infrastructure/ansible.cfg

[defaults]
inventory = hosts
library = library
remote_tmp = $HOME/.ansible/tmp
remote_user = root
nocows = 1
roles_path = roles
vault_id_match = True
vault_identity_list = default@misc/vault-keyring-client.sh,super@misc/vault-keyring-client.sh
retry_files_enabled = False
callback_plugins = plugins/callback
callbacks_enabled = profile_tasks
max_diff_size = 250000

[ssh_connection]
pipelining = True
scp_if_ssh = True
retries = 5
Initial config check-in for vostok and orion 2016-05-17 13:32:05 +02:00			`[defaults]`
Replace dynamic hcloud inventory with host entries We make almost no use of the dynamic properties of the hcloud inventory, so we can simplify this by declaring all cloud servers in the main hosts inventory. The main benefit of this change is that temporary and experimental cloud servers are not automatically included in the Ansible playbooks. In such cases it is usually incorrect to deploy changes to these unknown servers. A smaller side benefit is that Ansible will now use hostnames to connect to cloud servers, whereas the dynamic inventory provided IPv4 addresses. This results in more meaningful ~/.ssh/known_hosts entries. 2022-05-12 19:16:47 +02:00			`inventory = hosts`
dbscripts: Add module for staging directory creation Signed-off-by: Florian Pritz <bluewind@xinu.at> 2017-01-29 18:48:41 +01:00			`library = library`
Initial config check-in for vostok and orion 2016-05-17 13:32:05 +02:00			`remote_tmp = $HOME/.ansible/tmp`
			`remote_user = root`
			`nocows = 1`
Put playbooks into subdir 2016-05-17 13:47:22 +02:00			`roles_path = roles`
Move highly sensitive secrets to new "super" vault The idea bebind this is to be able to give vault access to new DevOps members without giving away more important credentials like Hetzner's. 2022-05-01 14:26:32 +02:00			`vault_id_match = True`
			`vault_identity_list = default@misc/vault-keyring-client.sh,super@misc/vault-keyring-client.sh`
Disable retry files by default Disable retry files by default. Those can be enabled on a per role or per playbook basis. 2017-07-25 15:06:57 +02:00			`retry_files_enabled = False`
plugins: add auto_tags plugin 2017-12-07 14:09:55 +01:00			`callback_plugins = plugins/callback`
ansible.cfg: Use new callbacks_enabled key name As per the following deprecation warning (even though it has a typo): [DEPRECATION WARNING]: [defaults]callback_whitelist option, normalizing names to new standard, use callback_enabled instead. This feature will be removed from ansible-core in version 2.15. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. [1] https://github.com/ansible/ansible/pull/74845 2021-07-12 13:45:25 +02:00			`callbacks_enabled = profile_tasks`
matrix: Add missing oidc support 2021-04-15 14:45:56 +02:00			`max_diff_size = 250000`
Initial config check-in for vostok and orion 2016-05-17 13:32:05 +02:00
			`[ssh_connection]`
			`pipelining = True`
			`scp_if_ssh = True`
Merge wip-keyclaok into master 2020-04-30 14:30:35 +02:00			`retries = 5`