alexpires.me/a13labs.infra
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Refactor SSH configuration and update playbook execution in ansible-apply.yaml

Browse Source
This commit is contained in:
Alexandre Pires
2024-09-24 19:31:44 +02:00
parent 38480c4333
commit 7859f65328
3 changed files with 17 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/ansible-apply.yaml
+15 -5
View File
@@ -51,13 +51,23 @@ jobs:
echo " HostKeyAlgorithms +sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com"
chmod 600 ~/.ssh/config
- name: Start SSH Agent
env:
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
run: |
ssh-agent -a $SSH_AUTH_SOCK > /dev/null
SSH_PASSWORD="$(sectool vault get SSH_PASSWORD)"
echo 'echo $SSH_PASSWORD' > ~/.ssh_askpass && chmod +x ~/.ssh_askpass
DISPLAY=None SSH_ASKPASS=~/.ssh_askpass ssh-add ~/.ssh/id_ecdsa < /dev/null
rm ~/.ssh_askpass
- name: Check SSH Connection
env:
TRUSTED_HOSTS: ${{ secrets.TRUSTED_HOSTS }}
ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }}
run: |
for HOST in $TRUSTED_HOSTS; do
ssh -vvvv -i ~/.ssh/id_ecdsa $ANSIBLE_USER@$HOST echo "SSH connection to $HOST successful"
ssh -vvvv $ANSIBLE_USER@$HOST echo "SSH connection to $HOST successful"
done
- name: Apply Ansible Playbook
@@ -66,7 +76,7 @@ jobs:
ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }}
run: |
cd ansible
sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_microk8s.yml --private-key ~/.ssh/id_ecdsa
sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_gitea.yml --private-key ~/.ssh/id_ecdsa
sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_nextcloud.yml --private-key ~/.ssh/id_ecdsa
sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_wordpress.yml --private-key ~/.ssh/id_ecdsa
sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_microk8s.yml
# sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_gitea.yml
# sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_nextcloud.yml
# sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_wordpress.yml