1
1
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-09-18 14:11:48 +02:00
Commit Graph

16 Commits

Author SHA1 Message Date
Evangelos Foutras
30444a3b4e
ci: install jmespath for ansible-lint
Prevents the following lint failure:

  jinja: You need to install "jmespath" prior to
         running json_query filter (jinja[invalid])
2022-09-19 00:16:55 +03:00
Evangelos Foutras
96f37bd541
ci: completely remove "vars_files:" from playbooks
Removing just the list of vaulted var files triggers a schema violation.
2022-05-21 15:49:43 +03:00
Evangelos Foutras
62f93478dc
Replace dynamic hcloud inventory with host entries
We make almost no use of the dynamic properties of the hcloud inventory,
so we can simplify this by declaring all cloud servers in the main hosts
inventory.

The main benefit of this change is that temporary and experimental cloud
servers are not automatically included in the Ansible playbooks. In such
cases it is usually incorrect to deploy changes to these unknown servers.

A smaller side benefit is that Ansible will now use hostnames to connect
to cloud servers, whereas the dynamic inventory provided IPv4 addresses.
This results in more meaningful ~/.ssh/known_hosts entries.
2022-05-12 20:32:58 +03:00
Evangelos Foutras
b4d60ae2f6
Move highly sensitive secrets to new "super" vault
The idea bebind this is to be able to give vault access to new DevOps
members without giving away more important credentials like Hetzner's.
2022-05-07 17:45:19 +03:00
Evangelos Foutras
fe72265a32
ci: split dependencies per job
Add diffutils needed for "terraform fmt --check --diff".
2022-04-05 10:48:48 +03:00
Kristian Klausen
ce4f28650b ci: Install ansible so ansible-lint can resolve the modules
ansible-lint no longer depends on ansible[1][2] which causes it to fail
with: syntax-check: couldn't resolve module/action 'pacman', as the
modules is part of ansible and not ansible-base.

[1] https://bugs.archlinux.org/task/69920
[2] a3ccb42b8d
2021-03-16 01:30:31 +01:00
Kristian Klausen
4112bdf9fd Make ansible-lint happy
yaml: truthy value should be one of [false, true] (truthy)
yaml: wrong indentation: expected 4 but found 2 (indentation)
yaml: too few spaces before comment (comments)
yaml: missing starting space in comment (comments)
yaml: too many blank lines (1 > 0) (empty-lines)
yaml: too many spaces after colon (colons)
yaml: comment not indented like content (comments-indentation)
yaml: no new line character at the end of file (new-line-at-end-of-file)
load-failure: Failed to load or parse file
parser-error: couldn't resolve module/action 'hosts'. This often indicates a misspelling, missing collection, or incorrect module path.
2021-02-14 14:22:05 +01:00
Kristian Klausen
f99cca5e3b ansible-lint: Make the new syntax-check rule happy
With a dynamic inventory and vault_password_file set it will try to use
them, which of course doesn't work in the CI.
2021-02-14 14:22:05 +01:00
Kristian Klausen
0356dee2e2 Install yamllint for YAML linting by ansible-lint
https://github.com/ansible-community/ansible-lint/issues/953
2021-02-14 14:22:02 +01:00
Giancarlo Razzolini
bd65b9c5ed
gitlab-ci: Add --diff to terraform fmt command
Added --diff to the terraform fmt --check command, because it then will show the
offending lines on the pipeline output.
2021-01-13 13:43:02 -03:00
Frederik Schwan
80c22539b9
introduce terraform fmt to the CI to improve readability 2020-10-22 13:45:19 +02:00
Sven-Hendrik Haase
758e5ff719
Remove old terraform-provider-keycloak package 2020-08-27 08:19:18 +02:00
Sven-Hendrik Haase
a6fb4c46ec Run terraform validate on both stages 2020-05-10 00:49:11 +00:00
Frederik Schwan
01ec0ae62d make gitlab-ci svenstaro compliant 2020-05-10 00:29:05 +00:00
Frederik Schwan
2e05dd9204 add documentation for ansible bug 2020-05-10 00:29:05 +00:00
Frederik Schwan
11526c9714
add gitlab-ci.yml 2020-05-10 02:16:05 +02:00