infrastructure/.gitlab-ci.yml

image: "archlinux:latest"

ansible-lint:
  before_script:
    - pacman -Syu --needed --noconfirm ansible-lint ansible python-jmespath
  script:
    # Fix weird ansible bug: https://github.com/trailofbits/algo/issues/1637
    # This probably happens due to gitlab-runner mounting the git repo into the container
    - chmod o-w .
    # Fix syntax-check rule (https://github.com/ansible-community/ansible-lint/issues/1350#issuecomment-778764110)
    - sed -i "/^vault_identity_list/d" ansible.cfg
    - sed -i -e "/vars_files:/d" -e "/misc\/vaults\/vault_/d" playbooks/*.yml
    # Fix load-failure: Failed to load or parse file
    - ansible-lint $(printf -- "--exclude %s " */*/vault_*)

terraform-validate:
  before_script:
    - pacman -Syu --needed --noconfirm terraform diffutils
  script:
    - cd tf-stage1
    - terraform init -backend=false
    - terraform validate
    - terraform fmt --check
    - cd ../tf-stage2
    - terraform init -backend=false
    - terraform validate
    - terraform fmt --check --diff
add gitlab-ci.yml 2020-05-10 01:14:04 +02:00			`image: "archlinux:latest"`

			`ansible-lint:`
ci: split dependencies per job Add diffutils needed for "terraform fmt --check --diff". 2022-04-05 09:48:48 +02:00			`before_script:`
ci: install jmespath for ansible-lint Prevents the following lint failure: jinja: You need to install "jmespath" prior to running json_query filter (jinja[invalid]) 2022-09-18 23:06:37 +02:00			`- pacman -Syu --needed --noconfirm ansible-lint ansible python-jmespath`
add gitlab-ci.yml 2020-05-10 01:14:04 +02:00			`script:`
make gitlab-ci svenstaro compliant 2020-05-10 02:25:07 +02:00			`# Fix weird ansible bug: https://github.com/trailofbits/algo/issues/1637`
add documentation for ansible bug 2020-05-10 02:20:26 +02:00			`# This probably happens due to gitlab-runner mounting the git repo into the container`
add gitlab-ci.yml 2020-05-10 01:14:04 +02:00			`- chmod o-w .`
ansible-lint: Make the new syntax-check rule happy With a dynamic inventory and vault_password_file set it will try to use them, which of course doesn't work in the CI. 2021-02-14 12:24:33 +01:00			`# Fix syntax-check rule (https://github.com/ansible-community/ansible-lint/issues/1350#issuecomment-778764110)`
ci: completely remove "vars_files:" from playbooks Removing just the list of vaulted var files triggers a schema violation. 2022-05-21 14:47:16 +02:00			`- sed -i "/^vault_identity_list/d" ansible.cfg`
			`- sed -i -e "/vars_files:/d" -e "/misc\/vaults\/vault_/d" playbooks/*.yml`
Make ansible-lint happy yaml: truthy value should be one of [false, true] (truthy) yaml: wrong indentation: expected 4 but found 2 (indentation) yaml: too few spaces before comment (comments) yaml: missing starting space in comment (comments) yaml: too many blank lines (1 > 0) (empty-lines) yaml: too many spaces after colon (colons) yaml: comment not indented like content (comments-indentation) yaml: no new line character at the end of file (new-line-at-end-of-file) load-failure: Failed to load or parse file parser-error: couldn't resolve module/action 'hosts'. This often indicates a misspelling, missing collection, or incorrect module path. 2021-02-14 14:05:32 +01:00			`# Fix load-failure: Failed to load or parse file`
			`- ansible-lint $(printf -- "--exclude %s " //vault_*)`
Run terraform validate on both stages 2020-05-10 02:36:58 +02:00
			`terraform-validate:`
ci: split dependencies per job Add diffutils needed for "terraform fmt --check --diff". 2022-04-05 09:48:48 +02:00			`before_script:`
			`- pacman -Syu --needed --noconfirm terraform diffutils`
Run terraform validate on both stages 2020-05-10 02:36:58 +02:00			`script:`
			`- cd tf-stage1`
			`- terraform init -backend=false`
			`- terraform validate`
introduce terraform fmt to the CI to improve readability 2020-10-21 20:14:43 +02:00			`- terraform fmt --check`
Run terraform validate on both stages 2020-05-10 02:36:58 +02:00			`- cd ../tf-stage2`
			`- terraform init -backend=false`
			`- terraform validate`
gitlab-ci: Add --diff to terraform fmt command Added --diff to the terraform fmt --check command, because it then will show the offending lines on the pipeline output. 2021-01-13 17:43:02 +01:00			`- terraform fmt --check --diff`