hetzner-ansible/dynamic-provisioning.yml

---

- hosts: localhost
  connection: local
  gather_facts: false
  vars:
    hostname: "{{ stage }}-{{ name }}-{{ node }}"

  pre_tasks:
    - name: "Check if ansible version is at least 2.10.x"
      assert:
        that:
          - ansible_version.major >= 2
          - ansible_version.minor >= 10
        msg: "The ansible version has to be at least ({{ ansible_version.full }})"

  tasks:
    - name: Create new server {{ hostname }}
      hetzner.hcloud.hcloud_server:
        api_token: "{{ hetzner_authentication_token }}"
        name: "{{ hostname }}"
        server_type: "{{ hetzner_server_type }}"
        image: "{{ hetzner_server_image }}"
        ssh_keys: "{{ hetzner_ssh_keys }}"
        labels: "{{ hetzner_server_labels }}"
        location: nbg1
        state: present
      register: new_server

    - name: Print the gathered infos
      debug:
        var: new_server

    - name: Add host {{ hostname }}
      add_host:
        name: "{{ new_server.hcloud_server.name }}"
        groups:
        - "{{ service }}"
        - "stage_{{ stage }}"
        - "dynamic_{{ service }}"

- hosts: "stage_{{ stage }}"
  remote_user: root
#  gather_facts: false
  vars:
    hostname: "{{ stage }}-{{ name }}-{{ node }}"

  pre_tasks:
    - name: Get all Firewalls from Hetzner
      uri:
        url: "https://api.hetzner.cloud/v1/firewalls"
        headers:
          accept: application/json
          authorization: Bearer {{ hetzner_authentication_token }}
        return_content: yes
      register: hetzner_firewalls_response
      delegate_to: 127.0.0.1
      run_once: true
      tags:
        - update_networks

    - name: Save firewall entries as variable (fact)
      set_fact: 
        hetzner_firewalls_response_json: "{{ hetzner_firewalls_response.json }}"
      run_once: true
      tags:
        - update_networks

    - name: Parse firewall entries
      set_fact:  
        firewall_records: "{{ hetzner_firewalls_response_json.firewalls | json_query(jmesquery) }}"
      vars:
        jmesquery: '[*].{id: id, name: name}'
      run_once: true
      tags:
        - update_networks
    
    - name: Print firewall entries
      debug:
        msg: "{{ firewall_records }}"
      run_once: true
      tags:
        - update_networks

  tasks:
    - name: "Setup for {{ service_name }}"
      include_role:
        name: hcloud
      vars:
        record_data: "{{ stage_server_ip }}"
        record_name: "{{ service_name }}"

- hosts: "stage_{{ stage }}"
  remote_user: root
#  gather_facts: false
  vars:
    hostname: "{{ stage }}-{{ name }}-{{ node }}"

  pre_tasks:
    - name: Remove outdated dependencies
      apt:
        name: [
          'docker',
          'docker-client',
          'docker-client-latest',
          'docker-common',
          'docker-latest',
          'docker-latest-logrotate',
          'docker-logrotate',
          'docker-engine',
          'smartmontools',
        ]
        state: 'absent'
      when: ansible_distribution == "Ubuntu"

    - name: "Gather current server infos"
      hcloud_server_info:
        api_token: "{{ hetzner_authentication_token }}"
      register: hetzner_server_infos
      delegate_to: 127.0.0.1
      become: false

    - name: "Set current server infos as fact: hetzner_server_infos_json"
      set_fact: 
        hetzner_server_infos_json: "{{ hetzner_server_infos.hcloud_server_info }}"
      delegate_to: 127.0.0.1
      become: false

    - name: "Read ip address for {{ inventory_hostname }}"
      set_fact:
        stage_server_ip: "{{ item.ipv4_address }}"
      when: item.name == inventory_hostname
      with_items: "{{ hetzner_server_infos_json }}"
      delegate_to: 127.0.0.1
      become: false

    - name: Print the gathered infos
      debug:
        var: stage_server_ip
      delegate_to: 127.0.0.1

  roles:
    - role: ansible-role-docker
      vars:
        docker_compose_version: '1.29.1'
        docker_compose_path: '/usr/bin/docker-compose'
        docker_users: '{{ smardigo_plattform_users }}'

    - role: common

    - role: filebeat
      when: filebeat_enabled | default(True)

    - role: node-exporter
      when: node_exporter_enabled | default(True)

    - role: traefik
      when: traefik_enabled | default(True)

- hosts: "stage_{{ stage }}"
  remote_user: root
#  gather_facts: false
  vars:
    hostname: "{{ stage }}-{{ name }}-{{ node }}"

  pre_tasks:
    - name: "Gather current server infos"
      hcloud_server_info:
        api_token: "{{ hetzner_authentication_token }}"
      register: hetzner_server_infos
      delegate_to: 127.0.0.1
      become: false
      tags:
        - update_networks

    - name: "Set current server infos as fact: hetzner_server_infos_json"
      set_fact: 
        hetzner_server_infos_json: "{{ hetzner_server_infos.hcloud_server_info }}"
      delegate_to: 127.0.0.1
      become: false
      tags:
        - update_networks

    - name: "Read ip address for {{ inventory_hostname }}"
      set_fact:
        stage_server_ip: "{{ item.ipv4_address }}"
      when: item.name == inventory_hostname
      with_items: "{{ hetzner_server_infos_json }}"
      delegate_to: 127.0.0.1
      become: false
      tags:
        - update_networks

    - name: Print the gathered infos
      debug:
        var: stage_server_ip
      delegate_to: 127.0.0.1
      become: false
      tags:
        - update_networks

  roles:
    - role: connect
      when: "'connect' in group_names"
    - role: keycloak
      when: "'keycloak' in group_names"
    - role: postfix
      when: "'postfix' in group_names"
    - role: harbor
      when: "'harbor' in group_names"
    - role: elastic
      when: "'elastic' in group_names"
    - role: prometheus
      when: "'prometheus' in group_names"