Jordan Del Pilar
19a7e77045
Updated the ansible playbook command to skip the `core` tag. This prevents core services from being stopped when the pipeline is ran.
60 lines
1.4 KiB
YAML
60 lines
1.4 KiB
YAML
name: Johto Infrastructure Pipeline
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- '**'
|
|
|
|
jobs:
|
|
lint:
|
|
name: Run Ansible Lint
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout Code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Install Ansible and Lint
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install -y ansible ansible-lint
|
|
|
|
- name: Inject Vault Password
|
|
run: printf "%s" "$VAULT_PASS" > .vault-pass.txt
|
|
env:
|
|
VAULT_PASS: ${{ secrets.ANSIBLE_VAULT_PASSWORD }}
|
|
|
|
- name: Lint Playbooks
|
|
run: ansible-lint site.yaml
|
|
|
|
deploy:
|
|
name: Deploy to Production
|
|
runs-on: ubuntu-latest
|
|
needs: lint
|
|
if: github.ref == 'refs/heads/main'
|
|
steps:
|
|
- name: Checkout Code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Install Ansible
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install -y ansible
|
|
|
|
- name: Inject SSH Key for Ansible
|
|
uses: webfactory/[email protected]
|
|
with:
|
|
ssh-private-key: ${{ secrets.ANSIBLE_SSH_KEY }}
|
|
|
|
- name: Add Headscale IPs to Known Hosts
|
|
run: |
|
|
mkdir -p ~/.ssh
|
|
ssh-keyscan 100.64.0.1 100.64.0.2 >> ~/.ssh/known_hosts
|
|
|
|
- name: Inject Vault Password
|
|
run: printf "%s" "$VAULT_PASS" > .vault-pass.txt
|
|
env:
|
|
VAULT_PASS: ${{ secrets.ANSIBLE_VAULT_PASSWORD }}
|
|
|
|
- name: Run Ansible Playbook
|
|
run: ansible-playbook site.yaml --skip-tags "core"
|