2022-06-22 10:02:09 +02:00
|
|
|
ANSIBLE_APP_NAME ?= myos
|
2022-06-04 02:24:35 +02:00
|
|
|
ANSIBLE_APP_TYPE ?= myos
|
2022-01-09 17:32:54 +01:00
|
|
|
ANSIBLE_ARGS ?= $(if $(filter-out 0,$(UID)),$(if $(shell sudo -l 2>/dev/null |grep 'NOPASSWD: ALL'),,--ask-become-pass))$(if $(DOCKER_RUN),$(if $(shell ssh-add -l >/dev/null 2>&1 || echo false), --ask-pass))
|
2021-02-09 17:05:00 +01:00
|
|
|
ANSIBLE_AWS_ACCESS_KEY_ID ?= $(AWS_ACCESS_KEY_ID)
|
|
|
|
|
ANSIBLE_AWS_DEFAULT_OUTPUT ?= $(AWS_DEFAULT_OUTPUT)
|
|
|
|
|
ANSIBLE_AWS_DEFAULT_REGION ?= $(AWS_DEFAULT_REGION)
|
|
|
|
|
ANSIBLE_AWS_SECRET_ACCESS_KEY ?= $(AWS_SECRET_ACCESS_KEY)
|
|
|
|
|
ANSIBLE_CONFIG ?= ansible/ansible.cfg
|
|
|
|
|
ANSIBLE_DISKS_NFS_DISK ?= $(NFS_DISK)
|
|
|
|
|
ANSIBLE_DISKS_NFS_OPTIONS ?= $(NFS_OPTIONS)
|
|
|
|
|
ANSIBLE_DISKS_NFS_PATH ?= $(NFS_PATH)
|
2022-06-22 10:02:09 +02:00
|
|
|
# running ansible in docker requires sshd running on localhost,
|
|
|
|
|
# to allow ansible to escape docker and apply changes to localhost
|
|
|
|
|
ANSIBLE_DOCKER ?= false
|
|
|
|
|
ANSIBLE_DOCKER_RUN ?= $(if $(filter-out false False FALSE,$(ANSIBLE_DOCKER)),$(ANSIBLE_DOCKER))
|
2021-02-09 17:05:00 +01:00
|
|
|
ANSIBLE_DOCKER_IMAGE_TAG ?= $(DOCKER_IMAGE_TAG)
|
|
|
|
|
ANSIBLE_DOCKER_REGISTRY ?= $(DOCKER_REGISTRY)
|
|
|
|
|
ANSIBLE_EXTRA_VARS ?= target=localhost
|
2021-07-15 00:58:24 +02:00
|
|
|
ANSIBLE_GIT_DIRECTORY ?= /dns/$(subst $(space),/,$(strip $(call reverse,$(subst ., ,$(APP_REPOSITORY_HOST)))))/$(APP_REPOSITORY_PATH)
|
2021-05-24 03:27:30 +02:00
|
|
|
ANSIBLE_GIT_KEY_FILE ?= $(if $(ANSIBLE_SSH_PRIVATE_KEYS),~$(ANSIBLE_USERNAME)/.ssh/$(notdir $(firstword $(ANSIBLE_SSH_PRIVATE_KEYS))))
|
2021-02-09 17:05:00 +01:00
|
|
|
ANSIBLE_GIT_REPOSITORY ?= $(GIT_REPOSITORY)
|
|
|
|
|
ANSIBLE_GIT_VERSION ?= $(BRANCH)
|
|
|
|
|
ANSIBLE_INVENTORY ?= ansible/inventories
|
2021-07-15 00:58:24 +02:00
|
|
|
ANSIBLE_MYOS ?= $(ANSIBLE_GIT_DIRECTORY)
|
2021-02-09 17:05:00 +01:00
|
|
|
ANSIBLE_PLAYBOOK ?= ansible/playbook.yml
|
2021-06-16 13:19:52 +02:00
|
|
|
ANSIBLE_SSH_AUTHORIZED_KEYS ?= $(strip $(SSH_AUTHORIZED_KEYS))
|
|
|
|
|
ANSIBLE_SSH_BASTION_HOSTNAME ?= $(firstword $(SSH_BASTION_HOSTNAME))
|
|
|
|
|
ANSIBLE_SSH_BASTION_USERNAME ?= $(firstword $(SSH_BASTION_USERNAME))
|
|
|
|
|
ANSIBLE_SSH_PRIVATE_IP_RANGE ?= $(strip $(SSH_PRIVATE_IP_RANGE))
|
|
|
|
|
ANSIBLE_SSH_PRIVATE_KEYS ?= $(strip $(SSH_PRIVATE_KEYS))
|
|
|
|
|
ANSIBLE_SSH_PUBLIC_HOSTS ?= $(strip $(SSH_PUBLIC_HOSTS))
|
|
|
|
|
ANSIBLE_SSH_USERNAME ?= $(firstword $(SSH_USER))
|
2021-02-09 17:05:00 +01:00
|
|
|
ANSIBLE_SERVER_NAME ?= $(SERVER_NAME)
|
2021-06-16 13:19:52 +02:00
|
|
|
ANSIBLE_USERNAME ?= $(USER)
|
2021-06-12 03:13:01 +02:00
|
|
|
ANSIBLE_VERBOSE ?= $(if $(DEBUG),-vvvv,$(if $(VERBOSE),-v))
|
2021-02-09 17:05:00 +01:00
|
|
|
CMDS += ansible ansible-playbook
|
2022-06-22 10:02:09 +02:00
|
|
|
