Red Hat Certified Engineer (RHCE) #9 Tag와 조건부: when, loop, until

- name: Apache 패키지 설치
  ansible.builtin.dnf:
    name: httpd
    state: present
  when: ansible_facts['os_family'] == "RedHat"

- name: Debian 계열에서 apache2 설치
  ansible.builtin.apt:
    name: apache2
    state: present
  when: ansible_facts['os_family'] == "Debian"

- name: RHEL 9 이상에서만 실행
  ansible.builtin.debug:
    msg: "RHEL 9 이상입니다"
  when:
    - ansible_facts['distribution'] == "RedHat"
    - ansible_facts['distribution_major_version'] | int >= 9

- name: 두 조건이 모두 참일 때
  ansible.builtin.debug:
    msg: "조건 충족"
  when:
    - ansible_facts['os_family'] == "RedHat"
    - ansible_facts['memtotal_mb'] > 2048

- name: RHEL 또는 Fedora일 때
  ansible.builtin.debug:
    msg: "Red Hat 계열"
  when: >
    ansible_facts['distribution'] == "RedHat" or
    ansible_facts['distribution'] == "Fedora"

- name: extra_pkg 변수가 정의된 경우에만 설치
  ansible.builtin.dnf:
    name: "{{ extra_pkg }}"
    state: present
  when: extra_pkg is defined

- name: 여러 패키지 설치
  ansible.builtin.dnf:
    name: "{{ item }}"
    state: present
  loop:
    - httpd
    - mariadb-server
    - php

- name: 사용자 일괄 생성
  ansible.builtin.user:
    name: "{{ item.name }}"
    groups: "{{ item.groups }}"
    state: present
  loop:
    - { name: alice, groups: wheel }
    - { name: bob, groups: developers }
    - { name: carol, groups: developers }

- name: 변수로 정의한 사용자 생성
  ansible.builtin.user:
    name: "{{ item.name }}"
    uid: "{{ item.uid }}"
    state: present
  loop: "{{ users }}"

# 구식 표기 (참고용)
- name: with_items 방식
  ansible.builtin.dnf:
    name: "{{ item }}"
    state: present
  with_items: [httpd, vsftpd]

- name: dict를 항목으로 반복
  ansible.builtin.debug:
    msg: "{{ item.key }} = {{ item.value }}"
  loop: "{{ user_roles | dict2items }}"

user_roles:
  alice: admin
  bob: developer

- name: 반복 변수 이름 변경
  ansible.builtin.user:
    name: "{{ user_item.name }}"
    state: present
  loop: "{{ users }}"
  loop_control:
    loop_var: user_item

- name: 출력 라벨 지정
  ansible.builtin.user:
    name: "{{ item.name }}"
    state: present
  loop: "{{ users }}"
  loop_control:
    label: "{{ item.name }}"

- name: 서비스 응답을 기다림
  ansible.builtin.uri:
    url: http://localhost:8080/health
    status_code: 200
  register: result
  until: result.status == 200
  retries: 5
  delay: 10

- name: Apache 설치
  ansible.builtin.dnf:
    name: httpd
    state: present
  tags:
    - packages

- name: Apache 설정 배포
  ansible.builtin.template:
    src: httpd.conf.j2
    dest: /etc/httpd/conf/httpd.conf
  tags:
    - config

# config 태그가 붙은 task만 실행
ansible-playbook site.yml --tags config

# packages 태그만 건너뛰고 나머지 실행
ansible-playbook site.yml --skip-tags packages

ansible-navigator run site.yml -m stdout --tags config

ansible-playbook site.yml --list-tags

- name: 웹 서버 구성
  hosts: web
  tags:
    - web
  tasks:
    - name: httpd 설치
      ansible.builtin.dnf:
        name: httpd
        state: present

- name: 사전 점검 (항상 실행)
  ansible.builtin.debug:
    msg: "플레이북 시작"
  tags:
    - always

- name: 디버그 정보 출력 (명시할 때만)
  ansible.builtin.debug:
    var: ansible_facts
  tags:
    - never
    - debug

---
- name: 웹 서버 구성
  hosts: web
  become: true
  vars:
    web_users:
      - { name: deploy, groups: wheel }
      - { name: app, groups: web }
  tasks:
    - name: 시작 알림 (항상 실행)
      ansible.builtin.debug:
        msg: "구성을 시작합니다"
      tags:
        - always

    - name: RHEL 계열 패키지 설치
      ansible.builtin.dnf:
        name: httpd
        state: present
      when: ansible_facts['os_family'] == "RedHat"
      tags:
        - packages

    - name: 운영 사용자 생성
      ansible.builtin.user:
        name: "{{ item.name }}"
        groups: "{{ item.groups }}"
        state: present
      loop: "{{ web_users }}"
      loop_control:
        label: "{{ item.name }}"
      tags:
        - users

    - name: 서비스 기동
      ansible.builtin.service:
        name: httpd
        state: started
        enabled: true
      tags:
        - service

    - name: 서비스 활성화 확인
      ansible.builtin.command: systemctl is-active httpd
      register: httpd_state
      until: httpd_state.stdout == "active"
      retries: 5
      delay: 3
      changed_when: false
      tags:
        - service