|
|
|
@ -1,8 +1,8 @@
|
|
|
|
---
|
|
|
|
---
|
|
|
|
variables:
|
|
|
|
variables:
|
|
|
|
AWX_EE_DOCKER_IMAGE_EXTERN: "harbor-01.smardigo.digital/awx/awx-custom-ee"
|
|
|
|
AWX_EE_DOCKER_IMAGE_EXTERN: "harbor-01.smardigo.digital/awx/awx-custom-ee"
|
|
|
|
ANSIBLE_HOST_KEY_CHECKING: 'false'
|
|
|
|
ANSIBLE_HOST_KEY_CHECKING: "false"
|
|
|
|
ANSIBLE_FORCE_COLOR: 'true'
|
|
|
|
ANSIBLE_FORCE_COLOR: "true"
|
|
|
|
|
|
|
|
|
|
|
|
image: docker.dev-at.de/smardigo/smardigo-ci-ansible
|
|
|
|
image: docker.dev-at.de/smardigo/smardigo-ci-ansible
|
|
|
|
|
|
|
|
|
|
|
|
@ -15,7 +15,6 @@ stages:
|
|
|
|
- ansible-builder
|
|
|
|
- ansible-builder
|
|
|
|
- run-setup
|
|
|
|
- run-setup
|
|
|
|
- run-setup-digitalocean
|
|
|
|
- run-setup-digitalocean
|
|
|
|
- run-kubernetes
|
|
|
|
|
|
|
|
- run-management-update
|
|
|
|
- run-management-update
|
|
|
|
- run-patchday
|
|
|
|
- run-patchday
|
|
|
|
- run-hcloud-firewall
|
|
|
|
- run-hcloud-firewall
|
|
|
|
@ -119,20 +118,20 @@ builder-job-prodnso-manual:
|
|
|
|
########
|
|
|
|
########
|
|
|
|
### http://patorjk.com/software/taag/#p=display&f=Doom&t=setup.yml
|
|
|
|
### http://patorjk.com/software/taag/#p=display&f=Doom&t=setup.yml
|
|
|
|
###
|
|
|
|
###
|
|
|
|
### _ _
|
|
|
|
### _ _
|
|
|
|
### | | | |
|
|
|
|
### | | | |
|
|
|
|
### ___ ___| |_ _ _ _ __ _ _ _ __ ___ | |
|
|
|
|
### ___ ___| |_ _ _ _ __ _ _ _ __ ___ | |
|
|
|
|
### / __|/ _ \ __| | | | '_ \| | | | '_ ` _ \| |
|
|
|
|
### / __|/ _ \ __| | | | '_ \| | | | '_ ` _ \| |
|
|
|
|
### \__ \ __/ |_| |_| | |_) | |_| | | | | | | |
|
|
|
|
### \__ \ __/ |_| |_| | |_) | |_| | | | | | | |
|
|
|
|
### |___/\___|\__|\__,_| .__(_)__, |_| |_| |_|_|
|
|
|
|
### |___/\___|\__|\__,_| .__(_)__, |_| |_| |_|_|
|
|
|
|
### | | __/ |
|
|
|
|
### | | __/ |
|
|
|
|
### |_| |___/
|
|
|
|
### |_| |___/
|
|
|
|
|
|
|
|
|
|
|
|
.run-setup:
|
|
|
|
.run-setup:
|
|
|
|
extends: .run-ansible
|
|
|
|
extends: .run-ansible
|
|
|
|
stage: run-setup
|
|
|
|
stage: run-setup
|
|
|
|
script:
|
|
|
|
script:
|
|
|
|
- 'command -v ssh-agent >/dev/null || ( apt-get update -y && apt-get install openssh-client -y )'
|
|
|
|
- "command -v ssh-agent >/dev/null || ( apt-get update -y && apt-get install openssh-client -y )"
|
|
|
|
- eval $(ssh-agent -s)
|
|
|
|
- eval $(ssh-agent -s)
|
|
|
|
- 'echo "$GITLAB_SSH_KEY" | tr -d "\r" | ssh-add -'
|
|
|
