You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
86 lines
2.1 KiB
Bash
86 lines
2.1 KiB
Bash
#!/bin/bash
|
|
#
|
|
# The "directory/directory.yml" is the old way that we used to simplify jobs execution.
|
|
# The "directory/site.yml" is the syntax used by roles (from ansible version 1.2)
|
|
#
|
|
# Otherwise we can directly execute a single play (file)
|
|
#
|
|
|
|
PAR=50
|
|
TIMEOUT=15
|
|
PLAY=site.yml
|
|
HOSTS_DIR=.
|
|
ANSIBLE_HOSTS=
|
|
|
|
export TMPDIR=/var/tmp/${USER}
|
|
if [ ! -d ${TMPDIR} ] ; then
|
|
mkdir -p ${TMPDIR}
|
|
fi
|
|
|
|
if [ -f ./ansible.cfg ] ; then
|
|
export ANSIBLE_CONFIG="./ansible.cfg"
|
|
fi
|
|
|
|
# No cows!
|
|
export ANSIBLE_NOCOWS=1
|
|
|
|
export ANSIBLE_ERROR_ON_UNDEFINED_VARS=True
|
|
export ANSIBLE_HOST_KEY_CHECKING=False
|
|
export ANSIBLE_LIBRARY="/usr/share/ansible:./modules:../modules:$ANSIBLE_LIBRARY"
|
|
|
|
# Update the galaxy requirements
|
|
if [ -f requirements.yml ] ; then
|
|
ansible-galaxy install --ignore-errors -f -r requirements.yml
|
|
fi
|
|
|
|
PLAY_OPTS="-T $TIMEOUT -f $PAR"
|
|
|
|
if [ -f "$1" ] ; then
|
|
PLAY=$1
|
|
elif [ ! -f $PLAY ] ; then
|
|
echo "No play file available."
|
|
exit 1
|
|
fi
|
|
|
|
if [ -f "${PLAY}" ] ; then
|
|
MAIN="${PLAY}"
|
|
shift
|
|
elif [ -f "${PLAY}.yml" ]; then
|
|
MAIN="${PLAY}.yml"
|
|
shift
|
|
fi
|
|
|
|
if [ -f ${HOSTS_DIR}/hosts ] ; then
|
|
ANSIBLE_HOSTS=${HOSTS_DIR}/hosts
|
|
fi
|
|
if [ -f ${HOSTS_DIR}/inventory/hosts ] ; then
|
|
ANSIBLE_HOSTS=${HOSTS_DIR}/inventory/hosts
|
|
fi
|
|
if [ ! -z "$ANSIBLE_HOSTS" ] ; then
|
|
PLAY_OPTS="-i $ANSIBLE_HOSTS"
|
|
fi
|
|
|
|
#echo "Find vault encrypted files if any"
|
|
if [ -d ./group_vars ] ; then
|
|
VAULT_GROUP_FILES=$( find ./group_vars -name \*vault\* )
|
|
fi
|
|
if [ -d ./host_vars ] ; then
|
|
VAULT_HOST_FILES=$( find ./host_vars -name \*vault\* )
|
|
fi
|
|
|
|
if [ -n "$VAULT_GROUP_FILES" ] || [ -n "$VAULT_HOST_FILES" ] ; then
|
|
# Vault requires a password.
|
|
# To encrypt a password for a user: python -c "from passlib.hash import sha512_crypt; print sha512_crypt.encrypt('<password>')"
|
|
if [ -f ~/.conductor_ansible_vault_pass.txt ] ; then
|
|
PLAY_OPTS="$PLAY_OPTS --vault-password-file=~/.conductor_ansible_vault_pass.txt"
|
|
else
|
|
echo "There are password protected encrypted files, we will ask for password before proceeding"
|
|
PLAY_OPTS="$PLAY_OPTS --ask-vault-pass"
|
|
fi
|
|
fi
|
|
|
|
# Main
|
|
ansible-playbook $PLAY_OPTS $MAIN $@
|
|
|
|
rm -f /tmp/passwordfile
|