feat: Add validation task for NGINX modules

Author: alessfg

CHANGELOG.md

@@ -10,9 +10,10 @@ BREAKING CHANGES:
 
 FEATURES:
 
+- Add support for installing the NGINX Plus HA keepalived package.
+- Add validation tasks to check the Ansible version, the Jinja2 version, and whether the required Ansible collections for this role are installed.
 - Add support for installing NGINX Open Source on Alpine Linux 3.20.
 - Add support for installing NGINX Agent on Ubuntu noble.
-- Add validation tasks to check the Ansible version, the Jinja2 version, and whether the required Ansible collections for this role are installed.
 - Bump the minimum version of Ansible supported to `2.16`, whilst clarifying that Ansible `2.18` is not supported at this stage.
 - Bump the Ansible `community.general` collection to `9.2.0`, `community.crypto` collection to `2.21.1` and `community.docker` collection to `3.11.0`.
 
@@ -28,6 +29,7 @@ TESTS:
 MAINTENANCE:
 
 - Installing certain NGINX modules on Alpine Linux 3.17 no longer requires installing `nginx-plus-module-ndk` as a separate step.
+- Add an `ansible_managed` comment to the various templated configs deployed by the role.
 
 CI/CD:
 

molecule/plus/converge.yml

@@ -17,6 +17,7 @@
           - encrypted-session
           - geoip
           - geoip2
+          - ha-keepalived
           - headers-more
           - image-filter
           - lua

tasks/validate/validate.yml

@@ -99,3 +99,16 @@
     - nginx_enable | bool
     - (nginx_install_from == "nginx_repository" or nginx_type == "plus")
   ignore_errors: true # noqa ignore-errors
+
+- name: Verify that you are installing a supported NGINX dynamic module
+  ansible.builtin.assert:
+    that: (nginx_modules | difference(nginx_modules_list) == [] if nginx_type == 'opensource') or (nginx_modules | difference(nginx_plus_modules_list) == [] if nginx_type == 'plus')
+    success_msg: The NGINX module(s) you are installing are supported.
+    fail_msg: The NGINX module(s) you are installing are not supported. Please check the README for more details.
+  when:
+    - nginx_enable | bool
+    - nginx_modules is defined
+    - nginx_modules | length > 0
+  delegate_to: localhost
+  become: false
+  ignore_errors: true # noqa ignore-errors

vars/main.yml

@@ -153,4 +153,4 @@ openssl_version: 3.0.7
 nginx_modules_list: [geoip, image-filter, njs, perl, xslt]
 
 # Supported NGINX Plus dynamic modules
-nginx_plus_modules_list: [auth-spnego, brotli, encrypted-session, geoip, geoip2, headers-more, image-filter, lua, ndk, njs, opentracing, passenger, perl, prometheus, rtmp, set-misc, subs-filter, xslt]
+nginx_plus_modules_list: [auth-spnego, brotli, encrypted-session, geoip, geoip2, ha-keepalived, headers-more, image-filter, lua, ndk, njs, opentracing, passenger, perl, prometheus, rtmp, set-misc, subs-filter, xslt]