You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
118 lines
3.6 KiB
YAML
118 lines
3.6 KiB
YAML
---
|
|
|
|
- name: 'apply setup to {{ host | default("all") }}'
|
|
hosts: '{{ host | default("all") }}'
|
|
serial: "{{ serial_number | default(5) }}"
|
|
vars:
|
|
hetzner_ansible_dns_current_version: "{{ lookup('file', 'galaxy-requirements.yml') | regex_search('- name:\\s+hetzner-ansible-dns\\s+src:\\s+.*?\\s+scm:\\s+git\\s+version:\\s+(.*)', '\\1') }}"
|
|
hetzner_ansible_hcloud_current_version: "{{ lookup('file', 'galaxy-requirements.yml') | regex_search('- name:\\s+hetzner-ansible-hcloud\\s+src:\\s+.*?\\s+scm:\\s+git\\s+version:\\s+(.*)', '\\1') }}"
|
|
gather_facts: no
|
|
become: no
|
|
|
|
pre_tasks:
|
|
- name: "Check if ansible version is at least {{ ansible_minimal_version }}"
|
|
assert:
|
|
that:
|
|
- ansible_version.string is version(ansible_minimal_version, ">=")
|
|
msg: "The ansible version has to be at least {{ ansible_minimal_version }}"
|
|
tags:
|
|
- always
|
|
|
|
- name: "get hetzner-ansible-dns version"
|
|
include_role:
|
|
name: hetzner-ansible-dns
|
|
tasks_from: _get_version.yml
|
|
tags:
|
|
- always
|
|
|
|
- name: "Check if hetzner-ansible-dns version matches"
|
|
assert:
|
|
that:
|
|
- "'{{ hetzner_ansible_dns_version }}' in {{ hetzner_ansible_dns_current_version }}"
|
|
msg: "The current hetzner-ansible-dns version has to be {{ hetzner_ansible_dns_current_version }}"
|
|
tags:
|
|
- always
|
|
|
|
- name: "get hetzner-ansible-hcloud version"
|
|
include_role:
|
|
name: hetzner-ansible-hcloud
|
|
tasks_from: _get_version.yml
|
|
tags:
|
|
- always
|
|
|
|
- name: "Check if hetzner-ansible-hcloud version matches"
|
|
assert:
|
|
that:
|
|
- "'{{ hetzner_ansible_hcloud_version }}' in {{ hetzner_ansible_hcloud_current_version }}"
|
|
msg: "The current hetzner-ansible-dns version has to be {{ hetzner_ansible_hcloud_current_version }}"
|
|
tags:
|
|
- always
|
|
|
|
- name: "Getting all firewalls from hetzner"
|
|
uri:
|
|
url: "https://api.hetzner.cloud/v1/firewalls"
|
|
headers:
|
|
accept: application/json
|
|
authorization: Bearer {{ hetzner_authentication_ansible }}
|
|
return_content: yes
|
|
register: hetzner_firewalls_response
|
|
delegate_to: 127.0.0.1
|
|
tags:
|
|
- update_networks
|
|
|
|
- name: "Saving firewall entries as fact: hetzner_firewalls_response_json"
|
|
set_fact:
|
|
hetzner_firewalls_response_json: "{{ hetzner_firewalls_response.json }}"
|
|
tags:
|
|
- update_networks
|
|
|
|
- name: Parse firewall entries
|
|
set_fact:
|
|
firewall_records: "{{ hetzner_firewalls_response_json.firewalls | json_query(jmesquery) }}"
|
|
vars:
|
|
jmesquery: '[*].{id: id, name: name}'
|
|
tags:
|
|
- update_networks
|
|
|
|
- name: "Printing firewall entries"
|
|
debug:
|
|
msg: "{{ firewall_records }}"
|
|
delegate_to: 127.0.0.1
|
|
when:
|
|
- debug
|
|
tags:
|
|
- update_networks
|
|
|
|
roles:
|
|
- role: hetzner-ansible-hcloud
|
|
when:
|
|
- "'hcloud' in group_names"
|
|
|
|
- role: hetzner-ansible-dns
|
|
vars:
|
|
record_data: "{{ stage_server_ip }}"
|
|
record_name: "{{ inventory_hostname }}"
|
|
when:
|
|
- "'hcloud' in group_names"
|
|
tags:
|
|
- update_dns
|
|
|
|
- role: hetzner_state
|
|
vars:
|
|
hetzner_state: 'started'
|
|
when:
|
|
- "'hcloud' in group_names"
|
|
|
|
tasks:
|
|
- name: "Create server in DO-cloud via include_tasks"
|
|
include_role:
|
|
name: digitalocean
|
|
tasks_from: _create_server
|
|
vars:
|
|
droplet:
|
|
name: dev-blackbox-01
|
|
tags:
|
|
- service_blackbox
|
|
- stage_dev
|
|
when: "'digitalocean' in group_names"
|