thesabear
c05c7164c8
rocky-docker-lxc/, caddy-vm/, monitoring-vm/ (was missing entirely -
Grafana+Loki+Prometheus stack, refreshed and CA mount stripped same as
everything else), and automation/{ansible,automation-vm,iac}/ for the
three repos that live on the automation VM. Hawser is genuinely
deployed on all three of caddy-vm/monitoring-vm/automation-vm so it's
duplicated in each rather than picking one canonical home.
Old Ansible/ and "Infrastrucutre as Code/" content moved under
automation/ansible/old-playbooks and automation/iac/old-content as-is
for now - contents still need refreshing against the current repos and
a per-folder README, that's the next pass.
88 lines
2.6 KiB
YAML
88 lines
2.6 KiB
YAML
---
|
|
- name: Initialization stage
|
|
hosts: all
|
|
become: true
|
|
gather_facts: true
|
|
|
|
vars:
|
|
stage_name: initialization
|
|
inventory_init: "/path/to/Infrastrucutre as Code/ansible/inventory_initialization.yml"
|
|
inventory_active: "/path/to/Infrastrucutre as Code/ansible/inventory.yml"
|
|
|
|
vars_files:
|
|
- /path/to/Infrastrucutre as Code/ansible/roles_metadata.yml
|
|
- /path/to/Infrastrucutre as Code/ansible/group_vars/all/vault_token.yml
|
|
|
|
pre_tasks:
|
|
- name: Ensure active inventory exists
|
|
ansible.builtin.file:
|
|
path: "{{ inventory_active }}"
|
|
state: touch
|
|
delegate_to: localhost
|
|
run_once: true
|
|
|
|
- name: Load existing active inventory
|
|
ansible.builtin.slurp:
|
|
src: "{{ inventory_active }}"
|
|
register: active_inv_raw
|
|
delegate_to: localhost
|
|
run_once: true
|
|
|
|
- name: Parse active inventory YAML (or initialize empty)
|
|
ansible.builtin.set_fact:
|
|
active_inventory: >-
|
|
{{
|
|
(active_inv_raw.content | b64decode | from_yaml)
|
|
if (active_inv_raw.content | b64decode | from_yaml is mapping)
|
|
else {'all': {'hosts': {}}}
|
|
}}
|
|
run_once: true
|
|
|
|
tasks:
|
|
- name: Run initialization roles for uninitialized hosts
|
|
ansible.builtin.include_role:
|
|
name: "{{ item }}"
|
|
loop: >-
|
|
{{
|
|
vm_tags
|
|
| select('in',
|
|
roles_metadata
|
|
| dict2items
|
|
| selectattr('value.' ~ stage_name, 'defined')
|
|
| selectattr('value.' ~ stage_name)
|
|
| map(attribute='key')
|
|
| list
|
|
)
|
|
| list
|
|
}}
|
|
|
|
post_tasks:
|
|
- name: Append or update host in active inventory
|
|
ansible.builtin.set_fact:
|
|
active_inventory: >-
|
|
{{
|
|
active_inventory |
|
|
combine({
|
|
'all': {
|
|
'hosts': (
|
|
active_inventory.all.hosts |
|
|
combine({
|
|
inventory_hostname: {
|
|
'ansible_host': hostvars[inventory_hostname]['ansible_host'],
|
|
'ansible_port': hostvars[inventory_hostname]['ssh_port'] | default(22),
|
|
'initialized': true
|
|
}
|
|
})
|
|
)
|
|
}
|
|
}, recursive=True)
|
|
}}
|
|
delegate_to: localhost
|
|
|
|
- name: Write updated active inventory back to file
|
|
ansible.builtin.copy:
|
|
dest: "{{ inventory_active }}"
|
|
content: "{{ active_inventory | to_nice_yaml }}"
|
|
delegate_to: localhost
|
|
run_once: true
|