---
# Copyright 2019 Red Hat, Inc.
# All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.


- name: Converge
  hosts: all
  gather_facts: false

  vars:
    haproxy_config_file: /haproxy.cfg

  tasks:
    - name: create haproxy config file
      copy:
        dest: /haproxy.cfg
        content: |
          # This file managed by Puppet
          global
            daemon
            group  haproxy
            log  /dev/log local0
            maxconn  100
            pidfile  /var/run/haproxy.pid
            ssl-default-bind-ciphers  !SSLv2:kEECDH:kRSA:kEDH:kPSK:+3DES:!aNULL:!eNULL:!MD5:!EXP:!RC4:!SEED:!IDEA:!DES
            ssl-default-bind-options  no-sslv3 no-tlsv10
            stats  socket /var/lib/haproxy/stats mode 600 level user
            stats  timeout 1s
            user  haproxy

          defaults
            log  global
            maxconn  100
            mode  tcp
            retries  1
            timeout  http-request 1s
            timeout  queue 1s
            timeout  connect 1s
            timeout  client 1s
            timeout  server 1s
            timeout  check 1s
    - block:
        - include_role:
            name: haproxy
      rescue:
        - name: Clear host errors
          meta: clear_host_errors

        - debug:
            msg: The validation works! End the playbook run

        - name: End play
          meta: end_play

    - name: Fail the test
      fail:
        msg: |
          The haproxy role should have detected issues within haproxy
          configuration file!