salt/ansible
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Proxy all gitlab CI attempts through a bastion box

Browse Source
This commit is contained in:
Salt 2022-02-15 13:40:38 -06:00
parent e9bf120509
commit 4a73e8782f
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
.gitlab-ci.yml
View File

@ -1,4 +1,6 @@
image: rehashedsalt/ansible-env:bleeding image: rehashedsalt/ansible-env:bleeding
variables:
SSH_BASTION_ARGS: '-o "ProxyCommand=ssh -W %h:%p -q ansible@bastion1.dallas.mgmt.desu.ltd"'
stages: stages:
- lint - lint
- test - test
@ -48,20 +50,20 @@ Test:
except: except:
- pipelines - pipelines
script: script:
- ansible-playbook --skip-tags no-test -C site.yml --vault-password-file /vaultpw || error="$?" - ansible-playbook --skip-tags no-test -C site.yml --ssh-common-args="$SSH_BASTION_ARGS" --vault-password-file /vaultpw || error="$?"
- if [ "$error" -eq 4 ]; then echo "Some hosts were unreachable; masking error"; unset error; fi - if [ "$error" -eq 4 ]; then echo "Some hosts were unreachable; masking error"; unset error; fi
- if [ -n "$error" ]; then echo "Return code $error"; false; fi - if [ -n "$error" ]; then echo "Return code $error"; false; fi
Play_Against_Remote: Play_Against_Remote:
stage: play stage: play
script: script:
- ansible-playbook -l '!tags_home' site.yml --vault-password-file /vaultpw || error="$?" - ansible-playbook -l '!tags_home' site.yml --ssh-common-args="$SSH_BASTION_ARGS" --vault-password-file /vaultpw || error="$?"
- if [ "$error" -eq 4 ]; then echo "Some hosts were unreachable; masking error"; unset error; fi - if [ "$error" -eq 4 ]; then echo "Some hosts were unreachable; masking error"; unset error; fi
- if [ -n "$error" ]; then echo "Return code $error"; false; fi - if [ -n "$error" ]; then echo "Return code $error"; false; fi
Play_Against_Home: Play_Against_Home:
stage: play stage: play
retry: 1 retry: 1
script: script:
- ansible-playbook -l tags_home site.yml --vault-password-file /vaultpw || error="$?" - ansible-playbook -l tags_home site.yml --ssh-common-args="$SSH_BASTION_ARGS" --vault-password-file /vaultpw || error="$?"
- if [ "$error" -eq 4 ]; then echo "Some hosts were unreachable; masking error"; unset error; fi - if [ "$error" -eq 4 ]; then echo "Some hosts were unreachable; masking error"; unset error; fi
- if [ -n "$error" ]; then echo "Return code $error"; false; fi - if [ -n "$error" ]; then echo "Return code $error"; false; fi