|
- 'echo "$GITLAB_SSH_KEY" | tr -d "\r" | ssh-add -'
|
|
|
|
- mkdir -p ~/.ssh
|
|
|
|
- mkdir -p ~/.ssh
|
|
|
|
@ -191,80 +190,23 @@ run-setup-prodwork01:
|
|
|
|
only:
|
|
|
|
only:
|
|
|
|
- prodnso
|
|
|
|
- prodnso
|
|
|
|
|
|
|
|
|
|
|
|
########
|
|
|
|
|
|
|
|
### This Page: http://patorjk.com/software/taag/#p=display&f=Doom&t=kubernetes.yml
|
|
|
|
|
|
|
|
###
|
|
|
|
|
|
|
|
### _ _ _ _
|
|
|
|
|
|
|
|
### | | | | | | | |
|
|
|
|
|
|
|
|
### | | ___ _| |__ ___ _ __ _ __ ___| |_ ___ ___ _ _ _ __ ___ | |
|
|
|
|
|
|
|
|
### | |/ / | | | '_ \ / _ \ '__| '_ \ / _ \ __/ _ \/ __|| | | | '_ ` _ \| |
|
|
|
|
|
|
|
|
### | <| |_| | |_) | __/ | | | | | __/ || __/\__ \| |_| | | | | | | |
|
|
|
|
|
|
|
|
### |_|\_\\__,_|_.__/ \___|_| |_| |_|\___|\__\___||___(_)__, |_| |_| |_|_|
|
|
|
|
|
|
|
|
### __/ |
|
|
|
|
|
|
|
|
### |___/
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.run-kubernetes:
|
|
|
|
|
|
|
|
extends: .run-ansible
|
|
|
|
|
|
|
|
stage: run-kubernetes
|
|
|
|
|
|
|
|
script:
|
|
|
|
|
|
|
|
- 'command -v ssh-agent >/dev/null || ( apt-get update -y && apt-get install openssh-client -y )'
|
|
|
|
|
|
|
|
- eval $(ssh-agent -s)
|
|
|
|
|
|
|
|
- 'echo "$GITLAB_SSH_KEY" | tr -d "\r" | ssh-add -'
|
|
|
|
|
|
|
|
- mkdir -p ~/.ssh
|
|
|
|
|
|
|
|
- chmod 0700 ~/.ssh
|
|
|
|
|
|
|
|
- '[[ -f /.dockerenv ]] && echo -e "Host *\n\tStrictHostKeyChecking no\n\n" >> ~/.ssh/config'
|
|
|
|
|
|
|
|
- ssh-add -L
|
|
|
|
|
|
|
|
- export HETZNER_LABEL_SELECTOR="stage=${STAGE}"
|
|
|
|
|
|
|
|
- ansible-playbook -i stage-${STAGE}-netgo-hcloud.yml kubernetes.yml --vault-password-file /tmp/vault-pass -u gitlabci
|
|
|
|
|
|
|
|
after_script:
|
|
|
|
|
|
|
|
- rm /tmp/vault-pass
|
|
|
|
|
|
|
|
except:
|
|
|
|
|
|
|
|
- schedules
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
run-kubernetes-dev:
|
|
|
|
|
|
|
|
extends: .run-kubernetes
|
|
|
|
|
|
|
|
resource_group: dev
|
|
|
|
|
|
|
|
before_script:
|
|
|
|
|
|
|
|
- export STAGE=dev
|
|
|
|
|
|
|
|
- echo "${ANSIBLE_VAULT_PASS_DEV}" > /tmp/vault-pass
|
|
|
|
|
|
|
|
only:
|
|
|
|
|
|
|
|
- main
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
run-kubernetes-qa:
|
|
|
|
|
|
|
|
extends: .run-kubernetes
|
|
|
|
|
|
|
|
resource_group: qa
|
|
|
|
|
|
|
|
before_script:
|
|
|
|
|
|
|
|
- export STAGE=qa
|
|
|
|
|
|
|
|
- echo "${ANSIBLE_VAULT_PASS_QA}" > /tmp/vault-pass
