+----------------
+
+Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
+
+    - hosts: servers
+      roles:
+         - { role: username.rolename, x: 42 }
+
+License
+-------
+
+BSD
+
+Author Information
+------------------
+
+An optional section for the role authors to include contact information, or a website (HTML is not allowed).
diff --git a/roles/node_exporter/defaults/main.yml b/roles/node_exporter/defaults/main.yml
new file mode 100644
index 0000000..3a01271
--- /dev/null
+++ b/roles/node_exporter/defaults/main.yml
@@ -0,0 +1,15 @@
+#SPDX-License-Identifier: MIT-0
+---
+
+node_exporter_version: "1.9.0"
+
+node_exporter_user: "node_exporter"
+node_exporter_group: "node_exporter"
+
+node_exporter_install_dir: "/opt/node_exporter"
+
+node_exporter_listen_address: ":9100"
+
+node_exporter_systemd_unit_path: "/etc/systemd/system/node_exporter.service"
+
+node_exporter_symlink: "/usr/local/bin/node_exporter"
diff --git a/roles/node_exporter/handlers/main.yml b/roles/node_exporter/handlers/main.yml
new file mode 100644
index 0000000..f6768c9
--- /dev/null
+++ b/roles/node_exporter/handlers/main.yml
@@ -0,0 +1,8 @@
+#SPDX-License-Identifier: MIT-0
+---
+
+- name: Update Systemd and restart Node Exporter
+  ansible.builtin.systemd:
+    name: node_exporter 
+    state: restarted
+    daemon-reload: yes 
\ No newline at end of file
diff --git a/roles/node_exporter/meta/main.yml b/roles/node_exporter/meta/main.yml
new file mode 100644
index 0000000..ee720fc
--- /dev/null
+++ b/roles/node_exporter/meta/main.yml
@@ -0,0 +1,37 @@
+#SPDX-License-Identifier: MIT-0
+galaxy_info:
+  role_name: node_exporter
+  namespace: node_exporter
+  author: Илья Макаров
+  description: Устанавливает и обновляет Prometheus ode exporter
+  company: your company (optional)
+
+  # If the issue tracker for your role is not on github, uncomment the
+  # next line and provide a value
+  # issue_tracker_url: http://example.com/issue/tracker
+
+  # Choose a valid license ID from https://spdx.org - some suggested licenses:
+  # - BSD-3-Clause (default)
+  # - MIT
+  # - GPL-2.0-or-later
+  # - GPL-3.0-only
+  # - Apache-2.0
+  # - CC-BY-4.0
+  license: MIT
+
+  min_ansible_version: 2.1
+
+  # If this a Container Enabled role, provide the minimum Ansible Container version.
+  # min_ansible_container_version:
+
+  galaxy_tags: []
+    # List tags for your role here, one per line. A tag is a keyword that describes
+    # and categorizes the role. Users find roles by searching for tags. Be sure to
+    # remove the '[]' above, if you add tags to this list.
+    #
+    # NOTE: A tag is limited to a single word comprised of alphanumeric characters.
+    #       Maximum 20 tags per role.
+
+dependencies: []
+  # List your role dependencies here, one per line. Be sure to remove the '[]' above,
+  # if you add dependencies to this list.
diff --git a/roles/node_exporter/molecule/default/converge.yml b/roles/node_exporter/molecule/default/converge.yml
new file mode 100644
index 0000000..6c8b992
--- /dev/null
+++ b/roles/node_exporter/molecule/default/converge.yml
@@ -0,0 +1,8 @@
+---
+
+- name: Применяем роль node_exporter
+  hosts: all
+  become: true
+  gather_facts: true
+  roles:
+    - role: ../../../node_exporter
\ No newline at end of file
diff --git a/roles/node_exporter/molecule/default/molecule.yml b/roles/node_exporter/molecule/default/molecule.yml
new file mode 100644
index 0000000..98b0eb7
--- /dev/null
+++ b/roles/node_exporter/molecule/default/molecule.yml
@@ -0,0 +1,34 @@
+---
+dependency:
+  name: shell
+  command: echo "no dependencies"
+
+lint: |
+  set -e
+  yamllint .
