1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-05-06 23:56:21 +02:00
Commit Graph

16 Commits

Author SHA1 Message Date
Evangelos Foutras 62f93478dc
Replace dynamic hcloud inventory with host entries
We make almost no use of the dynamic properties of the hcloud inventory,
so we can simplify this by declaring all cloud servers in the main hosts
inventory.

The main benefit of this change is that temporary and experimental cloud
servers are not automatically included in the Ansible playbooks. In such
cases it is usually incorrect to deploy changes to these unknown servers.

A smaller side benefit is that Ansible will now use hostnames to connect
to cloud servers, whereas the dynamic inventory provided IPv4 addresses.
This results in more meaningful ~/.ssh/known_hosts entries.
2022-05-12 20:32:58 +03:00
Evangelos Foutras b4d60ae2f6
Move highly sensitive secrets to new "super" vault
The idea bebind this is to be able to give vault access to new DevOps
members without giving away more important credentials like Hetzner's.
2022-05-07 17:45:19 +03:00
Evangelos Foutras b3f940011a
ansible.cfg: Use new callbacks_enabled key name
As per the following deprecation warning (even though it has a typo):

[DEPRECATION WARNING]: [defaults]callback_whitelist option, normalizing
names to new standard, use callback_enabled instead. This feature will
be removed from ansible-core in version 2.15.  Deprecation warnings can
be disabled by setting deprecation_warnings=False in ansible.cfg.

[1] https://github.com/ansible/ansible/pull/74845
2021-07-12 14:45:25 +03:00
Jan Alexander Steffens (heftig) bfa9585dcd
matrix: Add missing oidc support 2021-04-15 14:45:56 +02:00
Frederik Schwan f42fd92b83
Merge wip-keyclaok into master 2020-04-30 14:30:35 +02:00
Sven-Hendrik Haase 2d38b6ff63 Use custom hcloud dynamic inventory script
This has multiple benefits:
- We don't have to wait until Ansible 2.8 (which will be when the official hcloud dynamic inventory provider will be included)
- We can expand the script to group servers by labels if required
- We can use the vault to automatically get the hetzner cloud token which is not possible otherwise
2019-03-31 04:19:56 +02:00
Sven-Hendrik Haase 0d4e14254c Allow ansible to use the hcloud token 2019-03-24 23:11:01 +01:00
Sven-Hendrik Haase 48dc27e492 Add terraform_state role 2019-03-24 20:54:57 +01:00
Bartłomiej Piotrowski 0076adb1a6 plugins: add auto_tags plugin 2017-12-07 14:14:33 +01:00
Giancarlo Razzolini f0736897ae
ansible.cfg: Enable the profile_tasks callback plugin
The profile_tasks plugin shows how much time the book run took and
also breaks down an individual view of how much time each task took
to complete.
2017-08-22 17:49:44 -03:00
Giancarlo Razzolini 748842f1d1
Disable retry files by default
Disable retry files by default. Those can be enabled on a per role
or per playbook basis.
2017-07-25 10:06:57 -03:00
Giancarlo Razzolini c9ee6182c4
ansible.cfg: Removed settings that had default values
Our ansible.cfg had some settings that were using the default values,
according to ansible documentation.
2017-03-10 22:23:27 -03:00
Florian Pritz 4677412eea
dbscripts: Add module for staging directory creation
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-01-29 18:59:58 +01:00
Florian Pritz 849eb43df1
Put vault-password-file setting into ansible.cfg
Uhm, yeah. Forget I ever created a wrapper for that...

Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-07-18 17:04:44 +02:00
Sven-Hendrik Haase 79855bf563 Put playbooks into subdir 2016-05-17 13:47:22 +02:00
Sven-Hendrik Haase 764893b472 Initial config check-in for vostok and orion 2016-05-17 13:32:05 +02:00