Tweaking Ansible steps.

This commit is contained in:
2025-01-19 10:51:02 -05:00
parent b6e0473bc1
commit 065312b50d
@@ -5,7 +5,6 @@ on:
- main - main
paths: paths:
- '**.yml' - '**.yml'
jobs: jobs:
check-and-create-pr: check-and-create-pr:
name: Check and Create PR name: Check and Create PR
@@ -51,9 +50,6 @@ jobs:
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4 uses: actions/checkout@v4
with:
fetch-depth: 1
# Cache Ansible Galaxy Collections
- name: Cache Ansible Galaxy Collections - name: Cache Ansible Galaxy Collections
uses: actions/cache@v3 uses: actions/cache@v3
with: with:
@@ -61,24 +57,17 @@ jobs:
key: ${{ runner.os }}-ansible-${{ hashFiles('./ansible/collections/requirements.yml') }} key: ${{ runner.os }}-ansible-${{ hashFiles('./ansible/collections/requirements.yml') }}
restore-keys: | restore-keys: |
${{ runner.os }}-ansible- ${{ runner.os }}-ansible-
# Install Ansible
- name: Set up Python
uses: actions/setup-python@v2
with:
python-version: '3.x'
- name: Install Ansible - name: Install Ansible
run: | run: |
python3 -m pip install --upgrade pip python3 -m pip install --upgrade pip
pip3 install ansible pip3 install ansible
- name: Install Vault - name: Install Vault
uses: cpanato/vault-installer@main uses: cpanato/vault-installer@main
# Install Galaxy Collections
- name: Install Galaxy Collections - name: Install Galaxy Collections
if: steps.cache-ansible-galaxy-collections.outputs.cache-hit != 'true' if: steps.cache-ansible-galaxy-collections.outputs.cache-hit != 'true'
run: | run: |
ansible-galaxy collection install -r ansible/collections/requirements.yml -p ansible/collections ansible-galaxy collection install -r ansible/collections/requirements.yml -p ansible/collections
# Run Docker Config Deployment - name: Ansible Dry Run
- name: Docker Config Deployment
id: docker-config-deploy id: docker-config-deploy
uses: arillso/action.playbook@0.0.8 uses: arillso/action.playbook@0.0.8
with: with:
@@ -86,22 +75,19 @@ jobs:
diff: true diff: true
galaxy_collections_path: ansible/collections galaxy_collections_path: ansible/collections
galaxy_requirements_file: ansible/collections/requirements.yml galaxy_requirements_file: ansible/collections/requirements.yml
inventory: ansible/ansible-inventory.yml inventory: ansible/inventory/hosts.yml
playbook: ansible/docker_config_deploy.yml playbook: ansible/docker_config_deploy.yml
private_key: ${{ secrets.RINOA_ANSIBLE_PRIVATE_KEY }} private_key: ${{ secrets.RINOA_ANSIBLE_PRIVATE_KEY }}
vault_password: ${{ secrets.ANSIBLE_VAULT_PASSWORD }} vault_password: ${{ secrets.ANSIBLE_VAULT_PASSWORD }}
verbose: 1 verbose: 1
# Generate .env File
- name: Generate .env file for Docker Compose Dry Run - name: Generate .env file for Docker Compose Dry Run
run: | run: |
vault kv get -format=json rinoa-docker/env | jq -r '.data.data' | jq -r 'keys[] as $k | "\($k)='\''\(.[$k])'\''"' > .env vault kv get -format=json rinoa-docker/env | jq -r '.data.data' | jq -r 'keys[] as $k | "\($k)='\''\(.[$k])'\''"' > .env
# Cache .env File
- name: Cache .env Files - name: Cache .env Files
uses: actions/cache@v3 uses: actions/cache@v3
with: with:
path: .env path: .env
key: ${{ runner.os }}-env-${{ hashFiles('docker-compose.yml') }} key: ${{ runner.os }}-env-${{ hashFiles('docker-compose.yml') }}
# Docker Compose Dry Run
- name: Docker Compose Dry Run - name: Docker Compose Dry Run
uses: yu-ichiro/spin-up-docker-compose-action@v1 uses: yu-ichiro/spin-up-docker-compose-action@v1
with: with:
@@ -248,7 +234,7 @@ jobs:
with: with:
galaxy_collections_path: ansible/collections galaxy_collections_path: ansible/collections
galaxy_requirements_file: ansible/collections/requirements.yml galaxy_requirements_file: ansible/collections/requirements.yml
inventory: ansible/ansible-inventory inventory: ansible/inventory/hosts.yml
playbook: ansible/docker_config_deploy.yml playbook: ansible/docker_config_deploy.yml
private_key: ${{ secrets.RINOA_ANSIBLE_PRIVATE_KEY }} private_key: ${{ secrets.RINOA_ANSIBLE_PRIVATE_KEY }}
vault_password: ${{ secrets.ANSIBLE_VAULT_PASSWORD }} vault_password: ${{ secrets.ANSIBLE_VAULT_PASSWORD }}