docker_* tests: check API version (#48620)

* Check minimal API and docker-py versions for all docker_* tests.

* Improve docker_swarm creation/destruction for tests.

* Fail when conditions aren't met.

* Don't hardcode address for advertise_addr.

test/integration/targets/docker_secret/handlers/main.yml

@@ -1,3 +0,0 @@
-- name: disable_swarm 
-  command: docker swarm leave --force
-  ignore_errors: yes

test/integration/targets/docker_secret/tasks/main.yml

@@ -1,2 +1,7 @@
 - include_tasks: test_secrets.yml
-  when: ansible_os_family != 'RedHat' or ansible_distribution_major_version != '6'
+  # Maximum of 2.1.0 (docker-py version for docker_secrets) and 2.6.0 (docker-py version for docker_swarm) is 2.6.0
+  # Maximum of 1.25 (docker API version for docker_secrets) and 1.35 (docker API version for docker_swarm) is 1.35
+  when: docker_py_version is version('2.6.0', '>=') and docker_api_version is version('1.35', '>=')
+
+- fail: msg="Too old docker / docker-py version to run docker_secrets tests!"
+  when: not(docker_py_version is version('2.6.0', '>=') and docker_api_version is version('1.35', '>=')) and (ansible_distribution != 'CentOS' or ansible_distribution_major_version|int > 6)

test/integration/targets/docker_secret/tasks/test_secrets.yml

@@ -1,97 +1,105 @@
-- name: Check if already in swarm
-  shell: docker node ls 2>&1 | grep 'docker swarm init'
-  register: output
-  ignore_errors: yes 
+---
+- block:
+  - name: Make sure we're not already using Docker swarm
+    docker_swarm:
+      state: absent
+      force: true
 
-- name: Enable swarm mode
-  command: docker swarm init
-  when: output.rc == 0
-  notify: disable_swarm 
+  - name: Create a Swarm cluster
+    docker_swarm:
+      state: present
+      advertise_addr: "{{ansible_default_ipv4.address}}"
 
-- name: Parameter name should be required
-  docker_secret:
-    state: present
-  ignore_errors: yes
-  register: output
+  - name: Parameter name should be required
+    docker_secret:
+      state: present
+    ignore_errors: yes
+    register: output
 
-- name: assert failure when called with no name
-  assert:
-    that:
-       - 'output.failed'
-       - 'output.msg == "missing required arguments: name"'
+  - name: assert failure when called with no name
+    assert:
+      that:
+         - 'output.failed'
+         - 'output.msg == "missing required arguments: name"'
 
-- name: Test parameters
-  docker_secret:
-    name: foo
-    state: present
-  ignore_errors: yes
-  register: output
+  - name: Test parameters
+    docker_secret:
+      name: foo
+      state: present
+    ignore_errors: yes
+    register: output
 
-- name: assert failure when called with no data
-  assert:
-    that:
-       - 'output.failed'
-       - 'output.msg == "state is present but all of the following are missing: data"'
+  - name: assert failure when called with no data
+    assert:
+      that:
+         - 'output.failed'
+         - 'output.msg == "state is present but all of the following are missing: data"'
 
-- name: Create secret
-  docker_secret:
-    name: db_password
-    data: opensesame!
-    state: present
-  register: output
+  - name: Create secret
+    docker_secret:
+      name: db_password
+      data: opensesame!
+      state: present
+    register: output
 
-- name: Create variable secret_id 
-  set_fact:
-    secret_id: "{{ output.secret_id }}"
+  - name: Create variable secret_id
+    set_fact:
+      secret_id: "{{ output.secret_id }}"
 
-- name: Inspect secret
-  command: "docker secret inspect {{ secret_id }}"
-  register: inspect
+  - name: Inspect secret
+    command: "docker secret inspect {{ secret_id }}"
+    register: inspect
 
-- debug: var=inspect
+  - debug: var=inspect
 
-- name: assert secret creation succeeded
-  assert:
-    that:
-       - "'db_password' in inspect.stdout"
-       - "'ansible_key' in inspect.stdout"
+  - name: assert secret creation succeeded
+    assert:
+      that:
+         - "'db_password' in inspect.stdout"
+         - "'ansible_key' in inspect.stdout"
 
-- name: Create secret again
-  docker_secret:
-    name: db_password
-    data: opensesame!
-    state: present
-  register: output
+  - name: Create secret again
+    docker_secret:
+      name: db_password
+      data: opensesame!
+      state: present
+    register: output
 
-- name: assert create secret is idempotent
-  assert:
-    that:
-       - not output.changed
+  - name: assert create secret is idempotent
+    assert:
+      that:
+         - not output.changed
 
-- name: Update secret
-  docker_secret:
-    name: db_password
-    data: newpassword!
-    state: present
-  register: output
+  - name: Update secret
+    docker_secret:
+      name: db_password
+      data: newpassword!
+      state: present
+    register: output
 
-- name: assert secret was updated
-  assert:
-    that:
-       - output.changed
-       - output.secret_id != secret_id
+  - name: assert secret was updated
+    assert:
+      that:
+         - output.changed
+         - output.secret_id != secret_id
 
-- name: Remove secret
-  docker_secret:
-    name: db_password
-    state: absent
+  - name: Remove secret
+    docker_secret:
+      name: db_password
+      state: absent
 
-- name: Check that secret is removed
-  command: "docker secret inspect {{ secret_id }}"
-  register: output
-  ignore_errors: yes
+  - name: Check that secret is removed
+    command: "docker secret inspect {{ secret_id }}"
+    register: output
+    ignore_errors: yes
 
-- name: assert secret was removed 
-  assert:
-    that:
-      - output.failed 
+  - name: assert secret was removed
+    assert:
+      that:
+        - output.failed
+
+  always:
+  - name: Remove Swarm cluster
+    docker_swarm:
+      state: absent
+      force: true