GitLab

add burp.working_dir_recovery_method

See merge request !10

Generate the DH parameters, remove burp.ssl.DH, improve Buster support

Closes #2

See merge request !6

Use the default k8s behavior: pull images

See merge request !7

CI: enable gate pipeline

See merge request !9

Depends-On: !7

This pipeline is executed when a merge request is approved.

[CI] a PodSecurityPolicy has been added: conform to it

See merge request !8

DH parameters can still be generated by users.

Don't use these workaround with Debian Buster

https://github.com/grke/burp/pull/531
https://github.com/grke/burp/pull/532

Use quay.io/pilou/debian-systemd images (stretch & buster)

See merge request !3

Test with Python 3.7 too

See merge request !5

and disable skip_missing_interpreters

The following command can be used in order to test either Python 3.7 or
Python 3.8:

    tox -e py3-ansible29-molecule-docker

molecule: add missing permissions

See merge request !4

yamllint complains that "[208] File permissions not mentioned"

DH parameter generation takes too much time:

    21:21:42 TASK [Generate DH Parameters (2048 bits)]
    21:21:42 task path: pilou-/ansible-role-burp/molecule/common/prepare.yml:9
    21:21:42 <molecule-burp-server> ESTABLISH kubectl CONNECTION
    [...]
    21:21:45 <molecule-burp-server> EXEC ['/usr/bin/kubectl', 'exec',
        '-i', 'molecule-burp-server', '--', '/bin/sh', '-c',
        "/bin/sh -c 'python3 ansible-tmp/AnsiballZ_openssl_dhparam.py && sleep 0'"]
    21:26:25 <molecule-burp-server> EXEC ['/usr/bin/kubectl', 'exec',
        '-i', 'molecule-burp-server', '--', '/bin/sh', '-c',
        "/bin/sh -c 'rm -f -r ansible-tmp/ > /dev/null 2>&1 && sleep 0'"]

quay.io/pilou/test:latest Docker image is the same that the one used for
default scenario.

/bin/kill is used in burp systemd unit

A new scenario using k8s based driver will be added, move all common
playbooks and config.

Workaround this error:

    TASK [tox : Install any sibling python packages] ***
    An exception occurred during task execution. To see the full traceback, use -vvv.
    The error was: command terminated with exit code 1
    fatal: [molecule]:
    FAILED! => {
        "changed": false,
        "module_stderr":
          "Traceback (most recent call last):
           File '<stdin>', line 114, in <module>
           File '<stdin>', line 106, in _ansiballz_main
           File '<stdin>', line 49, in invoke_module
           File '/tmp/ansible_tox_install_sibling_packages_payload_XzqBVa/__main__.py', line 55, in <module>
             ImportError: No module named pkg_resources
             command terminated with exit code 1",
        "rc": 1
    }

With burp-2.1.32 (Debian Buster), ::1 is used even if ipv6 isn't
available resulting in this error:

    could not listen on address: ::1