From 347024b1d96bf656c9ad00c6f9b9b2f030627e13 Mon Sep 17 00:00:00 2001
From: Mike Roberts <mroberts@paloaltonetworks.com>
Date: Fri, 13 Oct 2023 15:30:36 -0400
Subject: [PATCH] new dockerfile

---
 .DS_Store                 | Bin 0 -> 8196 bytes
 .gitignore                |  36 +++++-------------------------------
 ansible/blocks.yml        |  30 ++++++++++++++++++++++++++++++
 ansible/fail.yaml         |  29 +++++++++++++++++++++++++++++
 ansible/k8s_utf16.yaml    | Bin 0 -> 2000 bytes
 ansible/nested_blocks.yml |  34 ++++++++++++++++++++++++++++++++++
 ansible/no_tasks.yml      |   7 +++++++
 ansible/site.yml          |  21 +++++++++++++++++++++
 ansible/skip.yml          |  31 +++++++++++++++++++++++++++++++
 ansible/tasks.yml         |  12 ++++++++++++
 docker/Dockerfile         |   6 ------
 docker/dockerfile         |  15 +++++++++++++++
 12 files changed, 184 insertions(+), 37 deletions(-)
 create mode 100644 .DS_Store
 create mode 100644 ansible/blocks.yml
 create mode 100644 ansible/fail.yaml
 create mode 100644 ansible/k8s_utf16.yaml
 create mode 100644 ansible/nested_blocks.yml
 create mode 100644 ansible/no_tasks.yml
 create mode 100644 ansible/site.yml
 create mode 100644 ansible/skip.yml
 create mode 100644 ansible/tasks.yml
 delete mode 100644 docker/Dockerfile
 create mode 100644 docker/dockerfile

diff --git a/.DS_Store b/.DS_Store
new file mode 100644
index 0000000000000000000000000000000000000000..8f78e0851547b6798cabc9801870ece33bc00227
GIT binary patch
literal 8196
zcmeHMS!^6d5Um<J@ys|*+98K$A@RnmkSKA;+PN>XK0<CBe8gAcW!5t!gU2(@&g^c8
zWywO^hxj7gpCBPnK9B;*7YO(O2_b=^KtSRH0^$P+i64GIP~ANnNSyu14~H@>O;=Y}
