DEV-497: created new branch due to git-problems - dunno what exactly

4 years ago · c744eaa837
parent b68995fe5c
commit c744eaa837
11 changed files with 915 additions and 1 deletions
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@ -121,6 +121,15 @@ run-setup-dev:
  only:
    - main

+run-setup-devscr:
+  extends: .run-setup
+  resource_group: devscr
+  before_script:
+    - export STAGE=devscr
+    - echo "${ANSIBLE_VAULT_PASS_DEV}" > /tmp/vault-pass
+  only:
+    - main
+
 run-setup-qa:
  extends: .run-setup
  resource_group: qa
--- a/group_vars/stage_devscr/argocd.yml
+++ b/group_vars/stage_devscr/argocd.yml
@ -0,0 +1,132 @@
+---
+k8s_argocd_helm__name: "argo-cd"
+k8s_argocd_helm__release_namespace: "argo-cd"
+
+k8s_argocd_with_keycloak: False
+
+k8s_argocd_helm__domain: &argourl "{{ stage }}-kube-argocd.{{ domain }}"
+
+# https://github.com/argoproj/argo-helm/tree/master/charts/argo-cd
+k8s_argocd_helm__release_values:
+  controller:
+    logLevel: info
+    logFormat: json
+    metrics:
+      enabled: true
+      serviceMonitor:
+        enabled: true
+        namespace: "{{ k8s_argocd_helm__release_namespace }}"
+        additionalLabels:
+          release: "{{ k8s_prometheus_helm__name }}"
+  repoServer:
+    logLevel: info
+    logFormat: json
+    metrics:
+      enabled: true
+      serviceMonitor:
+        enabled: true
+        namespace: "{{ k8s_argocd_helm__release_namespace }}"
+        additionalLabels:
+          release: "{{ k8s_prometheus_helm__name }}"
+    env:
+      - name: ARGOCD_MAX_CONCURRENT_LOGIN_REQUESTS_COUNT
+        value: "0"
+      - name: ARGOCD_EXEC_TIMEOUT
+        value: "300s"
+      - name: XDG_CONFIG_HOME
+        value: /.config
+      - name: GNUPGHOME
+        value: /home/argocd/.gnupg
+    volumes:
+      - name: custom-tools
+        emptyDir: {}
+      - name: gnupg-home
+        emptyDir: {}
+      - name: sops-gpg
+        secret:
+          secretName: sops-gpg
+    volumeMounts:
+      - mountPath: /home/argocd/.gnupg
+        name: gnupg-home
+        subPath: .gnupg
+      - mountPath: /usr/local/bin/kustomize
+        name: custom-tools
+        subPath: kustomize
+        # Verify this matches a XDG_CONFIG_HOME=/.config env variable
+      - mountPath: /.config/kustomize/plugin/viaduct.ai/v1/ksops/ksops
+        name: custom-tools
+        subPath: ksops
+    initContainers:
+      - name: 1-install-ksops
+        image: viaductoss/ksops:v3.0.1
+        command: ["/bin/sh", "-c"]
+        args:
+          - echo "Installing KSOPS...";
+            mv ksops /custom-tools/;
+            mv $GOPATH/bin/kustomize /custom-tools/;
+            echo "Done.";
+        volumeMounts:
+          - mountPath: /custom-tools
+            name: custom-tools
+      - name: 2-import-gpg-key
+        image: argoproj/argocd:v2.2.5
+        command: ["gpg", "--import","/sops-gpg/gpg_key_smardigo_automation__private"]
+        env:
+          - name: GNUPGHOME
+            value: /gnupg-home/.gnupg
+        volumeMounts:
+          - mountPath: /sops-gpg
+            name: sops-gpg
+          - mountPath: /gnupg-home
+            name: gnupg-home
+  server:
+    logLevel: info
+    logFormat: json
+    config:
+      url: 'https://{{ k8s_argocd_helm__domain }}'
+      kustomize.buildOptions: "--enable-alpha-plugins"
+    rbacConfig:
+      policy.default: role:readonly
+      policy.csv: |
+        g, {{ argo_realm_group }}, role:admin
+        g, admin, role:admin
+    metrics:
+      enabled: true
+      serviceMonitor:
+        enabled: true
+        namespace: "{{ k8s_argocd_helm__release_namespace }}"
+        additionalLabels:
+          release: "{{ k8s_prometheus_helm__name }}"
+    service:
+      sessionAffinity: ClientIP
+    ingress:
+      enabled: true
+      annotations:
+        cert-manager.io/cluster-issuer: letsencrypt-prod
+        cert-manager.io/issue-temporary-certificate: "true"
+        kubernetes.io/ingress.class: nginx
+        nginx.ingress.kubernetes.io/whitelist-source-range: "{{ ( ip_whitelist + ip_whitelist_admins ) | join(',') }}"
+        nginx.ingress.kubernetes.io/force-ssl-redirect: "false"
+        nginx.ingress.kubernetes.io/ssl-passthrough: "true"
+        nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+      hosts:
+        - "{{ k8s_argocd_helm__domain }}"
+      tls:
+        - secretName: "{{ stage }}-kube-argocd-cert"
+          hosts:
+            - "{{ k8s_argocd_helm__domain }}"
+  redis:
+    metrics:
+      enabled: true
+      serviceMonitor:
+        enabled: true
+        namespace: "{{ k8s_argocd_helm__release_namespace }}"
+        additionalLabels:
+          release: "{{ k8s_prometheus_helm__name }}"
+  dex:
+    enabled: false
+  applicationSet:
+    enabled: false
+  configs:
+    secret:
+      argocdServerAdminPassword: '{{ argocd_server_admin_password | password_hash("bcrypt") }}'
--- a/group_vars/stage_devscr/hcloud_firewall.yml
+++ b/group_vars/stage_devscr/hcloud_firewall.yml
@ -0,0 +1,53 @@
+---
+hcloud_firewall_objects:
+   -
+     name: "{{ stage }}-default"
+     state: present
+     rules:
+     -
+        direction: in
+        protocol: icmp
+        port: ''
+        source_ips: '{{ ip_whitelist }}'
+        destination_ips: []
+        description: ICMP allowed
+     -
+        direction: in
+        protocol: tcp
+        port: '22'
+        source_ips: '{{ ip_whitelist }}'
+        destination_ips: []
+        description: SSH allowed
+     -
+        direction: in
+        protocol: tcp
+        port: '80'
+        source_ips: '{{ ip_whitelist }}'
+        destination_ips: []
+        description: HTTP allowed
+     -
+        direction: in
+        protocol: tcp
+        port: '443'
+        source_ips: '{{ ip_whitelist }}'
+        destination_ips: []
+        description: HTTPS allowed
+     -
+        direction: in
+        protocol: tcp
+        port: 'any'
+        source_ips: '{{ ip_whitelist_admins }}'
+        destination_ips: []
+        description: TCP - allow work from home without VPN
+     -
+        direction: in
+        protocol: udp
+        port: 'any'
+        source_ips: '{{ ip_whitelist_admins }}'
+        destination_ips: []
+        description: UDP - allow work from home without VPN
+     apply_to:
+     -
+       type: label_selector
+       label_selector:
+         selector: 'stage={{ stage }}'
--- a/group_vars/stage_devscr/kubespray.yml
+++ b/group_vars/stage_devscr/kubespray.yml
@ -0,0 +1,12 @@
+---
+helm_enabled: true
+external_cloud_provider: hcloud
+external_hcloud_cloud:
+  hcloud_api_token: '{{ hetzner_authentication_ccm_vault }}'