|
|
|
|
|
|
|
|
only:
|
|
|
|
|
|
|
|
- qa
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
run-kubernetes-prodnso:
|
|
|
|
|
|
|
|
extends: .run-kubernetes
|
|
|
|
|
|
|
|
resource_group: prodnso
|
|
|
|
|
|
|
|
before_script:
|
|
|
|
|
|
|
|
- export STAGE=prodnso
|
|
|
|
|
|
|
|
- echo "${ANSIBLE_VAULT_PASS_PRODNSO}" > /tmp/vault-pass
|
|
|
|
|
|
|
|
only:
|
|
|
|
|
|
|
|
- prodnso
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
########
|
|
|
|
########
|
|
|
|
### http://patorjk.com/software/taag/#p=display&f=Doom&t=smardigo.yml
|
|
|
|
### http://patorjk.com/software/taag/#p=display&f=Doom&t=smardigo.yml
|
|
|
|
###
|
|
|
|
###
|
|
|
|
### _ _ _
|
|
|
|
### _ _ _
|
|
|
|
### | (_) | |
|
|
|
|
### | (_) | |
|
|
|
|
### ___ _ __ ___ __ _ _ __ __| |_ __ _ ___ _ _ _ __ ___ | |
|
|
|
|
### ___ _ __ ___ __ _ _ __ __| |_ __ _ ___ _ _ _ __ ___ | |
|
|
|
|
### / __| '_ ` _ \ / _` | '__/ _` | |/ _` |/ _ \| | | | '_ ` _ \| |
|
|
|
|
### / __| '_ ` _ \ / _` | '__/ _` | |/ _` |/ _ \| | | | '_ ` _ \| |
|
|
|
|
### \__ \ | | | | | (_| | | | (_| | | (_| | (_) | |_| | | | | | | |
|
|
|
|
### \__ \ | | | | | (_| | | | (_| | | (_| | (_) | |_| | | | | | | |
|
|
|
|
### |___/_| |_| |_|\__,_|_| \__,_|_|\__, |\___(_)__, |_| |_| |_|_|
|
|
|
|
### |___/_| |_| |_|\__,_|_| \__,_|_|\__, |\___(_)__, |_| |_| |_|_|
|
|
|
|
### __/ | __/ |
|
|
|
|
### __/ | __/ |
|
|
|
|
### |___/ |___/
|
|
|
|
### |___/ |___/
|
|
|
|
|
|
|
|
|
|
|
|
.run-management-update:
|
|
|
|
.run-management-update:
|
|
|
|
extends: .run-ansible
|
|
|
|
extends: .run-ansible
|
|
|
|
stage: run-management-update
|
|
|
|
stage: run-management-update
|
|
|
|
script:
|
|
|
|
script:
|
|
|
|
- 'command -v ssh-agent >/dev/null || ( apt-get update -y && apt-get install openssh-client -y )'
|
|
|
|
- "command -v ssh-agent >/dev/null || ( apt-get update -y && apt-get install openssh-client -y )"
|
|
|
|
- eval $(ssh-agent -s)
|
|
|
|
- eval $(ssh-agent -s)
|
|
|
|
- 'echo "$GITLAB_SSH_KEY" | tr -d "\r" | ssh-add -'
|
|
|
|
- 'echo "$GITLAB_SSH_KEY" | tr -d "\r" | ssh-add -'
|
|
|
|
- mkdir -p ~/.ssh
|
|
|
|
- mkdir -p ~/.ssh
|
|
|
|
@ -310,21 +252,21 @@ run-management-update-prodnso:
|
|
|
|
|
|
|
|
|
|
|
|
########
|
|
|
|
########
|
|
|
|
### http://patorjk.com/software/taag/#p=display&f=Doom&t=patchday.yml
|
|
|
|
### http://patorjk.com/software/taag/#p=display&f=Doom&t=patchday.yml
|
