Update test_ansible.yml #5
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Test Ansible Playbook Setup | |
| on: | |
| push: | |
| branches: | |
| - fb_ansible_test | |
| jobs: | |
| ansible: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v2 | |
| - name: Set up SSH for gateway user | |
| uses: webfactory/ssh-agent@v0.5.3 | |
| with: | |
| ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY_1 }} | |
| - name: Add gateway user key to SSH config | |
| run: | | |
| mkdir -p ~/.ssh | |
| echo "${{ secrets.SSH_PRIVATE_KEY_1 }}" > ~/.ssh/id_rsa_1 | |
| chmod 600 ~/.ssh/id_rsa_1 | |
| - name: Set up SSH for target user | |
| uses: webfactory/ssh-agent@v0.5.3 | |
| with: | |
| ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY_2 }} | |
| - name: Add target user key to SSH config | |
| run: | | |
| mkdir -p ~/.ssh | |
| echo "${{ secrets.SSH_PRIVATE_KEY_2 }}" > ~/.ssh/id_rsa_2 | |
| chmod 600 ~/.ssh/id_rsa_2 | |
| echo " | |
| Host target_host | |
| HostName ${{ secrets.TARGET_HOST }} | |
| User ${{ secrets.TARGET_USER }} | |
| IdentityFile ~/.ssh/id_rsa_2 | |
| ProxyJump ${{ secrets.GATEWAY_USER }}@${{ secrets.GATEWAY_HOST }} | |
| " >> ~/.ssh/config | |
| - name: Create .password file | |
| run: | | |
| echo "${{ secrets.ANSIBLE_VAULT_PASSWORD }}" > ~/.ssh/.password | |
| chmod 600 ~/.ssh/.password | |
| - name: Configure AWS credentials | |
| env: | |
| AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| run: | | |
| mkdir -p ~/.aws | |
| echo "[default]" > ~/.aws/credentials | |
| echo "aws_access_key_id=${{ secrets.AWS_ACCESS_KEY_ID }}" >> ~/.aws/credentials | |
| echo "aws_secret_access_key=${{ secrets.AWS_SECRET_ACCESS_KEY }}" >> ~/.aws/credentials | |
| - name: Log in to ECR | |
| run: | | |
| aws ecr get-login-password --region us-east-1 | docker login --username AWS --password-stdin 100225593120.dkr.ecr.us-east-1.amazonaws.com | |
| - name: Pull Ansible Docker Image | |
| run: docker pull 100225593120.dkr.ecr.us-east-1.amazonaws.com/agr_ansible_run:stage | |
| - name: Test Docker Container | |
| run: | | |
| docker run --rm \ | |
| --mount type=bind,source=${{ github.workspace }},target=/usr/src/ansible \ | |
| --mount type=bind,source=$HOME/.ssh/.password,target=/usr/src/ansible/.password \ | |
| 100225593120.dkr.ecr.us-east-1.amazonaws.com/agr_ansible_run:stage \ | |
| /bin/bash -c "echo 'Hello, World!'" | |
| - name: Confirm Connection to Final Server | |
| run: | | |
| ssh target_host "touch ~/github_action_test_file" |