image: archlinux
packages:
- ansible
- ansible-lint
- python-hvac
- python-pip
- terraform
- yamllint
secrets:
- 333ce0ce-fd54-492d-a8b2-508d7deaa8f0
- b9d3386d-f3fb-41dc-9412-f5dfd7206c3c
sources:
- https://git.xenrox.net/~xenrox/ansible
environment:
ANSIBLE_FORCE_COLOR: True
PY_COLORS: 1
triggers:
- action: email
condition: failure
to: Thorben Günther <admin@xenrox.net>
tasks:
- ansible-lint: |
cd ansible
ansible-lint
- terraform: |
cd ansible/terraform_hetzner
terraform init -backend=false
terraform validate
cd ../terraform_vault
terraform init -backend=false
terraform validate
cd ../terraform_keycloak
terraform init -backend=false
terraform validate
- prepare: |
mkdir -p ~/.ssh
cat ansible/ssh_host_keys/* > ~/.ssh/known_hosts
cat .ansible-secrets >> .buildenv
pip install ansible-runner
echo 'export PATH="$PATH:$HOME/.local/bin"' >> ~/.buildenv
- avalon: |
cd ansible
python misc/run.py avalon
- fenrir: |
cd ansible
python misc/run.py fenrir