feat: add ansible-runner and add workaround for pip dependencies for ansible-playbook

This commit is contained in:
Michael Sasser 2025-02-18 12:09:48 +01:00
parent 3cec104a35
commit f20d6760c4
Signed by: michael
GPG key ID: 5F653AC7631F5151

View file

@ -22,6 +22,11 @@ inputs:
default: "false"
required: false
use_ansible_runner:
description: Use ansible-runner instead of ansible-playbook
default: "false"
required: false
#
# Secrets
#
@ -122,12 +127,26 @@ runs:
- name: Run Ansible Playbook
shell: bash
run: |
EE-REQUIREMENTS_PIP='/workspace/${{ gitea.repository }}/plays/roles/michaelsasser.${{ steps.get-role-info.outputs.role_name }}/meta/ee-requirements.txt'
# Only install dependencies if there are some
if [ '${{ steps.get-role-has-dependencies.outputs.role_has_dependencies }}' = 'true' ]; then
ansible-galaxy install -r "/workspace/${{ gitea.repository }}/plays/roles/michaelsasser.${{ steps.get-role-info.outputs.role_name }}/meta/requirements.yml"
ansible-galaxy install -r '/workspace/${{ gitea.repository }}/plays/roles/michaelsasser.${{ steps.get-role-info.outputs.role_name }}/meta/requirements.yml'
fi
ansible-playbook --private-key /home/runner/.ssh/id_ed25519 -i "/workspace/${{ gitea.repository }}/inventory/hosts.yml" "/workspace/${{ gitea.repository }}/plays/${{ steps.get-role-info.outputs.role_name }}.yml"
if [ '${{ inputs.use_ansible_runner }}' = 'true' ]; then
ansible-runner --version
ansible-runner run --playbook '/workspace/${{ gitea.repository }}/plays/${{ steps.get-role-info.outputs.role_name }}.yml' --inventory '/workspace/${{ gitea.repository }}/inventory/hosts.yml' --cmdline '--private-key /home/runner/.ssh/id_ed25519' '/workspace/${{ gitea.repository }}'
else
# Install pip dependencies
if [ -f "${EE-REQUIREMENTS_PIP}" ]; then
pip install --no-cache-dir --break-system-packages -r "${EE-REQUIREMENTS_PIP}"
fi
ansible-playbook --version
ansible-playbook --private-key '/home/runner/.ssh/id_ed25519' -i '/workspace/${{ gitea.repository }}/inventory/hosts.yml' '/workspace/${{ gitea.repository }}/plays/${{ steps.get-role-info.outputs.role_name }}.yml'
fi
env:
VAULT_SECRET: ${{ inputs.ANSIBLE_VAULT_PASSWORD }}
ANSIBLE_CONFIG: ${{ steps.get-role-info.outputs.config_file }}