+  token_secret_name: hcloud
+  with_networks: true
+  service_account_name: cloud-controller-manager
+  controller_image_tag: "latest"
+  controller_extra_args: {}
+
+network_id: '{{ stage }}'
--- a/group_vars/stage_devscr/plain.yml
+++ b/group_vars/stage_devscr/plain.yml
@ -0,0 +1,116 @@
+---
+
+stage: "devscr"
+
+default_plattform_users:
+  - 'claus.paetow'
+  - 'friedrich.goerz'
+  - 'peter.heise'
+  - 'sven.ketelsen'
+  - 'michael.haehnel'
+  - 'philipp.eichhorn'
+  - '{{ awx_ansible_user_name }}'
+  - '{{ gitlab_ansible_user_name }}'
+  - 'daniel.risse' 
+  - 'esther.fuhrmann'
+
+# TODO read configuration with hetzner rest api
+shared_service_network: "10.1.0.0/16"
+shared_service_kube_cpl_01: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-kube-cpl-01' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_kube_cpl_02: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-kube-cpl-02' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_kube_cpl_03: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-kube-cpl-03' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_kube_node_01: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-kube-node-01' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_kube_node_02: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-kube-node-02' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_kube_node_03: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-kube-node-03' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+
+shared_service_kube_ip: "{{ stage_private_ingress_loadbalancer_ip | default('-') }}"
+
+kube_cpl_01_hostname: "{{ stage }}-kube-cpl-01.{{ domain }}"
+kube_cpl_02_hostname: "{{ stage }}-kube-cpl-02.{{ domain }}"
+kube_cpl_03_hostname: "{{ stage }}-kube-cpl-03.{{ domain }}"
+kube_node_01_hostname: "{{ stage }}-kube-node-01.{{ domain }}"
+kube_node_02_hostname: "{{ stage }}-kube-node-02.{{ domain }}"
+kube_node_03_hostname: "{{ stage }}-kube-node-03.{{ domain }}"
+
+shared_service_kube_argocd_hostname: "{{ stage }}-kube-argocd.{{ domain }}"
+shared_service_kube_prometheus_hostname: "{{ stage }}-kube-prometheus.{{ domain }}"
+
+shared_service_hosts: [
+  {
+    ip: "127.0.1.1",
+    name: "{{ inventory_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_kube_cpl_01 }}",
+    name: "{{ kube_cpl_01_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_kube_cpl_02 }}",
+    name: "{{ kube_cpl_02_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_kube_cpl_03 }}",
+    name: "{{ kube_cpl_03_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_kube_node_01 }}",
+    name: "{{ kube_node_01_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_kube_node_02 }}",
+    name: "{{ kube_node_02_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_kube_node_03 }}",
+    name: "{{ kube_node_03_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_kube_ip }}",
+    name: "{{ shared_service_kube_argocd_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_kube_ip }}",
+    name: "{{ shared_service_kube_prometheus_hostname }}"
+  },
+]
+
+netgo_msteams_hook_cd: "{{ netgo_msteams_hook_cd_vault }}"
+netgo_msteams_hook_alerting: "{{ netgo_msteams_hook_alerting_vault }}"
+
+# smardigo automation DEV gpg key
+# https://git.dev-at.de/smardigo-hetzner/communication-keys/
+# push mirror: https://{{ stage }}-gitea-01.smardigo.digital/communication-keys.git
+gpg_key_smardigo_automation__private: '{{ gpg_key_smardigo_automation__private__vault }}'
+
+kubernetes_with_ccm: False # already done by kubespray
+kubernetes_with_awx: false
--- a/group_vars/stage_devscr/prometheus.yml
+++ b/group_vars/stage_devscr/prometheus.yml
@ -0,0 +1,85 @@
+---
+
+k8s_prometheus_helm__name: "prometheus"
+k8s_prometheus_helm__release_namespace: "monitoring"
+
+grafana_admin_username: "grafana-admin"
+grafana_admin_password: "grafana-admin"
+
+# https://github.com/grafana/helm-charts
+# https://github.com/prometheus-community/helm-charts
+k8s_prometheus_helm__release_values:
+  prometheus:
+    ingress:
+      enabled: true
+      annotations:
+        cert-manager.io/cluster-issuer: letsencrypt-prod
+        cert-manager.io/issue-temporary-certificate: "true"
+        kubernetes.io/ingress.class: nginx
+        nginx.ingress.kubernetes.io/ssl-redirect: "false"
+        nginx.ingress.kubernetes.io/whitelist-source-range: "{{ ( ip_whitelist + ip_whitelist_admins ) | join(',') }}"
+      hosts:
+        - "{{ stage }}-kube-prometheus.{{ domain }}"
+      tls:
+        - secretName: "{{ stage }}-kube-prometheus-cert"
+          hosts:
+            - "{{ stage }}-kube-prometheus.{{ domain }}"
+    prometheusSpec:
+      # TODO Using PersistentVolumeClaim
+      storageSpec: {}
+      volumeClaimTemplate:
+        spec:
+          storageClassName: hcloud-volumes
+          accessModes: ["ReadWriteOnce"]
+          resources:
+            requests:
+              storage: 10Gi
+        selector: {}
+    deploymentStrategy:
+      type: Recreate
+  alertmanager:
+    ingress:
+      enabled: true
+      annotations:
+        cert-manager.io/cluster-issuer: letsencrypt-prod
+        cert-manager.io/issue-temporary-certificate: "true"
+        kubernetes.io/ingress.class: nginx
+        nginx.ingress.kubernetes.io/ssl-redirect: "false"
+        nginx.ingress.kubernetes.io/whitelist-source-range: "{{ ( ip_whitelist + ip_whitelist_admins ) | join(',') }}"
+      hosts:
+        - "{{ stage }}-kube-alertmanager.{{ domain }}"
+      tls:
+        - secretName: "{{ stage }}-kube-alertmanager-cert"
+          hosts:
+            - "{{ stage }}-kube-alertmanager.{{ domain }}"
+    deploymentStrategy:
+      type: Recreate
+  grafana:
+    adminUser: "{{ grafana_admin_username }}"
+    adminPassword: "{{ grafana_admin_password }}"
+    ingress:
+      enabled: true
+      annotations:
+        cert-manager.io/cluster-issuer: letsencrypt-prod
+        cert-manager.io/issue-temporary-certificate: "true"
+        kubernetes.io/ingress.class: nginx
+        nginx.ingress.kubernetes.io/ssl-redirect: "false"
+        nginx.ingress.kubernetes.io/whitelist-source-range: "{{ ( ip_whitelist + ip_whitelist_admins ) | join(',') }}"
+      hosts:
+        - "{{ stage }}-kube-grafana.{{ domain }}"
+      tls:
+        - secretName: "{{ stage }}-kube-grafana-cert"
+          hosts:
+            - "{{ stage }}-kube-grafana.{{ domain }}"
+    persistence:
+      enabled: true
+      size: 10Gi
+    deploymentStrategy:
+      type: Recreate
+  kubeControllerManager:
+    service:
+      port: 10257
+      targetPort: 10257
+    serviceMonitor:
+      https: true
+      insecureSkipVerify: true
