Refactor file path in actions-validate.yml and add input parameters for vault master password, ansible user, and trusted hosts

This commit is contained in:
2024-09-29 18:33:44 +02:00
parent 60e2d7476a
commit 095c73b97e
8 changed files with 80 additions and 73 deletions
+19 -5
View File
@@ -1,5 +1,19 @@
name: Setup Ansible Environment
description: Prepare the environment for A13labs CI/CD pipelines
inputs:
vault-master-password:
description: "The master password for the vault"
required: true
ansible-user:
description: "The user to use for Ansible"
required: true
trusted-hosts:
description: "The list of trusted hosts"
required: true
outputs:
ssh-auth-sock:
description: "The SSH_AUTH_SOCK environment variable"
value: ${{ steps.start-ssh-agent.outputs.ssh-auth-sock }}
runs:
using: "composite"
@@ -14,7 +28,7 @@ runs:
- name: Setup SSH Key
shell: bash
env:
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
VAULT_MASTER_PASSWORD: ${{ inputs.vault-master-password }}
run: |
sectool ssh unlock ansible
mkdir -p ~/.ssh
@@ -25,7 +39,7 @@ runs:
- name: Read SSH Trusted Hosts keys
shell: bash
env:
TRUSTED_HOSTS: ${{ secrets.TRUSTED_HOSTS }}
TRUSTED_HOSTS: ${{ inputs.trusted-hosts }}
run: |
mkdir -p ~/.ssh
for HOST in $TRUSTED_HOSTS; do
@@ -43,7 +57,7 @@ runs:
- name: Start SSH Agent
shell: bash
env:
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
VAULT_MASTER_PASSWORD: ${{ inputs.vault-master-password }}
SSH_AUTH_SOCK: /tmp/ssh_agent.sock
run: |
ssh-agent -a $SSH_AUTH_SOCK > /dev/null
@@ -54,8 +68,8 @@ runs:
- name: Check SSH Connection to remote hosts
shell: bash
env:
TRUSTED_HOSTS: ${{ secrets.TRUSTED_HOSTS }}
ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }}
TRUSTED_HOSTS: ${{ inputs.trusted-hosts }}
ANSIBLE_USER: ${{ inputs.ansible-user }}
SSH_AUTH_SOCK: /tmp/ssh_agent.sock
run: |
for HOST in $TRUSTED_HOSTS; do