- Go 71.4%
- Shell 12.7%
- Jinja 8.5%
- HCL 7.4%
Ansible roles and playbooks for hanuman infrastructure: Forgejo on Lightsail, Kafka cluster, hanuman-workers, runtime hosts. Migrated from prior 19-repo workspace per ../platform/docs/wip/workspace-reorg/. |
||
|---|---|---|
| collections | ||
| forgejo | ||
| inventories | ||
| playbooks | ||
| roles | ||
| scripts | ||
| vars | ||
| .gitignore | ||
| AGENTS.md | ||
| AI_CONTEXT.md | ||
| ansible.cfg | ||
| EVENTBUS_README.md | ||
| hanuman-module.json | ||
| MODULE_CONTRACT.md | ||
| README-sonarqube.md | ||
| README.md | ||
Hanuman Automation
Ansible, bootstrap scripts, workstation provisioning, repo hydration, branch policy enforcement, runtime path wiring, and worker build automation for Hanuman environments.
All Ansible work is run from the control node leopard. Windows and Codex Desktop are only used to edit this repository.
Layout
ansible/playbooks/— top-level playbooksansible/roles/— reusable roles consumed by the playbooksansible/inventories/example/— example inventory layoutansible/inventories/local/— local-loopback inventory (localhost)ansible/collections/requirements.yml— required Ansible collectionsansible/scripts/— post-run validation helpersansible/vars/— workspace variable files
Playbooks
bootstrap-leopard.yml— bootstrap theleopardcontrol node itself.setup-local-admin-and-codex.yml— local admin user, passwordless sudo, Codex CLI.setup-hanuman-repos.yml— clone and arrange the Hanuman repositories on the host.setup-runtime-and-workers.yml— runtime path wiring and worker provisioning.setup-worker-pipeline.yml— worker pipeline configuration.hydrate-and-build-workers.yml— fetch dependencies and build worker binaries.sonarqube.yml— install SonarQube Community Build (seeREADME-sonarqube.mdfor the full SonarQube playbook guide).
Run a playbook from leopard:
cd /path/to/hanuman-automation/ansible
ansible-playbook -i inventories/<your-inventory>/hosts.ini playbooks/<playbook>.yml
Roles
The roles consumed by the playbooks above are under ansible/roles/:
codex-cli, common, docker, git, golang, hanuman-branch-policy, hanuman-repos, hanuman-runtime-paths, hanuman-worker-build, hanuman-worker-pipeline, hanuman-workspace, node, packages, passwordless-sudo, postgres-client, sonarqube.
Validation
After a runtime/worker provisioning run, validate on the target host with the helpers under ansible/scripts/:
validate-runtime-and-workers.shvalidate-worker-pipeline.shvalidate-worker-runtime.sh
SonarQube
For the SonarQube playbook specifically, see README-sonarqube.md — it covers collections, vault password setup, PostgreSQL modes, syntax check, run, and host-side validation.