--- a/group_vars/stage_devscr/vault.yml
+++ b/group_vars/stage_devscr/vault.yml
@ -0,0 +1,450 @@
+$ANSIBLE_VAULT;1.1;AES256
+31363137376565366461333236396131313161326331643835386331653139373761643262363538
+3233636566366463346134616561373935356436373933380a623039363034353733326261343561
+32613131303137353237623833313139366231363334373835643230653932386635333733363732
+6533643339353265300a316330653136373838393863306135303236396238663239396539343864
+61646665383930666263633232363563333764656333326238303163666331323239646265376330
+38316536366539393839383135663233393031363839626365613764343232316634343139653064
+31663332313234363637313732396230343332373834663266373664316364333239363937663762
+65396666653832343731386263656339633565366538383635613636356633323639623830333861
+34303234323837613039643335386632396462633064343538343231383534643031623637313138
+64323331353865613132343732666634356337346632653536386436323238633537626535313434
+36323738373135623432643931333331356633303430633134323930346665633166333631333261
+35333638346532363065316533626138356265663630646534613436336234326437636437643464
+66356266396161343130653631623366356665343331383464643139346538396231383363633433
+66646662663930316261613165613538323839663431333432666530313030623662343530613033
+31313037653435383162653837626465326134663565363966313964643261336364353638393239
+61643166336334633834343233353137303731393737666436633538303066343533313733396466
+38346164393261656537353635393437386164363365356238333734386163336665666137613933
+36613564346330643232313332306461633837326530646663313333343132623538623635313836
+34343335643838623865373239653265623061353465396337313462616563363930373330373965
+32353938633335316361343835363438313132373337386665323633653339373861613336653034
+35633237633037353930316663306663393535326466336531653238623534363933323464353838
+38313239346366653663643461326536653433363563643761386462313634666136376436663165
+63336265616233363333396266613162653934363235333561623031323662333031623034313636
+33326362653364306162646462356538343965383632306534336636396437393639616162313732
+61363531616332643033393466343661306432666635303933326635633364353236623161666534
+66346637343233373234373932623661613738656365626134353833613964396534656634373364
+39323331646566363438366166386137336164353034336666343361333061323263633661616431
+63356665326337323937366535333164646564346334303261313535393334353334306262626636
+31393533386237333031653439393439623735656534303232323830616532356337636161633564
+39343739353438353139663138306434303362326433393163393964623762666132343462326438
+34643838626466656438653866376136666164386137303532623137373164386430363733306630
+36393130646366666465613461346132616332333266303535616532643138646564363036613631
+65366562393464356435633663663361373330306563376664393131393934646431666165626564
+64373239303432653236663236623434353138393833326337623030333136316434333163356433
+64646637616137313334363331613733643061666332633530616263376239646363373463633135
+32666166353731353132616335343937396465623030333730653162303332376137383136663564
+62643535663633303064616266653438376264376138323465316665356462316636353134626132
+32353034616238613137346538346134663433363430663663616233396138333633373962393466
+65313136393332656265353131323235333765626138323837333039323265613530343936663934
+31323039396532653764663265366132633463353432666433333665363536656530333165396365
+32383166646366653665316664343037363566376235306163616236633661323737666665363562
+37363963663365363930386466353730343862383633373766396231343732366436313030313365
+34663836633464633464326634363761316239646232393234343838393132323462396134306566
+33316130343732663437663864383066356164663962373763316632383133346137336566333738
+61633363663632333738626361373836633737353531326161623338393361626461373635356163
+30653934393036303339616434393363336635633232636464653139326365613761643666623233
+31376636316138326433656638333263663735633432633332393532376138363036323239363936
+34643966393232393335653332643537393561363532323031386332373132336638643133326162
+63383235626535356466326135356135303236663234393764313165306531646434333531356536
+65333136613865393163626239336365653437643037363339613165393639613733623461613138
+66383264316230353637376237633431373964363566646135373861396662383831393034323634
+38666530666562663632313266396231376261666635613963336332313535383733636631623930
+61623861653563653332396435303463336331666233306437316436386236323262336234376565
+39343732326463656538646636363563663830366230343362386534323665383534343739386536
+37323337373334616637656435616235346137623232363136643763336363356362323239346466
+32616536376231333131666132376666643463323765356366656439633865303731623336633935
+63616633346633306563303465613463333335343336613831303265383962343061366332303532
+32316334623063363937636533653031656266633330633130633937386462363064626238643362
+62333865623133313337346331633739303538626530636261346235376539336461653863353434
+32393264363063643762356164376133306130346530336330626665323834626562386433366364
+30373736383031343062626539366134306437643637646161386233313839373336316265623362
+36656162613466373032303038353039313237336262353634306132633862613635373934306132
+65633137373465356338306337333032333262343034393234343139343561363234653262353438
+34623438623130326632666635376664356366366332646537373236626633623738663833323931
+61356439396331343235303763633335613938333438376539393263616566636131363962656461
+61386637363337633231363737383732626234623039316239663865633833653162643430616663
+38653361323632396635633564343863306561653433633966666234623061336130353038386266
+34326137613436306539353632386232633537346636313336613565613262383466383231633861
+37663732396139643233366364643933613562666162636331373431376630386135326365316563
+32646536656437623763663165366131373161383532353162636633336261326633656263356132
+39346536323866633134633361336236626366373266626164333466376435626333366630643063
+31386666376530393966313066623939353531373862383830316333316236363161363062303335
+35356664343632613338333432383030353062626362626633333430666163623561653535343861
+37383330313038353062363833366532633463623563383731363765376530613732346539663738
+39373631376631626632383535633336316137326262336161656164303736396364623434336138
+37303236343362663633613338636565346235303631306265326537346362626161643666363838
+61313333356464316233323138393335306264616461653530336264316466613765613832383935
+65666663613134643435376133323435316438373835633361373865346538636339316265646265
+63386239353233393332633235636330636563356536313864383036623866313133333230646365
