gitops.yaml

---
name: GitOps

on:
  push:
    branches: [main]
  pull_request:
  # schedule:
  #   - cron: '53 1 */15 * *'

jobs:
  # lint:
  #   runs-on: ubuntu-latest
  #   container:
  #     image: ghcr.io/secshellnet/ansible-creator-ee  # ghcr.io/ansible/creator-ee with preinstalled collections
  #
  #   steps:
  #     - uses: actions/checkout@v3
  #
  #     - name: Run ansible-lint
  #       run: |
  #         ansible-lint -x command-instead-of-shell,no-changed-when,\
  #           name[template],jinja[invalid]

  run:
    runs-on: ubuntu-latest
    # needs: [lint]

    steps:
      - uses: actions/checkout@v3
        if: vars.ENABLE_GITOPS == '1'

      - name: Prepare environment
        if: vars.ENABLE_GITOPS == '1'
        run: |
          echo "${{ secrets.SSH_KEY }}" > .keys/id_ecdsa
          chmod 600 .keys/id_ecdsa
          ssh-keygen -f .keys/id_ecdsa -y > .keys/id_ecdsa.pub

          echo "${{ secrets.ANSIBLE_KEYS_ALL }}" > .keys/all

          ansible-galaxy collection install hetzner.hcloud community.general ansible.posix
          ansible-galaxy role install geerlingguy.postgresql geerlingguy.redis
          /opt/pipx/venvs/ansible-core/bin/python -m pip install -r requirements.txt

          # not quiet sure why, but we need this package in this python environment
          pip3 install python-dateutil

      - name: Run ansible inventory in check mode
        if: |
          vars.ENABLE_GITOPS == '1' &&
          github.event_name == 'pull_request'
        env:
          ANSIBLE_HOST_KEY_CHECKING: false
        run: |
          ansible-playbook playbook.yaml --check

      - name: Deploy ansible inventory
        if: |
          vars.ENABLE_GITOPS == '1'
          && github.event_name != 'pull_request'
        env:
          ANSIBLE_HOST_KEY_CHECKING: false
        run: |
          ansible-playbook playbook.yaml