Refactor SSH configuration and update playbook execution in ansible-apply.yaml

.github/workflows/ansible-apply.yaml

@@ -51,13 +51,23 @@ jobs:
           echo "  HostKeyAlgorithms +sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com"
           chmod 600 ~/.ssh/config
 
+      - name: Start SSH Agent
+        env:
+          VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
+        run: |
+          ssh-agent -a $SSH_AUTH_SOCK > /dev/null
+          SSH_PASSWORD="$(sectool vault get SSH_PASSWORD)"
+          echo 'echo $SSH_PASSWORD' > ~/.ssh_askpass && chmod +x ~/.ssh_askpass
+          DISPLAY=None SSH_ASKPASS=~/.ssh_askpass ssh-add ~/.ssh/id_ecdsa < /dev/null
+          rm ~/.ssh_askpass
+
       - name: Check SSH Connection
         env:
           TRUSTED_HOSTS: ${{ secrets.TRUSTED_HOSTS }}
           ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }}
         run: |
           for HOST in $TRUSTED_HOSTS; do
-            ssh -vvvv -i ~/.ssh/id_ecdsa $ANSIBLE_USER@$HOST echo "SSH connection to $HOST successful"
+            ssh -vvvv $ANSIBLE_USER@$HOST echo "SSH connection to $HOST successful"
           done
 
       - name: Apply Ansible Playbook
@@ -66,7 +76,7 @@ jobs:
           ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }}
         run: |
           cd ansible
-          sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_microk8s.yml --private-key ~/.ssh/id_ecdsa
-          sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_gitea.yml --private-key ~/.ssh/id_ecdsa
-          sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_nextcloud.yml --private-key ~/.ssh/id_ecdsa
-          sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_wordpress.yml --private-key ~/.ssh/id_ecdsa
+          sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_microk8s.yml
+          # sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_gitea.yml
+          # sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_nextcloud.yml
+          # sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_wordpress.yml

ssh-keys/ansible/id_ecdsa.key

@@ -1 +1 @@
-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

ssh-keys/ansible/id_ecdsa.pub

@@ -1 +1 @@
-ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAFBAP7dYOsOGKH1UeyEzWtOv+e46AuJgcN4QiMQdOB9tft2JzR2epd1/e9VDsqN8cGcbIYi6TvsgA+IVtK4bj6wDACt/FHol1L3vV2xK3/dtbu5SEPkkksL8mqB4LXdsepHuapqhVgEanSSysbpRYytcfsy2Rtwi/Wa+8c8+302lTfG3w==
+ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAEFj7rNbTqpVSlp1eZgXcZvKrzORkIudgpP6Q6bsDzq/WYEki20p6i8o/QdQVgae6KJP2cfAkxVBUU3Qxlm1Z/ETQGpLEWicy1QE57VIu2d4CWGFsvgVbevJ4vmITnnh0UBQgeAmEL2r8sIl7EwILuevk3GLVtf1E04AFJ08t56mIVMEg==