|
|
|
###
|
|
|
|
###
|
|
|
|
### _ _ _ _
|
|
|
|
### _ _ _ _
|
|
|
|
### | | | | | | | |
|
|
|
|
### | | | | | | | |
|
|
|
|
### _ __ __ _| |_ ___| |__ __| | __ _ _ _ _ _ _ __ ___ | |
|
|
|
|
### _ __ __ _| |_ ___| |__ __| | __ _ _ _ _ _ _ __ ___ | |
|
|
|
|
### | '_ \ / _` | __/ __| '_ \ / _` |/ _` | | | || | | | '_ ` _ \| |
|
|
|
|
### | '_ \ / _` | __/ __| '_ \ / _` |/ _` | | | || | | | '_ ` _ \| |
|
|
|
|
### | |_) | (_| | || (__| | | | (_| | (_| | |_| || |_| | | | | | | |
|
|
|
|
### | |_) | (_| | || (__| | | | (_| | (_| | |_| || |_| | | | | | | |
|
|
|
|
### | .__/ \__,_|\__\___|_| |_|\__,_|\__,_|\__, (_)__, |_| |_| |_|_|
|
|
|
|
### | .__/ \__,_|\__\___|_| |_|\__,_|\__,_|\__, (_)__, |_| |_| |_|_|
|
|
|
|
### | | __/ | __/ |
|
|
|
|
### | | __/ | __/ |
|
|
|
|
### |_| |___/ |___/
|
|
|
|
### |_| |___/ |___/
|
|
|
|
|
|
|
|
|
|
|
|
.run-patchday:
|
|
|
|
.run-patchday:
|
|
|
|
extends: .run-ansible
|
|
|
|
extends: .run-ansible
|
|
|
|
stage: run-patchday
|
|
|
|
stage: run-patchday
|
|
|
|
script:
|
|
|
|
script:
|
|
|
|
- 'command -v ssh-agent >/dev/null || ( apt-get update -y && apt-get install openssh-client -y )'
|
|
|
|
- "command -v ssh-agent >/dev/null || ( apt-get update -y && apt-get install openssh-client -y )"
|
|
|
|
- eval $(ssh-agent -s)
|
|
|
|
- eval $(ssh-agent -s)
|
|
|
|
- 'echo "$GITLAB_SSH_KEY" | tr -d "\r" | ssh-add -'
|
|
|
|
- 'echo "$GITLAB_SSH_KEY" | tr -d "\r" | ssh-add -'
|
|
|
|
- mkdir -p ~/.ssh
|
|
|
|
- mkdir -p ~/.ssh
|
|
|
|
@ -382,7 +324,6 @@ run-patchday-prodwork01:
|
|
|
|
rules:
|
|
|
|
rules:
|
|
|
|
- if: $CI_PIPELINE_SOURCE == "schedule" && $CI_COMMIT_BRANCH == "prodnso"
|
|
|
|
- if: $CI_PIPELINE_SOURCE == "schedule" && $CI_COMMIT_BRANCH == "prodnso"
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
########
|
|
|
|
########
|
|
|
|
### http://patorjk.com/software/taag/#p=display&f=Doom&t=patchday.yml
|
|
|
|
### http://patorjk.com/software/taag/#p=display&f=Doom&t=patchday.yml
|
|
|
|
###
|
|
|
|
###
|
|
|
|
@ -451,18 +392,17 @@ run-hcloud-firewall-prodwork01:
|
|
|
|
only:
|
|
|
|
only:
|
|
|
|
- prodnso
|
|
|
|
- prodnso
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
########
|
|
|
|
########
|
|
|
|
### http://patorjk.com/software/taag/#p=display&f=Doom&t=Digitialocean
|
|
|
|
### http://patorjk.com/software/taag/#p=display&f=Doom&t=Digitialocean
|