+  ansible-lint
+
+driver:
+  name: docker
+
+platforms:
+  - name: instance
+    image: geerlingguy/docker-rockylinux9-ansible
+    command: /usr/sbin/init
+    cgroupns_mode: host
+    privileged: true
+    volumes:
+      - /sys/fs/cgroup:/sys/fs/cgroup:rw
+    pre_build_image: true
+
+provisioner:
+  name: ansible
+  config_options:
+    defaults:
+      verbosity: 0
+      interpreter_python: /usr/bin/python3.9
+
+verifier:
+  name: testinfra
+  options:
+    verbose: true
diff --git a/roles/node_exporter/molecule/default/pytest.ini b/roles/node_exporter/molecule/default/pytest.ini
new file mode 100644
index 0000000..39baf33
--- /dev/null
+++ b/roles/node_exporter/molecule/default/pytest.ini
@@ -0,0 +1,2 @@
+[pytest]
+testpaths = tests/
diff --git a/roles/node_exporter/molecule/default/tests/test_default.py b/roles/node_exporter/molecule/default/tests/test_default.py
new file mode 100644
index 0000000..df4e197
--- /dev/null
+++ b/roles/node_exporter/molecule/default/tests/test_default.py
@@ -0,0 +1,60 @@
+import os
+import testinfra.utils.ansible_runner
+
+test_hosts = testinfra.utils.ansible_runner.AnsibleRunner(
+    os.environ['MOLECULE_INVENTORY_FILE']
+).get_hosts('all')
+
+
+def test_user_and_group_exist(host):
+    """
+    Проверяем, что пользователь и группа node_exporter существуют.
+    """
+    user = host.user("node_exporter")
+    assert user.exists
+    assert user.group == "node_exporter"
+
+
+def test_binary_and_symlink(host):
+    """
+    Проверяем, что бинарник node_exporter установлен и имеет права на исполнение.
+    """
+    binary = host.file("/opt/node_exporter/node_exporter")
+    symlink = host.file("/usr/local/bin/node_exporter")
+
+    assert binary.exists
+    assert binary.mode & 0o111
+    assert binary.user == "node_exporter"
+    assert binary.group == "node_exporter"
+    assert symlink.exists
+    assert symlink.is_symlink
+    assert symlink.linked_to == "/opt/node_exporter/node_exporter"
+
+
+def test_service_unit_file(host):
+    """
+    Проверяем, что systemd unit-файл для node_exporter существует и содержит правильную команду запуска.
+    """
+    unit = host.file("/etc/systemd/system/node_exporter.service")
+    assert unit.exists
+    assert unit.user == "root"
+    assert unit.group == "root"
+    assert unit.mode == 0o644
+    assert unit.contains("ExecStart=/usr/local/bin/node_exporter")
+
+
+def test_service_running_and_enabled(host):
+    """
+    Проверяем, что сервис node_exporter запущен и включён в автозагрузку.
+    """
+    svc = host.service("node_exporter")
+    assert svc.is_enabled
+    assert svc.is_running
+
+
+def test_listen_port(host):
+    """
+    Проверяем, что node_exporter слушает порт 9100.
+    """
+    socket = host.socket("tcp://0.0.0.0:9100")
+    assert socket.is_listening
diff --git a/roles/node_exporter/tasks/delete.yml b/roles/node_exporter/tasks/delete.yml
new file mode 100644
index 0000000..a393c08
--- /dev/null
+++ b/roles/node_exporter/tasks/delete.yml
@@ -0,0 +1,32 @@
+- name: Stop and disable node_exporter service
+  ansible.builtin.systemd:
+    name: node_exporter
+    state: stopped
+    enabled: no
+  ignore_errors: yes
+
+- name: Remove systemd unit file for node_exporter
+  ansible.builtin.file:
+    path: "{{ node_exporter_systemd_unit_path }}"
+    state: absent
+
+- name: Remove symlink /usr/local/bin/node_exporter
+  ansible.builtin.file:
+    path: /usr/local/bin/node_exporter
+    state: absent
+
+- name: Remove node_exporter installation directory
+  ansible.builtin.file:
+    path: "{{ node_exporter_install_dir }}"
+    state: absent
+
+- name: Remove user "{{ node_exporter_user }}"
+  ansible.builtin.user:
+    name: "{{ node_exporter_user }}"
+    state: absent
+    remove: yes  
+
+- name: Remove group "{{ node_exporter_group }}"
+  ansible.builtin.group:
+    name: "{{ node_exporter_group }}"
+    state: absent
diff --git a/roles/node_exporter/tasks/install.yml b/roles/node_exporter/tasks/install.yml
new file mode 100644
index 0000000..c268795
--- /dev/null
+++ b/roles/node_exporter/tasks/install.yml
@@ -0,0 +1,75 @@
+---
+# Тег install можно использовать для выборочного запуска
+- name: Create group
+  ansible.builtin.group:
+    name: "{{ node_exporter_user }}"
+    system: yes
+    state: present 
+
+- name: Create user
+  ansible.builtin.user:
+    name: "{{ node_exporter_user }}"
+    group: "{{ node_exporter_group }}"
+    system: yes
+    shell: /sbin/nologin
+
+- name: Create installation directory
