Michael Grote
28f22968da
Reviewed-on: #127
Co-authored-by: Michael Grote <michael.grote@posteo.de>
Co-committed-by: Michael Grote <michael.grote@posteo.de>
ci: testing deployment (#128)
Reviewed-on: #128
Co-authored-by: Michael Grote <michael.grote@posteo.de>
Co-committed-by: Michael Grote <michael.grote@posteo.de>
ci: test
ci: enable deployment
ci: set ssh-key for deployment
ci: debug
ci: deactivate ansible-lint temporarily
ci: deactivate ansible-galaxy temporarily
ci: debug ssh-key shell redirect
ci: base64
ci: debug
ci: debug
ci: fix output
Revert "ci: deactivate ansible-lint temporarily"
This reverts commit 6729342f26.
ci: fix vault-pass secret
pbs_integration: enable no_log
ci: debug ansible-vault
ci: debug
ci: ansible-vault + move to viczem.keepass (#130)
Reviewed-on: #130
Co-authored-by: Michael Grote <michael.grote@posteo.de>
Co-committed-by: Michael Grote <michael.grote@posteo.de>
ff
plugin umbennennugn
ff
25 lines
934 B
YAML
25 lines
934 B
YAML
---
|
|
depends_on:
|
|
- ansible-lint
|
|
|
|
steps:
|
|
ansible-playbook:
|
|
image: quay.io/ansible/creator-ee:v24.2.0
|
|
commands:
|
|
# Secrets
|
|
- echo $${SSHKEY} | base64 -d > ./id_ed25519 # woodpecker verschluckt linebreakes, daher mit base64 -w0 "kodiert"
|
|
- echo $${VAULTPASS} | base64 -d > ./vault-pass.yml # Name des Secrets in Großschreibung
|
|
- chmod 0400 ./id_ed25519
|
|
# Abhängigkeiten
|
|
- pip install 'pykeepass==4.0.3' --user
|
|
- ansible-galaxy install -r requirements.yaml
|
|
# Debug
|
|
- ansible localhost -m debug -a "var={{ lookup('viczem.keepass.keepass', 'restic_repository_password', 'password') }}"
|
|
# Doing
|
|
- ansible-playbook playbooks/2_all.yml playbooks/3_service/* --limit production
|
|
# https://woodpecker-ci.org/docs/usage/secrets#use-secrets-in-commands
|
|
secrets: [vaultpass, sshkey]
|
|
when:
|
|
- event: [push, pull_request_closed]
|
|
branch: master
|
|
...
|