z)pS?QtDdb{0KoQw)dJ7}04iOavRdk{)3}^pGnx|3R1-zA2bcg8Mq!NlV>7hli8umr
z1mXz95r`uYN8rB@0eWZirdD|GOKIH45r`vjQ$~QF4@tT>%|vusQgL)pCrSXKyaW)9
z##9Fgn`A^Y5uKJ)n9@CE^?;EnMkNMHbCM^yI?+r-rzMr<fYKZ=S{b7X1;y%QmlW!N
z8A;<ljzAoNnGxXWQwsrA?Ix_bs(!a~rC=iG`Z>~gJ2&AvL6}ZoM5U^F*6bR!My*wk
z_8j+1J)s#Ef_5`M%(-6QcXQ>jnLF&*r7T;};d`O!cy?YGIF?N+NBSMl@=NW0!LtHk
z+am?4rfONXXmT>$oZOUNH`Sb++|o+p_3JiHO=;@F)Y@&`*)ezA^B<G$V00uv-8Jq#
zUfDM{D0WESs%px<eOdNR(`${x{rcd5GwORi&M7;~<^|;3USbdB?IJnVKkB=MaWBZS
z`ccyzEx2ZAx4AA?4hBN|WXMNDfu9dMgkqMlLST2>q~{dvPSPgR`TR~@6QSdK!C^Ze
z5KU#$(h2R%oP|r8ZeN|=uytqWo`d&XsGB>F)z8=UA&Qb0I`=ttzOUq1;qgH;7_~ji
z@s9NuoxsVtcCTlS+x3{$v<r(CH`Eyk<F>NsS`(F})PX|IIZ<%J2gDjn8x8%4MH@Wm
zTYMFZomDj<Ni`bAFqd@XZR#ym71JwL8hUR)?lLn{Y+j@5y<_xvSwLIh8*gdVjXu}R
z*)Fp*X|{2bZuA$W*KB_@xox{{42=5Y<K$vckIm6^rp+)$_{s;&Ancm3J=)brw7l@H
z(b%o3gIwBXS+;edZgIn+z55JfC^&BB?XD8Rj(yJeO7nNqym*)-;rH5QIia7Agxx~O
z9IxmQrs-iwXsfE4%B+-6MMPF({AFc86Rd~ra0mv$f)YFh&%$YV70$qUco#l~&)_0l
zg0J9fxC}qRFYp`u4u2q^hV!uzmthm8uo*Yw7Tk&*xCi&)emsDEID|*=D30JU97i7~
z@C2U12k{|%7$3oB@OgX*U&dGPH9U*&;5j^x@8bvfA%2Qq;J0`gzsDc&X9X2SsZ!=B
zjY?8krZg$5m9#=1`*>5z$ucDQa<8nTQH6tmk|jC_l#%NtOX9BG`i6fsSuV|y>2b?~
zg-cT_*R*cjmbn5WiMuk?{tjS)+N-cGP%9qtHE`olGZMGzODZK&AHm%|sdCJ+8mXPs
zn^b~3n<d%h`U;hR&Spz?Rias?)MAQY^|gr>jS`4eNp@9YgQhZ+%w~P7MybTACA&l4
zsqyS)AoxUkqEn@GU^8%95v8xgTW}8EgHH&h-@te9Bm7FpRB<jg;8H>-$L4ap1J_~;
zw&Hr+fp=mC+X$xz@E~^KA?(Is!s!TR(Zu_43|;iFgeM8BlQ>04eH5R-C-G@KjnCl=
z_+o_FHzeAwU~q34eUjpvl`&ZC$$PHv@z2U-1Yd0&b2l7;DrwQc>;GMqzyIIxePe?-
z0&xWXKM}y{&YsS8+Ha+kmDk!yy6&ZmH?B7=sW72Vl;cE2IZpJ-ABHqek}9{!M08qG
YnxXcOe+c;N2W<TQkKg|SgEwRMC+eFdlK=n!

