Michael Grote
28f22968da
Reviewed-on: #127
Co-authored-by: Michael Grote <michael.grote@posteo.de>
Co-committed-by: Michael Grote <michael.grote@posteo.de>
ci: testing deployment (#128)
Reviewed-on: #128
Co-authored-by: Michael Grote <michael.grote@posteo.de>
Co-committed-by: Michael Grote <michael.grote@posteo.de>
ci: test
ci: enable deployment
ci: set ssh-key for deployment
ci: debug
ci: deactivate ansible-lint temporarily
ci: deactivate ansible-galaxy temporarily
ci: debug ssh-key shell redirect
ci: base64
ci: debug
ci: debug
ci: fix output
Revert "ci: deactivate ansible-lint temporarily"
This reverts commit 6729342f26.
ci: fix vault-pass secret
pbs_integration: enable no_log
ci: debug ansible-vault
ci: debug
ci: ansible-vault + move to viczem.keepass (#130)
Reviewed-on: #130
Co-authored-by: Michael Grote <michael.grote@posteo.de>
Co-committed-by: Michael Grote <michael.grote@posteo.de>
ff
plugin umbennennugn
ff
25 lines
878 B
YAML
25 lines
878 B
YAML
---
|
|
depends_on:
|
|
- gitleaks
|
|
|
|
steps:
|
|
ansible-lint:
|
|
image: quay.io/ansible/creator-ee:v24.2.0
|
|
commands:
|
|
# Secrets
|
|
- echo $${SSHKEY} | base64 -d > ./id_ed25519 # woodpecker verschluckt linebreakes, daher mit base64 -w0 "kodiert"
|
|
- echo $${VAULTPASS} | base64 -d > ./vault-pass.yml # Name des Secrets in Großschreibung
|
|
- chmod 0400 ./id_ed25519
|
|
# Abhängigkeiten
|
|
- pip install pykeepass Jinja2 markupsafe jmespath --user
|
|
- ansible-galaxy install -r requirements.yaml
|
|
# Doing
|
|
- ansible-lint --version
|
|
- ansible-lint --force-color --format pep8
|
|
# https://woodpecker-ci.org/docs/usage/secrets#use-secrets-in-commands
|
|
secrets: [vaultpass]
|
|
when:
|
|
- event: [push, pull_request, cron, pull_request_closed, tag, release, manual]
|
|
evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
|
|
...
|