+66383333353061393633646464623130313135323364373366313532613864393136666663356530
+62306432373136353335623733323034323861363132366263366362363939616332616131326334
+38656234373531633163316133306366316437343130376462663336373138653963353763623936
+66336163653565633563336436373937356639623062306331653661316533363466656236363664
+36353861316431376431336635373739306163346530373538626265646338346234376437353537
+39313433393563303763626134636364393861376138313666643639333630376433303764393133
+64326133653061356130356166363966613532663436316230666664343861643163646233636464
+36666134376637393835663432306435333666653335336234636239646435383862383935323962
+35653961613430626339643461313236393235376565623066333331366138356138316534386466
+62303731363065613063623566353265366365376532353963336564643437643662643430623461
+65356661376438363665616134666138353262613764333537623330653631373931346538646461
+66656466613763306437393330393730643363636633343962643261353738336138313239353932
+65343432356434366263393036633639393765376461333739643266616237646466353833653230
+30393663336364383837383164623464323731343734663465633236636230636531633635346332
+38643562353839653532323862623533643565363136373630633236663638366439623835303731
+66663335633065353961333932636637333062346163343837316239386666616334366330376263
+38386630343637306532353339376563326263663562363263653161343565643565326562613630
+61623231656333336362313866366338373038396631663532353137353036313636376661643465
+65393832336634626561663931303636313838623263353331363239316464623238326631363937
+38306234353862663430653530373338633134366537643162633734363134653364363238333437
+30363631626133323261386637343565623666646166636262623933663233373864626661386234
+64363139306432333763323934333664623061306261336135333464616564323332666532666163
+33383731386233366363323665386537663232373531636236373031343139376337343261353065
+37376236313536303132613936383534343535623939363030373333333037396339653164636164
+30656236386165626137623465366539396235633530616138623262323462336435616334643730
+65326633336339663564383535336661333534383330313834383237333130326138343034636464
+34326139316265363161643238616337643964333464633363663864643364616534636665393436
+33393930393632623665633532313437376539343237323535373038323537323465346632633237
+38316136323830396332646630366434353533303363356230616538313665363666386462303564
+62663030643630613635393834323534633265663265393434636632383934336262363239643862
+63623030616331613361333235633364306338333563643431653964646265393162373434386630
+65383139353362383236666539646536316138393037313163623634323765656561306430303366
+61363530316636343039303135663230386333663631303062393130653732393961653430313534
+61316237333464656239303462363163663131306532386232393338613930633738323838653532
+62333963363835376632393065353962313066646132313838643665636635643465656532383737
+32626531333761323130643536316131393536373261346537376437643062303031373936623466
+34366537643236366534366663306130323630613332323463643937363764626361323734306134
+62386138333532636262646363336134646630653833636639323562646132653532643634376239
+34363331646534346265396561373837643033636632623239326637316333663235633134653965
+33663234653262396536316566396430643236313662363632633132613439343961633563643530
+39613839636163643530613936633137313764376530616335646434383730333632633865323761
+66666263353463396161366136633963666236656335613738363433666131316133386130363533
+61313237663133633363623232643563333437363637333466343462386166366165313264363835
+37313539306562616336663061626338333939653836363463333435623163326139623531653037
+61346533363262653365373562396365363134626632656232653432396365663233366139616633
+36616638313938333266383531396263306632636265313762663665356162303530643165363630
+39306139303961653761346163343734393964326639636563623561313234373032376562303530
+30323137623230616230623965643464663662323137623462383734353238636561343464663336
+31373562646263393738373564376263363361316365343835393136333564363061643765393561
+34653633313139613764633332323636666537303530386364353030303237353763613764373238
+38393863393963376261313465396231306465333631393531303830643462663063303139366635
+64346561643664646665373634353839633439393035393439376664663134313834373731356535
+33313533323661316563343163653831623263386233663032623761646230653861653338663234
+32633436396336633834323334383135313637393762303437313863353234656365383832386632
+39633534376139653637653963643961633066346331306632356539383332346430353862323537
+39336435366164653863313466353864333531306562663261656535636334306437393833313139
+34666436313265376461663161363066643031366134666465633236663733366237323533633165
+39323962636636666531326233353138613130646435316366613063666533623733313866303935
+61643632646235666135663165376134383035643061613465353964623730613963373366306261
+30363865313864303033343364356537313336306133333031616332333765323133306134646663
+36643332363834643231313862626231663966613832366331646266643538306433383033313561
+30663434623161366335363331366236393162316539396634386230393535396139666538376464
+30663932666466663063346530313066356537333465393465623161343735613833393662633531
+32363664646431623762323563336163643230333038326666626562393431326634383131653739
+66393262383839626434343332326333613536316562316431613533633563666439306237616330
+33393838353633303937336565623664383165356230313065313061623762316135306432333663
+39633661313036666239656464313563393862356631376362626163623039333365333233633364
+39323564653835616332396362623337623761653665336266346538373538323463366438323133
+34666138363932393864643463623034616435333765346337386433646137616165333163343965
+65646263663565313332353736396230373266316634346464656665336137353665656339633861
+31633039393636646539353337373163636362623936633730613662323465306538613630656236
+66326363316639323934333837316630323634613732643830613365373531323030393331383139
+61346133633263313536666666663938626234366262326239353963313166396430323432316565
+34356339376430346363393139633463633463616438393733343635666263363161636638343032
+64343536633333363462316132376366376134646437636661376562393934383439313837316537
+38343230303861636433313230643761383235396435376165656232326363336538376338656133
+34333638373535386638376135373736393137643230666361663432373937393437343133376630
+65656436373533376264346536383330663832613662313238306139376364313761376639616565
+30656338633430343766333731326439646337363434663531353035396262363563666131333162
+32643638363664346464333734373733313237336539363539313039633766346266336533366230
+37356137323164613166663230366431633665306539313839633937346461636566646233343830
