From 93cc8a3a647e7ff6329ac88600207ef25b10b02d Mon Sep 17 00:00:00 2001
From: Alexandre Pires <c.alexandre.pires@gmail.com>
Date: Thu, 26 Sep 2024 20:22:02 +0200
Subject: [PATCH] Refactor ansible-apply.yaml and inventory/hosts, add
 ANSIBLE_USER and SSH_AUTH_SOCK environment variables, and update Terraform
 Apply script to handle multiple hosts

---
 .github/workflows/terraform-k8apps-apply.yaml | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/terraform-k8apps-apply.yaml b/.github/workflows/terraform-k8apps-apply.yaml
index 0374509..192b434 100644
--- a/.github/workflows/terraform-k8apps-apply.yaml
+++ b/.github/workflows/terraform-k8apps-apply.yaml
@@ -89,6 +89,14 @@ jobs:
       - name: Terraform Apply
         env:
           VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
+          ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }}
+          SSH_AUTH_SOCK: /tmp/ssh_agent.sock
         run: |
-          cd terraform/k8sapps
-          sectool exec terraform apply --auto-approve
+          for HOST in $TRUSTED_HOSTS; do
+            ssh -f -N -L 16443:localhost:16443 $ANSIBLE_USER@$HOST
+            # override hosts address in kube config
+            sed -i "s/server: https:\/\/$HOST:16443/server: https:\/\/localhost:16443/g" ~/.kube/config
+            cd terraform/k8sapps
+            sectool exec terraform apply --auto-approve
+            pkill -f "ssh -f -N -L 16443:localhost:16443 $ANSIBLE_USER@$HOST"
+          done