literal 0
HcmV?d00001

diff --git a/.gitignore b/.gitignore
index 79e55f2..49bc72c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,33 +1,7 @@
-# Local .terraform directories
-**/.terraform/*
-.idea
+# Ignore npm installed packages
+/node_modules
 
-# .tfstate files
-*.tfstate
-*.tfstate.*
+# Ignore coverage reports
+/coverage
 
-# Crash log files
-crash.log
-
-# Ignore any .tfvars files that are generated automatically for each Terraform run. Most
-# .tfvars files are managed as part of configuration and so should be included in
-# version control.
-#
-# example.tfvars
-
-# Ignore override files as they are usually used to override resources locally and so
-# are not checked in
-override.tf
-override.tf.json
-*_override.tf
-*_override.tf.json
-credentials.json
-*.tfbackend
-*.tfvars
-
-# Include override files you do wish to add to version control using negated pattern
-#
-# !example_override.tf
-
-# Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan
-# example: *tfplan*
+.idea
\ No newline at end of file
diff --git a/ansible/blocks.yml b/ansible/blocks.yml
new file mode 100644
index 0000000..99d8209
--- /dev/null
+++ b/ansible/blocks.yml
@@ -0,0 +1,30 @@
+---
+
+- name: Verify tests
+  hosts: all
+  gather_facts: False
+  tasks:
+    - name: Install, configure, and start Apache
+      block:
+        - name: Install httpd and memcached
+          ansible.builtin.yum:
+            name:
+              - httpd
+              - memcached
+            sslverify: False
+            state: latest
+
+        - name: Apply the foo config template
+          ansible.builtin.template:
+            src: templates/src.j2
+            dest: /etc/foo.conf
+
+        - name: Start service bar and enable it
+          ansible.builtin.service:
+            name: bar
+            state: started
+            enabled: True
+      when: ansible_facts['distribution'] == 'CentOS'
+      become: true
+      become_user: root
+      ignore_errors: true
diff --git a/ansible/fail.yaml b/ansible/fail.yaml
new file mode 100644
index 0000000..58615df
--- /dev/null
+++ b/ansible/fail.yaml
@@ -0,0 +1,29 @@
+---
+- name: Verify tests
+  hosts: all
+  gather_facts: False
+  tasks:
+    - name: Install, configure, and start Apache
+      block:
+        - name: Install httpd and memcached
+          ansible.builtin.yum:
+            name:
+              - httpd
+              - memcached
+            sslverify: False
+            state: latest
+
+        - name: Apply the foo config template
+          ansible.builtin.template:
+            src: templates/src.j2
+            dest: /etc/foo.conf
+
+        - name: Start service bar and enable it
+          ansible.builtin.service:
+            name: bar
+            state: started
+            enabled: True
+      when: ansible_facts['distribution'] == 'CentOS'
+      become: true
+      become_user: root
+      ignore_errors: true
diff --git a/ansible/k8s_utf16.yaml b/ansible/k8s_utf16.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..389581aaceeb4fab93cefa9485863feaab91506f
GIT binary patch
literal 2000
zcmbW1L2ueX5QXQQUxAcsfhJ9wDCbJ;r72QTuZ0+wAPlD1p-q2$+waY?@#0d5A`5oC
zJM(7Vn;HN9V`E#{%)VG|Ypd9mwzM1T*v8K6#O9nVZQ>^b?k1cqu&wc%@Y8z3S%)VB
zA@{R@GQ?N5m0K-{BiyAuSiuu~3heK&DX@w-0jtD!<=N!;)b2aSSJqv;ly${^O{V$}
zc=D~e(TSpEj!^Sf5~GWkA}+ZP_DkNBqim0(N9zilG1zUt${w9<4(18F6&BeOub9i&
zH4S=;^Xc{p*)H%^h7&T%?WeP>!RokI$41=DK&{!m;`9zpYStf|)^^WsgMYzk&VFRK
zTMb8B#$8U8NfSrh!*j|y1VhRyp8ka?q|EEKLP^DG)K-nhHpNCbQ|#8(!=|)8Zza!^
zY;ybRQB}#5fB&HBs`CQAZ|wqfb!3ly&t50-3u37QRMU!Q;I&qlr2Qm*-#oIEQJ;#Z
z){0fV5qkVOL6*-w`PS6&J(lXhhIiCV-s*6%KeKbY^8A!z&nGC_#Z{dnO=aI_)x;Ej
z@@o&eCSbiqmkJm5W{*{cwnB=X`~h}Dl=$4T)hw%eGmrTW4^6`(cIs12{sb<8$z{t|
zUcxWE-;R02NfFlZxso=a7D8W>i|W!=TNdBB4_}mj?}d_4s|ROrZkN<Ra~PH1kh`ic
z79X95x^Wjr)3JEE8|>6d9gtD8$Y<?6S9?DFB#z?k^1miZlSgE$FX$&M3o0O;^pz63
z#_~DYsOJl^l4k0ZcBC|ueKyaDv4Zm~$*avUy^r&7OFlJUCH3!o55Ke;O%0SyL}=7+
k6j9{e2|84j#xGT2ZcRO29`BIuX|%THFOQh2{GST^1?EID0{{R3