+  ansible.builtin.file:
+    path: "{{ node_exporter_install_dir }}"
+    state: directory
+    owner: "{{ node_exporter_user }}"
+    group: "{{ node_exporter_group }}"
+    mode: '0755'
+
+- name: Check if node_exporter archive exists locally
+  ansible.builtin.stat:
+    path: "/tmp/node_exporter-{{ node_exporter_version }}.linux-amd64.tar.gz"
+  register: node_archive
+
+- name: Download node_exporter archive if absent
+  ansible.builtin.get_url:
+    url: "https://github.com/prometheus/node_exporter/releases/download/v{{ node_exporter_version }}/node_exporter-{{ node_exporter_version }}.linux-amd64.tar.gz"
+    dest: "/tmp/node_exporter-{{ node_exporter_version }}.linux-amd64.tar.gz"
+    mode: '0644'
+  when: not node_archive.stat.exists
+  changed_when: false
+
+- name: Extract node_exporter binary
+  ansible.builtin.unarchive:
+    src: "/tmp/node_exporter-{{ node_exporter_version }}.linux-amd64.tar.gz"
+    dest: "{{ node_exporter_install_dir }}"
+    remote_src: yes
+    extra_opts: [--strip-components=1]
+    creates: "{{ node_exporter_install_dir }}/node_exporter"
+
+- name: Remove archive after extraction
+  ansible.builtin.file:
+    path: "/tmp/node_exporter-{{ node_exporter_version }}.linux-amd64.tar.gz"
+    state: absent
+  when: node_archive.stat.exists
+  changed_when: false
+
+- name: Set binary ownership and permissions
+  ansible.builtin.file:
+    path: "{{ node_exporter_install_dir }}/node_exporter"
+    owner: "{{ node_exporter_user }}"
+    group: "{{ node_exporter_group }}"
+    mode: '0755'
+
+- name: Create symlink to node_exporter in /usr/local/bin
+  ansible.builtin.file:
+    src: "{{ node_exporter_install_dir }}/node_exporter"
+    dest: /usr/local/bin/node_exporter
+    state: link
+
+- name: Deploy systemd unit for node_exporter
+  ansible.builtin.template:
+    src: node_exporter.service.j2
+    dest: "{{ node_exporter_systemd_unit_path }}"
+  notify: Update Systemd and restart Node Exporter
+
+- name: Enable and start node_exporter service
+  ansible.builtin.systemd:
+    name: node_exporter
+    enabled: yes
+    state: started
diff --git a/roles/node_exporter/tasks/main.yml b/roles/node_exporter/tasks/main.yml
new file mode 100644
index 0000000..061d784
--- /dev/null
+++ b/roles/node_exporter/tasks/main.yml
@@ -0,0 +1,7 @@
+#SPDX-License-Identifier: MIT-0
+---
+# tasks file for node_exporter
+- import_tasks: install.yml   
+  tags: install
+- import_tasks: update.yml
+  tags: update    
\ No newline at end of file
diff --git a/roles/node_exporter/tasks/update.yml b/roles/node_exporter/tasks/update.yml
new file mode 100644
index 0000000..98a4d41
--- /dev/null
+++ b/roles/node_exporter/tasks/update.yml
@@ -0,0 +1,12 @@
+---
+
+- name: Check current version
+  ansible.builtin.command: "/usr/local/bin/node_exporter --version"
+  register: current_version
+  changed_when: false
+
+- name: Reinstall if version mismatch
+  block:
+    - import_tasks: delete.yml
+    - import_tasks: install.yml
+  when: current_version.stdout is not search(node_exporter_version)
diff --git a/roles/node_exporter/templates/node_exporter.service.j2 b/roles/node_exporter/templates/node_exporter.service.j2
new file mode 100644
index 0000000..163a1d7
--- /dev/null
+++ b/roles/node_exporter/templates/node_exporter.service.j2
@@ -0,0 +1,16 @@
+[Unit]
+Description=Prometheus Node Exporter
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+User={{ node_exporter_user }}
+Group={{ node_exporter_group }}
+Type=simple
+ExecStart={{ node_exporter_symlink }} \
+  --web.listen-address={{ node_exporter_listen_address }}
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
diff --git a/roles/node_exporter/tests/inventory b/roles/node_exporter/tests/inventory
new file mode 100644
index 0000000..03ca42f
--- /dev/null
+++ b/roles/node_exporter/tests/inventory
@@ -0,0 +1,3 @@
+#SPDX-License-Identifier: MIT-0
+localhost
+
diff --git a/roles/node_exporter/tests/test.yml b/roles/node_exporter/tests/test.yml
new file mode 100644
index 0000000..c90dc88
--- /dev/null
+++ b/roles/node_exporter/tests/test.yml
@@ -0,0 +1,6 @@
+#SPDX-License-Identifier: MIT-0
+---
+- hosts: localhost
+  remote_user: root
+  roles:
+    - node_exporter
diff --git a/roles/node_exporter/vars/main.yml b/roles/node_exporter/vars/main.yml
new file mode 100644
index 0000000..129a6e2
--- /dev/null
+++ b/roles/node_exporter/vars/main.yml
@@ -0,0 +1,3 @@
+#SPDX-License-Identifier: MIT-0
+---
+# vars file for node_exporter