+61366133393561393062393964626639623931616366663937353936306331356232643833333164
+64313762363938303563376531366363313836363030623737656362653934663030663133373231
+31623631343861316535633630376636643134613536393939663262326266303632666461613737
+62363930383833666261373934333135306166386132633462656664656265326532646130336430
+65363166306636613164396365373865326538656563363664666130633062353166626233626164
+32663435363132386566663833393937366631633334313063376132623765386634396662316332
+37323832373135653935343539313735373436336632376566666435353764383837323536613063
+63626332623634346161343261303466613238333935336331356466396637633338613433363166
+66643939396433313937353834343366353739393065343665336464623261666336643765613734
+38653234383135626663353939356235353432323132343736386435333632623633656663303737
+64313763396439353933613134313138343262616264663132626134646363353963363262336438
+63613062643464393737346236353439333237363563363438313031346137393739313338306538
+61626334383535323934306634353836386439616336323461333166336437626231316666303533
+31653666663633663661343131353831646434636231636538303939656234313338336339653638
+33626236643739303236383961623266613836346132313833353733613862353935393334333762
+66306261306536623066633635386332333963323136373538356332323438343738376366333232
+63623761643037633230363431373862383231343364363761616138303035323330633534643763
+63663532373730393230616466323133343337363732306537353338623131643466623266343565
+64313039613334363731303965346564326639366164363439366461646530633433306633666132
+61353732613932646265643131363564393733643931636261336436393236623833656235633232
+38356230373166343938616533376636663330643563366134643066316263336561383364353364
+37666562326539393736646332613336396362353039613066303031613931313565313563613432
+33623732313239663436616135363865613038623536626636396131663761323733646537323734
+33663763633566656130666465316239633764316236343364313939636539646332396566613063
+30633037313134663064353864333161323163323466663538366365313766633965373663313732
+38616166373635316130613838653563636238336364303836353066353365396539333832303636
+35306437643931333132383466336137336533613034666361646165326131313363636363663565
+63666133376633613438366539376464303534376330396139323662343438336262323837623866
+61646165353235356630616439356463623830643738633463636331343262303164376337333432
+65346663396666333837303061363461623037323461663566373737383739363763656632376632
+39626161386631653865303431656234303939356438663666663037333130303231313035373363
+65643030356437333336316366306464636236393030373134623265336665386439356165383263
+32623365646432343862356465656532623135326566353335353565323665643636633961363465
+39633635303933306563353862306632633733303334306131373934383232343833626239386636
+65623564643563376666333461333836616632336430306431666565353133666262323832376333
+32323636393665303762363433336234306263613965383936616362333139326664656630623664
+65373232336262633133316632303264613231313766333565333232656564616362613639343230
+33323839663234333936306432346431393539373138386661323365333761346432613533356339
+38646364383836653030666532643839383738326563323934653030653837613830323765373863
+34613333396365633131303033663333393764353463383631323965623030353431383665616533
+34346435343863396635333037396437656565646439316463316666393861383161343039363637
+63616362363665643130333265636234643537353764666236626133316434643933633438363662
+30623365306231356331306262386239353931336265356339346465313639653965616432363930
+34303361623564336437666234396232666338343162643539386130383038346538613765623731
+30373866653261346439333632353761636136366338656163343232373863393939326365353538
+66636466336561656663633236386533353534333064643365303832363835356231346231366239
+65653239613863306131613561623534316563643965623731396234373064303733613063396665
+38623061316435393038313835363636366336353462376561323062343139626633313965313531
+61383438383332346533376538646530396563333562623436376537303130316561333436353030
+62306137356135376337323839383061653335343165643432393237323663313030383637316666
+32663562663633323933623239356439366137303664346665303764303533336632316461363461
+34353766326331646135336661356131616631376164666336636137343133663838313936373738
+64343732383437623939376133646532393666356430633938393266313737363063383238353530
+37636237316431313333316336306333623534313635343663316435303036333635646163353138
+33626666346163656666653164633962653630323134393834323735623637303435386335396137
+65613431396361633835323961643666313439343362616463633065343131373737303631323134
+34636537613465653235316437626330663834356232373366633030326539313562613136393235
+30646532373233356364316537356162646239653334323262663038373532636430306663626434
+61653234653335346162303931326534643835396233633430613131346339333938346536646161
+33396666303533353934663833663666663234383035333861666130666166373366386636656238
+63326437323862343163303336633039643464316436666137313765653535306638376434366535
+37386363393133623735373437623664343863623062313732646337646361666534303736396238
+39636639343665373131346165303832616232623130386436376234386237626335346434656334
+64653961633732396232376165353066336537633766646362386238376230343565313265613333
+61313233313563303138313236336639643334346464386464383065623930323938396630353937
+34333133323764383463636433376561376637663931663934633332313164356130373535343334
+63396431656131376139653264663435373436636132643031656532373131303836373837363763
+34373732356565343764346638656662353062373039333233653431353938313934666138393337
+36363566366630343337653763626438386463626562303961656565323039643066396133636530
+39656565386632663831663939303663323130323935666662346334396161316139373439303561
+39396235656265336332356264366333326538303733323637616137313132323638386462666534
+36393263626436656362616461663737666466326431666430653634323161383933646235313139
+35303061363864653164316166643234653434353466623334363262646666643334333534303363
+62363636636333346563326566623230303666333333303238303264333963393738303430663031
+37313133616530643635613135613863633962303936396539333965343731323735646139313130
+37633133623264356233666463643766303466326639333430376136363630336536363532333965
+65306530363361346238303130343861623366333035353764376365323239363630383834366339
+64643264313066303539363364383038316264656532373434666161303765366538663361386335
+62383863343334373339623361316165366438396139663836393230336632356631343766353764
+31383434663631373862306235663232646261643337376238636261633836306232356362646536
+65373161643538383338353031663265303862313237313337656263633832653435653732393331