|
|
|
###
|
|
|
|
###
|
|
|
|
### ______ _ _ _ _ _
|
|
|
|
### ______ _ _ _ _ _
|
|
|
|
### | _ (_) (_) | (_) | |
|
|
|
|
### | _ (_) (_) | (_) | |
|
|
|
|
### | | | |_ __ _ _| |_ _ __ _| | ___ ___ ___ __ _ _ __
|
|
|
|
### | | | |_ __ _ _| |_ _ __ _| | ___ ___ ___ __ _ _ __
|
|
|
|
### | | | | |/ _` | | __| |/ _` | |/ _ \ / __/ _ \/ _` | '_ \
|
|
|
|
### | | | | |/ _` | | __| |/ _` | |/ _ \ / __/ _ \/ _` | '_ \
|
|
|
|
### | |/ /| | (_| | | |_| | (_| | | (_) | (_| __/ (_| | | | |
|
|
|
|
### | |/ /| | (_| | | |_| | (_| | | (_) | (_| __/ (_| | | | |
|
|
|
|
### |___/ |_|\__, |_|\__|_|\__,_|_|\___/ \___\___|\__,_|_| |_|
|
|
|
|
### |___/ |_|\__, |_|\__|_|\__,_|_|\___/ \___\___|\__,_|_| |_|
|
|
|
|
### __/ |
|
|
|
|
### __/ |
|
|
|
|
### |___/
|
|
|
|
### |___/
|
|
|
|
|
|
|
|
|
|
|
|
run-setup-digitalocean:
|
|
|
|
run-setup-digitalocean:
|
|
|
|
extends: .run-ansible
|
|
|
|
extends: .run-ansible
|
|
|
|
@ -471,7 +411,7 @@ run-setup-digitalocean:
|
|
|
|
- export STAGE=dev
|
|
|
|
- export STAGE=dev
|
|
|
|
- echo "${ANSIBLE_VAULT_PASS_DEV}" > /tmp/vault-pass
|
|
|
|
- echo "${ANSIBLE_VAULT_PASS_DEV}" > /tmp/vault-pass
|
|
|
|
script:
|
|
|
|
script:
|
|
|
|
- 'command -v ssh-agent >/dev/null || ( apt-get update -y && apt-get install openssh-client -y )'
|
|
|
|
- "command -v ssh-agent >/dev/null || ( apt-get update -y && apt-get install openssh-client -y )"
|
|
|
|
- eval $(ssh-agent -s)
|
|
|
|
- eval $(ssh-agent -s)
|
|
|
|
- 'echo "$GITLAB_SSH_KEY" | tr -d "\r" | ssh-add -'
|
|
|
|
- 'echo "$GITLAB_SSH_KEY" | tr -d "\r" | ssh-add -'
|
|
|
|
- mkdir -p ~/.ssh
|
|
|
|
- mkdir -p ~/.ssh
|
|
|
|
@ -493,7 +433,7 @@ run-patchday-dev-digitalocean:
|
|
|
|
before_script:
|
|
|
|
before_script:
|
|
|
|
- echo "${ANSIBLE_VAULT_PASS_DEV}" > /tmp/vault-pass
|
|
|
|
- echo "${ANSIBLE_VAULT_PASS_DEV}" > /tmp/vault-pass
|
|
|
|
script:
|
|
|
|
script:
|
|
|
|
- 'command -v ssh-agent >/dev/null || ( apt-get update -y && apt-get install openssh-client -y )'
|
|
|
|
- "command -v ssh-agent >/dev/null || ( apt-get update -y && apt-get install openssh-client -y )"
|
|
|
|
- eval $(ssh-agent -s)
|
|
|
|
- eval $(ssh-agent -s)
|
|
|
|
- 'echo "$GITLAB_SSH_KEY" | tr -d "\r" | ssh-add -'
|
|
|
|
- 'echo "$GITLAB_SSH_KEY" | tr -d "\r" | ssh-add -'
|
|
|
|
- mkdir -p ~/.ssh
|
|
|
|
- mkdir -p ~/.ssh
|
|
|
|
|