literal 0
HcmV?d00001

diff --git a/ansible/nested_blocks.yml b/ansible/nested_blocks.yml
new file mode 100644
index 0000000..e535f54
--- /dev/null
+++ b/ansible/nested_blocks.yml
@@ -0,0 +1,34 @@
+---
+
+- name: Verify tests
+  hosts: all
+  gather_facts: False
+  tasks:
+    - name: 1st level block
+      block:
+        - name: 2nd level block
+          block:
+            - name: 3rd level block
+              block:
+                - name: 4th level block
+                  block:
+                    - name: 5th level block
+                      block:
+                        - name: 6th level uri
+                          ansible.builtin.uri:
+                            url: https://www.example.com
+                    - name: 5th level uri
+                      ansible.builtin.uri:
+                        url: https://www.example.com
+                - name: 4th level uri
+                  ansible.builtin.uri:
+                    url: https://www.example.com
+            - name: 3rd level uri
+              ansible.builtin.uri:
+                url: https://www.example.com
+        - name: 2nd level uri
+          ansible.builtin.uri:
+            url: https://www.example.com
+    - name: 1st level uri
+      ansible.builtin.uri:
+        url: https://www.example.com
diff --git a/ansible/no_tasks.yml b/ansible/no_tasks.yml
new file mode 100644
index 0000000..69f9291
--- /dev/null
+++ b/ansible/no_tasks.yml
@@ -0,0 +1,7 @@
+---
+
+- name: Sample play
+  hosts:
+    - test
+  roles:
+    - role: somerole
diff --git a/ansible/site.yml b/ansible/site.yml
new file mode 100644
index 0000000..95499d9
--- /dev/null
+++ b/ansible/site.yml
@@ -0,0 +1,21 @@
+---
+
+- name: Verify tests
+  hosts: all
+  gather_facts: False
+  tasks:
+    - name: Get Running instance Info
+      amazon.aws.ec2_instance_info:
+      register: ec2info
+
+    - name: enabled
+      amazon.aws.ec2_instance:
+        name: "public-compute-instance"
+        key_name: "prod-ssh-key"
+        vpc_subnet_id: subnet-5ca1ab1e
+        instance_type: c5.large
+        security_group: default
+        network:
+          assign_public_ip: true
+        image_id: ami-123456
+        ebs_optimized: true
diff --git a/ansible/skip.yml b/ansible/skip.yml
new file mode 100644
index 0000000..48dc4a1
--- /dev/null
+++ b/ansible/skip.yml
@@ -0,0 +1,31 @@
+- hosts: localhost
+  gather_facts: false
+  tasks:
+    - name: Launch ec2 instances 1
+      #checkov:skip=CKV_AWS_135
+      amazon.aws.ec2_instance:
+        name: "bc-office-hours"
+        vpc_subnet_id: subnet-012d94ee641ab4277
+        instance_type: t3.micro
+        security_group: sg-04acc4e02a5b71244
+        image_id: "{{ ami_latest.image_id }}"
+        state: running
+
+    - name: Launch ec2 instances 2
+      amazon.aws.ec2_instance:
+        #checkov:skip=CKV_AWS_88
+        name: "bc-office-hours"
+        vpc_subnet_id: subnet-012d94ee641ab4277
+        instance_type: t3.micro
+        security_group: sg-04acc4e02a5b71244
+        image_id: "{{ ami_latest.image_id }}"
+        state: running
+
+    - name: http
+      #checkov:skip=CKV2_ANSIBLE_1
+      uri:
+        url: http://www.example.com
+        return_content: yes
+      register: this
+      failed_when: "'AWESOME' not in this.content"
+
diff --git a/ansible/tasks.yml b/ansible/tasks.yml
new file mode 100644
index 0000000..398a080
--- /dev/null
+++ b/ansible/tasks.yml
@@ -0,0 +1,12 @@
+---
+
+- name: Check that you can connect (GET) to a page
+  uri:
+    url: https://www.example.com
+
+- name: Download foo.conf
+  ansible.builtin.get_url:
+    url: https://example.com/path/file.conf
+    dest: /etc/foo.conf
+    mode: '0440'
+    validate_certs: false
diff --git a/docker/Dockerfile b/docker/Dockerfile
deleted file mode 100644
index 630d9ae..0000000
--- a/docker/Dockerfile
+++ /dev/null
@@ -1,6 +0,0 @@
-FROM  base
-
-LABEL foo="bar baz"
-ADD http://example.com/package.zip /temp
-USER  me
-
diff --git a/docker/dockerfile b/docker/dockerfile
new file mode 100644
index 0000000..41e6a4d
--- /dev/null
+++ b/docker/dockerfile
@@ -0,0 +1,15 @@
+FROM node:12-alpine
+ENV NODE_ENV "production"
+ENV PORT 8079
+EXPOSE 8079
+RUN addgroup mygroup && adduser -D -G mygroup myuser && mkdir -p /usr/src/app && chown -R myuser /usr/src/app
+# Prepare app directory
+WORKDIR /usr/src/app
+COPY package.json /usr/src/app/
+COPY yarn.lock /usr/src/app/
+RUN chown myuser /usr/src/app/yarn.lock
+USER myuser
+RUN yarn install
+COPY . /usr/src/app
+# Start the app
+CMD ["/usr/local/bin/npm", "start"]
\ No newline at end of file