+64623732613139636330653738373632343631393165333339663362323837333535323761303031
+31343762633361393864663639613535623637313035623539303631326137323933633130333034
+32306238646139333439616338313934653966313738323461646361333733363730326133663862
+35383538303564653462653966376663343634356364653535323738646330356639353765363532
+33643034386565303633653464393439663739373462306363336336366361646532373632643631
+36363139383136623735316437656466363538363831323837653930333931393534356664393031
+34383139656661376337386231366236326465363030343132373362396330366430653638636664
+66653039333335636437396364613033616431303762323531363365373365313163393433643536
+63313634303064313965663238333365336565633562316632306433613365343331353162653837
+35623764373830396464376661633230326562616665663463356535343934336539396461623038
+64613965313338636363613138306635646337373161636538633935663361363030383332386534
+39653338653063656361363462393830653239346137383432643031323861656664633761623735
+30616135383366323062626461313866666339323333373838643262616333356139623132393061
+32303533333136613832653131353630393933623863326537656533616234373962616539363765
+36323738376231376365346163326663626437313862373432393833393661653062356166393533
+64363530386466623035396438333631333162333537663830313965396130626237313339356335
+33363265653962343439313632633734666166396462653561393634613132623663643935663730
+39373064303162366433313337373334373838653730366332393837333561393936653564643061
+65306263353430393130316430373538616462353765656462363439343731376361316161356433
+65623039316639343363316438306237376163623437646464323835306138313063316436343066
+61666235323636663438613331343265376665633738653136313731643262623039393264303136
+32373732613561396235353237323239356564623831616236613465656461383634336563376166
+36646164363139333331353031326364303064616663373062383139633332653738333232316532
+62316133306233393938326434313036356665303936366162616333303435373064666566643931
+65323134323031363436323530663563633135366439306663333730636334303935393363626132
+30326566663463383761313362356631616435303535666637313263653666353533653763636539
+38613832356465613337363737373263653138363634316435653037636433643132643463373538
+39356364626438383734343631336666376463306338666665616131323163633939666432313432
+34343863363566643462366536653837376436646239643463303361316331376564633130633161
+62323963343939333763366666313732633062336334326132303233373434616635626237633066
+30313966366366646534363231333564376661373134646531363861646437626338323233333165
+30306236353635663863396235636435313563383531356665313935373938653935643733353963
+36323834373839616336633433353739613564643336306234386162313432643763626132623631
+62343039393162373235646133373837393063363064363361326465363731383161343937373438
+34323935336432316663363535323037303366303432616635356133616161393263366363336263
+66393638633237386662653262373964633338363034343730396139663162623463393836633938
+37303031346165623931363639303563326233663237623833323665663665336261613435663562
+63623137613766346561633736363239373562393265313566366463646531336434316634643165
+30666539663861343962626332323262636564396635613139356432356133633533313730653564
+33303964616333336435313534343832313062346163323533356632613666333561353464363466
+37326433343430303762363363636637356333623665303633356432666366313139343939363736
+65356161623936363936663336373330336636306435333739316465346636613039353463353761
+36653735613734633439653136306132303564363761386135313465323533343132653261333562
+65623639346139386161666131356561633462386431366137366439313961346661643966663734
+39326664613964663933396664633237386233356634366366353862343336313662323461383163
+37646563613436636561666237653630313066616530303230343665363762356530363463623437
+65393138326335613264666166613261666135396638383934373933356565383135643233383538
+37333965636339656435373165323630323063383764363030633965333264356136393862613235
+31363238356463613739663965333830343534393230623232353036313936343932393731643162
+32343433303561666530303833343533356430626633666135306539383934313635613639323038
+63616361343461663139616331366332346632626666366432383466646637333465346366373334
+34623337326461303537343266363732666133306165623830343533653566623438666337383639
+63343635373566663937636238613061623261376432666332613437373036313439616538613361
+32363633333864346434323635656562633538623038616563393336313734343865653538356461
+36633332336664323933623938666538353336326262643431396161376338626364343365383864
+61393737373336316431306337636439633934613665393866613566623934353639343437313631
+32336238653130393539616431353031653630633564663964653436306163643861613630663462
+31383832313836336233646534636635383763633963356432653565313830653865636630303066
+37323835626533643162346132306138316430303331393561656133646165643962383738326661
+64383438623262316563646635363239643866653032386132616335346662353634616433346536
+32666638626331626564656337356564613965663762333064383239393431653664313366326536
+66633136336438363633633531636261383466373938386338343636656434313764613435303931
+65666437323430363436663466316336653163366432613933346633383764383237333436306230
+38356635666430313239343039633331313632616461333061303061666630633235353361646430
+36393565353231313462333237343161333335613539373632303831666366653533346432333562
+64333133396666383039626638636661666262663833346566356537356633386331343265333637
+30316333303137323932626565613036383966303066363036393534353231306466396535663539
+36393763373931386431366634643338343231656566306565343137366232303232383634353262
+64653334373664346131313164633232333566346134316231636363393362393035396237363733
+62656561663939346236336235313565333064323462663331373264633936396435623137636639
+32643035633737636265353866303661663838656634653563356439616634316366656561383137
+62663164613766316532343265656334353164336130643835646465313866636635373937346166
+66323939316434616139633830306463343033633330363038616437343339626462323839386365
+63323436666135323635343463343431383936346536393232333435653431383631313031396562
+34373332353833313231326462383833633565666632333235623238666363336337316433623632
+39346236373138373864383736653034663833366665393336323065323531326132313131326636
+34656131303732616138313465393635623939303162653230366631653061306161613037353731
+33303762623261616538373839326461333464613933636134626433363736326536323066373336
+32393039323130623862643265333563663532663361386363306336626335613538333462366661
+39376565633961666336633064613964623039653465343137333033383365633262633138656237