DOCKER_RUN_OPTIONS_ANSIBLE ?= -it $(if $(DOCKER_INTERNAL_DOCKER_HOST),--add-host=host.docker.internal:$(DOCKER_INTERNAL_DOCKER_HOST))
|
|
|
|
|
ENV_VARS += ANSIBLE_APP_NAME ANSIBLE_APP_TYPE ANSIBLE_AWS_ACCESS_KEY_ID ANSIBLE_AWS_DEFAULT_OUTPUT ANSIBLE_AWS_DEFAULT_REGION ANSIBLE_AWS_SECRET_ACCESS_KEY ANSIBLE_CONFIG ANSIBLE_DISKS_NFS_DISK ANSIBLE_DISKS_NFS_OPTIONS ANSIBLE_DISKS_NFS_PATH ANSIBLE_DOCKER_IMAGE_TAG ANSIBLE_DOCKER_REGISTRY ANSIBLE_EXTRA_VARS ANSIBLE_GIT_DIRECTORY ANSIBLE_GIT_KEY_FILE ANSIBLE_GIT_REPOSITORY ANSIBLE_GIT_VERSION ANSIBLE_INVENTORY ANSIBLE_MYOS ANSIBLE_PLAYBOOK ANSIBLE_SSH_AUTHORIZED_KEYS ANSIBLE_SSH_BASTION_HOSTNAME ANSIBLE_SSH_BASTION_USERNAME ANSIBLE_SSH_PRIVATE_IP_RANGE ANSIBLE_SSH_PRIVATE_KEYS ANSIBLE_SSH_PUBLIC_HOSTS ANSIBLE_SSH_USERNAME ANSIBLE_USERNAME ANSIBLE_VERBOSE
|
2021-02-09 17:05:00 +01:00
|
|
|
|
2021-06-06 16:29:54 +02:00
|
|
|
# function ansible: Call run ansible ANSIBLE_ARGS with arg 1
|
2021-02-09 17:05:00 +01:00
|
|
|
define ansible
|
2021-06-12 03:13:01 +02:00
|
|
|
$(call INFO,ansible,$(1))
|
2022-06-22 10:02:09 +02:00
|
|
|
$(RUN) $(call $(if $(ANSIBLE_DOCKER_RUN),run,env-run),$(if $(ANSIBLE_DOCKER_RUN),,$(RUN) )ansible $(ANSIBLE_ARGS) $(ANSIBLE_VERBOSE) $(if $(ANSIBLE_DOCKER_RUN),-i $(ANSIBLE_INVENTORY)/.host.docker.internal) $(1),$(DOCKER_RUN_OPTIONS_ANSIBLE) $(DOCKER_REPOSITORY)/)
|
2021-02-09 17:05:00 +01:00
|
|
|
endef
|
2021-06-06 16:29:54 +02:00
|
|
|
# function ansible-playbook: Call run ansible-playbook ANSIBLE_ARGS with arg 1
|
2021-02-09 17:05:00 +01:00
|
|
|
define ansible-playbook
|
2021-06-12 03:13:01 +02:00
|
|
|
$(call INFO,ansible-playbook,$(1))
|
2022-06-22 10:02:09 +02:00
|
|
|
$(RUN) $(call $(if $(ANSIBLE_DOCKER_RUN),run,env-run),$(if $(ANSIBLE_DOCKER_RUN),,$(RUN) )ansible$(if $(ANSIBLE_DOCKER_RUN),,-playbook) $(ANSIBLE_ARGS) $(ANSIBLE_VERBOSE) $(if $(ANSIBLE_DOCKER_RUN),-i $(ANSIBLE_INVENTORY)/.host.docker.internal) $(1),$(DOCKER_RUN_OPTIONS_ANSIBLE) --entrypoint=ansible-playbook $(DOCKER_REPOSITORY)/)
|
2021-02-09 17:05:00 +01:00
|
|
|
endef
|
2021-06-06 16:29:54 +02:00
|
|
|
# function ansible-pull: Call run ansible-pull ANSIBLE_ARGS with arg 1
|
2021-02-09 17:05:00 +01:00
|
|
|
define ansible-pull
|
2021-06-12 03:13:01 +02:00
|
|
|
$(call INFO,ansible-pull,$(1))
|
2022-06-22 10:02:09 +02:00
|
|
|
$(call $(if $(ANSIBLE_DOCKER_RUN),run,env-run),$(if $(ANSIBLE_DOCKER_RUN),,$(RUN) )ansible-pull $(ANSIBLE_ARGS) $(ANSIBLE_VERBOSE) $(1))
|
2021-02-09 17:05:00 +01:00
|
|
|
endef
|
2021-07-11 09:56:03 +02:00
|
|
|
# function ansible-user-add-groups: Call ansible to add user 1 in groups 2
|
|
|
|
|
define ansible-user-add-groups
|
|
|
|
|
$(call INFO,ansible-user-add-groups,$(1)$(comma) $(2))
|
2022-06-22 10:02:09 +02:00
|
|
|
$(if $(ANSIBLE_DOCKER_RUN),$(call make,docker-build-ansible),$(call make,install-ansible))
|
2021-07-11 09:56:03 +02:00
|
|
|
$(call ansible,-b -m user -a 'name=$(1) groups=$(2) append=yes' localhost)
|
|
|
|
|
endef
|
