|
|
|
@ -18,7 +18,7 @@ stages:
|
|
|
|
- run-kubernetes
|
|
|
|
- run-kubernetes
|
|
|
|
- run-management-update
|
|
|
|
- run-management-update
|
|
|
|
- run-patchday
|
|
|
|
- run-patchday
|
|
|
|
- run-hcloud-firewall
|
|
|
|
# - run-hcloud-firewall
|
|
|
|
|
|
|
|
|
|
|
|
lint-job:
|
|
|
|
lint-job:
|
|
|
|
stage: lint
|
|
|
|
stage: lint
|
|
|
|
@ -377,57 +377,57 @@ run-patchday-prodwork01:
|
|
|
|
### |______| |___/
|
|
|
|
### |______| |___/
|
|
|
|
###
|
|
|
|
###
|
|
|
|
|
|
|
|
|
|
|
|
.run-hcloud-firewall:
|
|
|
|
#.run-hcloud-firewall:
|
|
|
|
extends: .run-ansible
|
|
|
|
# extends: .run-ansible
|
|
|
|
stage: run-hcloud-firewall
|
|
|
|
# stage: run-hcloud-firewall
|
|
|
|
script:
|
|
|
|
# script:
|
|
|
|
- ansible-playbook -e "stage=${STAGE}" hcloud_firewall.yml --vault-password-file /tmp/vault-pass
|
|
|
|
# - ansible-playbook -e "stage=${STAGE}" hcloud_firewall.yml --vault-password-file /tmp/vault-pass
|
|
|
|
after_script:
|
|
|
|
# after_script:
|
|
|
|
- rm /tmp/vault-pass
|
|
|
|
# - rm /tmp/vault-pass
|
|
|
|
except:
|
|
|
|
# except:
|
|
|
|
- schedules
|
|
|
|
# - schedules
|
|
|
|
|
|
|
|
#
|
|
|
|
run-hcloud-firewall-dev:
|
|
|
|
#run-hcloud-firewall-dev:
|
|
|
|
extends: .run-hcloud-firewall
|
|
|
|
# extends: .run-hcloud-firewall
|
|
|
|
resource_group: dev
|
|
|
|
# resource_group: dev
|
|
|
|
before_script:
|
|
|
|
# before_script:
|
|
|
|
- export STAGE=dev
|
|
|
|
# - export STAGE=dev
|
|
|
|
- echo "${ANSIBLE_VAULT_PASS_DEV}" > /tmp/vault-pass
|
|
|
|
# - echo "${ANSIBLE_VAULT_PASS_DEV}" > /tmp/vault-pass
|
|
|
|
only:
|
|
|
|
# only:
|
|
|
|
- main
|
|
|
|
# - main
|
|
|
|
|
|
|
|
#
|
|
|
|
run-hcloud-firewall-devscr:
|
|
|
|
#run-hcloud-firewall-devscr:
|
|
|
|
extends: .run-hcloud-firewall
|
|
|
|
# extends: .run-hcloud-firewall
|
|
|
|
resource_group: devscr
|
|
|
|
# resource_group: devscr
|
|
|
|
before_script:
|
|
|
|
# before_script:
|
|
|
|
- export STAGE=devscr
|
|
|
|
# - export STAGE=devscr
|
|
|
|
- echo "${ANSIBLE_VAULT_PASS_DEV}" > /tmp/vault-pass
|
|
|
|
# - echo "${ANSIBLE_VAULT_PASS_DEV}" > /tmp/vault-pass
|
|
|
|
only:
|
|
|
|
# only:
|
|
|
|
- main
|
|
|
|
# - main
|
|
|
|
|
|
|
|
#
|
|
|
|
run-hcloud-firewall-qa:
|
|
|
|
#run-hcloud-firewall-qa:
|
|
|
|
extends: .run-hcloud-firewall
|
|
|
|
# extends: .run-hcloud-firewall
|
|
|
|
resource_group: qa
|
|
|
|
# resource_group: qa
|
|
|
|
before_script:
|
|
|
|
# before_script:
|
|
|
|
- export STAGE=qa
|
|
|
|
# - export STAGE=qa
|
|
|
|
- echo "${ANSIBLE_VAULT_PASS_QA}" > /tmp/vault-pass
|
|
|
|
# - echo "${ANSIBLE_VAULT_PASS_QA}" > /tmp/vault-pass
|
|
|
|
only:
|
|
|
|
# only:
|
|
|
|
- qa
|
|
|
|
# - qa
|
|
|
|
|
|
|
|
#
|
|
|
|
run-hcloud-firewall-prodnso:
|
|
|
|
#run-hcloud-firewall-prodnso:
|
|
|
|
extends: .run-hcloud-firewall
|
|
|
|
# extends: .run-hcloud-firewall
|
|
|
|
resource_group: prodnso
|
|
|
|
# resource_group: prodnso
|
|
|
|
before_script:
|
|
|
|
# before_script:
|
|
|
|
- export STAGE=prodnso
|
|
|
|
# - export STAGE=prodnso
|
|
|
|
- echo "${ANSIBLE_VAULT_PASS_PRODNSO}" > /tmp/vault-pass
|
|
|
|
# - echo "${ANSIBLE_VAULT_PASS_PRODNSO}" > /tmp/vault-pass
|
|
|
|
only:
|
|
|
|
# only:
|
|
|
|
- prodnso
|
|
|
|
# - prodnso
|
|
|
|
|
|
|
|
#
|
|
|
|
run-hcloud-firewall-prodwork01:
|
|
|
|
#run-hcloud-firewall-prodwork01:
|
|
|
|
extends: .run-hcloud-firewall
|
|
|
|
# extends: .run-hcloud-firewall
|
|
|
|
resource_group: prodwork01
|
|
|
|
# resource_group: prodwork01
|
|
|
|
before_script:
|
|
|
|
# before_script:
|
|
|
|
- export STAGE=prodwork01
|
|
|
|
# - export STAGE=prodwork01
|
|
|
|
- echo "${ANSIBLE_VAULT_PASS_PRODWORK01}" > /tmp/vault-pass
|
|
|
|
# - echo "${ANSIBLE_VAULT_PASS_PRODWORK01}" > /tmp/vault-pass
|
|
|
|
only:
|
|
|
|
# only:
|
|
|
|
- prodnso
|
|
|
|
# - prodnso
|
|
|
|
|