+66343236646133616334633539656130626364303265356333626236316362363763366665313833
+34653430343434623937303164653866353165616130343764646363303861363034386131383865
+65633535393639343363363237623034303561623233343436323363353866616531643835663831
+36623935616163643463616266653666313438376263626334323066646539376435633836663539
+32316630323038646636626331323633633763646137646233623461393838633633353833653633
+63653864646535653034333431396166333062393966373637623363326237333462376364356134
+36333239393439353161666130646263303837363137643864613935363863343030613662346366
+63376261396631613865356261336664613234643230393165323961663366383237396532393131
+36656662323666653734353162613537663732613161636462383064356461633033356233333261
+35633466336639653534313030636230626539656361613538343937353461303534616439636562
+30316566313239363564636136653335646261396164373031356636346635396539663236666463
+30633261663735353166356530393732356337633531376165363035376662353531333965333065
+38343064303861383933656431323334373161346533316130643066333832383164633663636563
+38623833393231656531653165646631613730363861663134636335636566613939633932643064
+33326133623065346663346133353661303030616162646366646632396632646537326236326563
+38386233306232666464633766643765306136376265386139613332326135366364323331393233
+32653033303362353930346536633266393161613065356531663537313934366334613638643733
+35623431646664306336663866643431313765393436393564663939383966356135336361393430
+32663732396239323435343061663633656639316335353464363338326462313532353232336438
+36333637666432613839393461393966373965623566653165623862333833326264663661643434
+32646136363630386165383464356134363061343561323331316637333966353630653837313563
+34656130306635383130613135323866383832383866633438636134636239373465646332373065
+32616239383032373663393534326438636635393636373037663566623139643763386531306164
+33616136303333656532333639643766326261353534373365376530646339333831653962333562
+64363265626634636464313563353237386638363030636665373766626261383236663063666532
+33616665313839313865393538343665323136643165323338393937653037646132323634313534
+34303836393462383365303334626338623262616438313831656666643061646634383065343834
+31343638663539663437383965363962613766663434303662323439616363346662663264643438
+37306564386638666563333632336566306633646434643564393637383465633034326562303934
+30643839393562656165653631663765653839376432636635333561623635646131656561313239
+33333963623162316234656361353534326234366531313938316534623963643234363837363966
+39346261666635633264356431366232333930633333303861613539653061393731663765376461
+63333337356561666638386638333837383932393064646464383462386263666337306533656633
+35373065363964666365343830303633623066333863646266353333313436633666323938656530
+37623936376261303864643030313033643936666539373534323437333138383864323437646433
+37343762326539656135303766373331623639623163363666653562353365663339613265616630
+37353361636364323163383433326266303139343039396633353735363061303535343136326164
+61373236353831313334303836353036346431336138393134623530396436376565653137363232
+66353935653539323564363531633735376163643130633130613266303566653436353938623035
+36623463336632613064383834616635663730623866326431316530343732326635626432376231
+65633830643539306235346433323865663961326365383931613638323338633030366664373633
+38303366623664343961613066623262326463303631386539393764653864623337633832336332
+65663161373261613166653761323566653663646233363266653263343033326462353230636537
+65326233666136313535653034393630643166303739613837313866396131383936626233623537
+33343862633461626663653532633437306634616561656336376161306164373834303435383364
+39356132396462353763303230323635303364333065633936373864313262306465303832613136
+34633463646633646533306365656232373530366632363861313032346661646339356536376635
+39643838353533336132323934306163366335613061363735313032383761623964396437373230
+38666562386533666339323231313530303138373763393336633231616234326662326630303866
+66356230316635306235633836333432666331323462386630323436333731643763396461353064
+34336537636261616537316139663166363665663635613338356431376465316138306338626562
+32643130326164393432363764356335343834386132376464383933366436643565643464316435
+63613466666663663164386231653963323166326433373763373333333333613666663638343862
+38316232623563633532323134653632343462376264356431643666376336656263646532373333
+34633435393738626335363237313762373935666564643636663861303135633733636165316336
+30353030623430376466646233303732333762326564663661663163343333383235353539646261
+38666462323463353634313931663264386335306439313764336133373431383831656365346637
+34373533623035363462376635623236323933386432323236383666643734323062303763363634
+61656333643631353636393733316532383833323131643066346330393564623133383033363163
+30666662356336643765356232353562343138306263643266383430613739643937633638363031
+38343737316265353334656163393863633534343663323665613765356434643033613939303037
+35653635363738333464623631333833336332333539663939313263343137643666306466303736
+65663933353431333530323234386334303531303437303064346461313335313831353065323437
+35306433623531623733333461656438396461666332393030336430653362663662326533306631
+31633838363362333262306462333263346430616630623634643064343430653336643235396165
+34616435616566366434666161323064353135393133313762643536306331313465613763393665
+62613136343464313637326264316164633636643831626366363735663565646166613661313962
+38336436633361396534366464663730643966383838643536376539353832353134353637363163
+34393832633064373933376366653964343231376130363662356166333238633464643531316132
+64393762333961333465316464336533663337646134333362323838313639346634623833623739
+63313039636161653334653432383433343837396366383035303764303464646562386566636366
+35636235346236356262636639626231393738383065366564643461623932313438373338623237
+32356232666561376330613431373434383763653665323265663030336138393132396461343365
+63376539653535303632373031666361376564643963313866343830323735333034333433663033
+66303163316431643566663065343431376561356137393936386534393431613262323431373938
+61333531306664616335363237373136356330396531653962373065373237373463383634616631
+35626332393936313939633931313930616162323437666334663732343463393532663831373565
+64316633333032626232353539643866663762666462363565616362633164613730333666323366
+33383866646266373061613566386132366630346331373233396261633064396137373038346363
+65373864653236353363663531643030303035613436646433326364333935666663303531306335
+63613562643662376534383765346366303034306263633237343532666661646338326534393866
