Primeira tentativa da task da role ansible-resource-quota

main.yml

# tasks/main.yml
---
- shell: systemctl set-property haproxy.service CPUAccounting=true CPUQuota=20% MemoryLimit=10M

# ln -s /usr/lib/systemd/system/haproxy.service /etc/systemd/system/haproxy.service
- file:
    src: /usr/lib/systemd/system/haproxy.service
    dest: /etc/systemd/system/haproxy.service
    state: link

- file:
    path: /sys/fs/cgroup/memory/system.slice/haproxy.service
    state: directory
    mode: 0755

# sed -i '/^ExecStart/a ExecStartPost=/bin/bash -c "echo 10M > /sys/fs/cgroup/memory/system.slice/haproxy.service/memory.limit_in_bytes"' /etc/systemd/system/haproxy.service
- lineinfile:
    path: /etc/systemd/system/haproxy.service
    regexp: "ExecStartPost="
    insertafter: "^ExecStart="
    line: 'ExecStartPost=/bin/bash -c "echo 10M > /sys/fs/cgroup/memory/system.slice/haproxy.service/memory.limit_in_bytes"'

# systemctl daemon-reload
- systemd:
    name: haproxy
    state: restarted
    daemon_reload: yes

molecule.yml

# molecule/default/molecule.yml
---
dependency:
  name: galaxy
driver:
  name: docker
lint:
  name: yamllint
platforms:
  - name: systemd
    image: centos/systemd
    command: /sbin/init
    capabilities:
      - SYS_ADMIN
    volumes:
      - "/sys/fs/cgroup:/sys/fs/cgroup:ro"
    privileged: true
provisioner:
  name: ansible
  lint:
    name: ansible-lint
scenario:
  name: default
verifier:
  name: testinfra
  lint:
    name: flake8

prepare.yml

# molecule/default/prepare.yml
---
- name: Prepare
  hosts: all
  gather_facts: false
  tasks:
    # yum install -y haproxy
    - yum:
        name: haproxy
        state: installed

    # systemctl start haproxy
    - systemd:
        name: haproxy
        enabled: yes
        state: started