This commit is contained in:
2025-03-17 22:33:37 +03:00
parent 0f88163d16
commit c17b14f313
3 changed files with 63 additions and 11 deletions

View File

@@ -12,23 +12,17 @@ variables:
DOCKER_TLS_CERTDIR: ""
before_script:
- rm -rf /ansible
- echo "$CI_REGISTRY_PASSWORD" | docker login hub.cism-ms.ru -u "$CI_REGISTRY_USER" --password-stdin
- docker pull $DOCKER_IMAGE
- echo "Fixing directory permissions..."
- chmod o-w $CI_PROJECT_DIR
#- mkdir -p /ansible
#- cp -rs "$CI_PROJECT_DIR"/* /ansible/
#- find "$CI_PROJECT_DIR" -mindepth 1 -exec ln -s {} /ansible \;
#- ln -s "$CI_PROJECT_DIR/vault-password.txt" /ansible/vault_password.txt
lint:
stage: lint
script:
- echo "Сначала покажем содержимое каталога /ansible"
- ls -l /ansible
- echo "Начинаем стейдж Lint"
- echo "Распаковываем секреты..."
- ansible-vault decrypt --vault-password-file ./vault-password.txt vars/secrets.yml
- ansible-vault decrypt vars/secrets.yml --vault-password-file ./vault-password.txt
- echo "Запускаем ansible-lint..."
- ansible-lint roles/*
- echo "Упаковываем секреты..."
@@ -52,7 +46,7 @@ deploy:
- echo "Распаковываем секреты..."
- ansible-vault decrypt --vault-password-file ./vault-password.txt vars/secrets.yml
- echo "Все ок. Деплоим в прод..."
- ansible-playbook /ansible/roles/deploy.yaml
- ansible-playbook roles/deploy.yaml
- echo "Упаковываем секреты..."
- ansible-vault encrypt vars/secrets.yml --encrypt-vault-id default --vault-password-file ./vault-password.txt
only:
@@ -60,4 +54,4 @@ deploy:
after_script:
- echo "Removing symlink..."
- rm -rf /ansible
#- rm -rf /ansible