+62613434663835636430396461373761303338303264643663303837326662643930343765393936
+61633131626365333337323032336633393435366366323238616434356233366233383235326163
+65363164316561343666316462633131633737336663373238343064326561363132373631373835
+66313061666333623335643662336262656532316138633932626464663063363434653836616433
+35396637393336633032356132373961333061656434363239623032393664353566636635386365
+34396537393765666231313135376138396330636462626333383530636237633466386331663662
+66353361393561396563373037376662366439366461386237663934653366353638376431336234
+38326263643732616638313761386138373031666131666465633565636639313663386163623964
+65346331316238613034343137616233366638353461313434353630636463643762326661316666
+34656237393466666430623336356531313638306663356638353034613964633362386361313565
+65343338653863303733336638393036626564653736663439396333306539316636633366616366
+33346661323136623763326365386539336536666530396638623737346232313633663262383564
+34613865356562343737346561316364343433323864393633343564343736323130303036646630
+38353465373935393730613136646534323831363461363966353036336337613365653766313963
+38386237343961383338646261363162626137623237383331353735303266646333646133373036
+30363562343331313763346435636138663839346338343134376631636264383035393064376265
+35386666326439636439323663633865303764663032306134383036303131653161373635326164
+64323539613131313531623630656566646630633730663464323937636339326566323634323561
+62326661373364653366363633366466396538643235303739623537363166326663623663306237
+61653932386362663266646164616331313465326133366363623732353663626631366230303566
+39613733356238643736333234633837646430643664393538623364333363363135636661343362
+38366334363665626538326630326530653239653261653239323731633666353038626630356432
+35333363383235643666326538323163393838353734363737303831383131613139313935303631
+31333637616230386562646662633334316534623933336564303262663430336439393533613263
+35333736343331306332373230326466646233656366383664326331393137396365356535636663
+34326131363235326130363731653236363762356462613262643231666633643566646133333432
+61656561396633616231323934633334333530336631336135663537626433313537656334653733
+66343362623865653936376531643865653338363836623532666132313336623563376135393435
+32616339353363653238303438303930613032343836343434383162343362356533343165333135
+33386130656230616166626232653835393031326530653338343030333063333633623332326638
+33663235636430353937666434366634333431346134313036653033373766383033366539373935
+38333661383534323333336239393031653738613764353866653236333834303732386438383065
+64366133666239666363653337343864363438396364653338343539663665386365383966323037
+38623432646166373430623862646135393865396562646532633064626138643735653061663861
+65646339353263363838366665366537633462303766373261303439656332373466373166663034
+65373731396236323063653562326639396236383832383830386339363032633461346466343437
+62343461343934656233326536346537356661303330666535373231313262383530353464303838
+36303866346433653265336334623139303136633437663231323664306434383830333862393363
+65343536626432653065396538663966333535643965666635613536326536396665313266333735
+66613031313931346661336436653730366530323736343066633431363038613163646439316235
+32366465393565353362613732313662646666346530326661356235383730666663363234633266
+36336135633936663033653163323735333031643635306139633464326366303030316634393131
+65313839353163346334383632323862633634643239653330396564373732613462336461363731
+62666130613630323139356136316461393064373265373966386566623764386132353062656466
+30303462393430303738663634363936623733373137373938646364396363376436333031626663
+37643531323739363365303738323339393134353966613764633434613532613337353134646631
+63633031383830656337323263653037373637306636313531623866353333383635
--- a/kubernetes.yml
+++ b/kubernetes.yml
@ -22,7 +22,8 @@
  roles:
    - { role: kubernetes/base }
    - { role: kubernetes/namespace }
-    - { role: kubernetes/cloud_controller_manager }
+    - role: kubernetes/cloud_controller_manager
+      when: kubernetes_with_ccm | default(True)
    - { role: kubernetes/container_storage_interface }
    - { role: kubernetes/prometheus }
    - { role: kubernetes/cert_manager }
@ -30,5 +31,7 @@
    - { role: kubernetes/ingress_controller }
    - role: kubernetes/argocd
      when: kubernetes_with_argocd | default(True)
+      tags:
+        - argocd
    - role: kubernetes/awx
      when: kubernetes_with_awx | default(True)
--- a/roles/kubernetes/argocd/defaults/main.yml
+++ b/roles/kubernetes/argocd/defaults/main.yml
@ -28,6 +28,7 @@ argo_realm_users: [
    "requiredActions": []
  }
 ]
+argocd_server_admin_password: "{{ argocd_server_admin_password_vault }}"

 # https://github.com/argoproj/argo-helm/tree/master/charts/argo-cd
 k8s_argocd_helm__release_values:
--- a/27
+++ b/27
@ -0,0 +1,27 @@
+[kube_control_plane]
+devscr-kube-cpl-01
+devscr-kube-cpl-02
+devscr-kube-cpl-03
+
+[etcd]
+devscr-kube-cpl-01
+devscr-kube-cpl-02
+devscr-kube-cpl-03
+
+[kube_node]
+devscr-kube-node-01
+devscr-kube-node-02
+devscr-kube-node-03
+
+[k8s_cluster:children]
+kube_control_plane
+kube_node
+
+[stage_devscr:children]
+k8s_cluster
+
+[all:children]
+stage_devscr
+
+[hcloud:children]
+stage_devscr
--- a/stage-devscr-netgo-hcloud.yml
+++ b/stage-devscr-netgo-hcloud.yml
@ -0,0 +1,26 @@
+#  dynamic inventory for hetzner which reads the stage variable from environment
+#
+#  parameters:
+#    HETZNER_CLOUD_TOKEN := hetzner cloud api token
+#    HETZNER_LABEL_SELECTOR := the label selector to use (note: multiple selectors are not supported by rest api)
+#      (e.g. stage=dev)
+#      (e.g. service=prometheus)
+#  usage:
+#    export HETZNER_LABEL_SELECTOR='stage=dev'
+#    ansible-playbook -i stage-netgo-hcloud.yml ...
+
+plugin: netgo-hcloud
+
+stage: "devscr"
+label_selector: "stage=devscr" # jinja isn't available here
+
+api_token: !vault |
+        $ANSIBLE_VAULT;1.1;AES256
+        31303065663564373265333132646634653566653234396232343765623232363964343231643663
+        3835363666633435373336656530323966653062336536320a653364393835313130383363633339
+        34303066646133336530313339386662363933636137363761616532653336396437643761346338
+        3036313364326534650a653333326539333462636430333838633965336538646132303262346365
+        65656237386630376262646637666237383864333436383063373834663438306231346262666662
+        64666665353434623139373563653131306437616636316236326537303532626266356530643966
+        31343633343639306138656262313330623165326531356239383739623065633930663234343265
+        33343035363263613035