Add playbooks/library/report.yml

2026-07-07 16:57:37 +00:00
parent daa4f76d05
commit 7d1f610a23
1 changed files with 64 additions and 0 deletions
@@ -0,0 +1,64 @@
+---
+# library/report.yml
+#
+# Included last in every playbook run by site.yml. Aggregates the
+# shared test_results[] list into a structured JSON compliance report.
+#
+# What it does:
+#   1. Assembles __report dict with meta, summary, by_category,
+#      by_severity, failures, and the full results list
+#   2. Prints a boxed summary to the Ansible console
+#   3. Writes JSON to reports/<inventory_hostname>-<date>.json
+#      (delegated to localhost so reports land on the control node)
+#
+# The JSON schema is documented in README.md § "JSON Output Schema".
+
+- name: "REPORT: Assemble compliance report"
+  ansible.builtin.set_fact:
+    __report: "{{ {
+      'meta': {
+        'standard': 'IEC 62443-3-3',
+        'security_level': 'SL2',
+        'target': inventory_hostname,
+        'timestamp': ansible_date_time.iso8601,
+        'executed_by': ansible_user_id
+      },
+      'summary': {
+        'total': test_results | length,
+        'passed': test_results | selectattr('passed', 'equalto', true) | list | length,
+        'failed': test_results | selectattr('passed', 'equalto', false) | list | length,
+        'skipped': test_results | selectattr('passed', 'equalto', 'skipped') | list | length
+      },
+      'by_category': test_results | groupby('category') | map(
+        'regex_replace', '^(.*)$', '\\1'
+      ) | list,
+      'by_severity': {
+        'critical': test_results | selectattr('severity', 'equalto', 'critical') | list,
+        'high': test_results | selectattr('severity', 'equalto', 'high') | list,
+        'medium': test_results | selectattr('severity', 'equalto', 'medium') | list,
+        'low': test_results | selectattr('severity', 'equalto', 'low') | list
+      },
+      'failures': test_results | selectattr('passed', 'equalto', false) | list,
+      'results': test_results
+    } }}"
+
+- name: "REPORT: Display summary to console"
+  ansible.builtin.debug:
+    msg: |
+      ╔══════════════════════════════════════════════════════════════╗
+      ║  IEC 62443-3-3 SL2 Compliance Report — {{ inventory_hostname }}
+      ╠══════════════════════════════════════════════════════════════╣
+      ║  Total:  {{ __report.summary.total }}   Passed: {{ __report.summary.passed }}   Failed: {{ __report.summary.failed }}   Skipped: {{ __report.summary.skipped }}
+      ╚══════════════════════════════════════════════════════════════╝
+      {% for f in __report.failures %}
+      ✗ {{ f.test_id }}: {{ f.description }}
+        Expected: {{ f.expected }}
+        Actual:   {{ f.actual }}
+      {% endfor %}
+
+- name: "REPORT: Write JSON to local file"
+  ansible.builtin.copy:
+    content: "{{ __report | to_nice_json(indent=2) }}"
+    dest: "./reports/{{ inventory_hostname }}-{{ ansible_date_time.date }}.json"
+  delegate_to: localhost
+  run_once: true