The ansible files for the pains-perdus infra.
group_vars/all | ||
roles | ||
.gitignore | ||
ansible.cfg | ||
base.yml | ||
dns.yml | ||
hosts | ||
keycloak.yml | ||
LICENSE | ||
README.md | ||
web_services.yml |
ansible
The ansible files for the pains-perdus infra.
Deploy a playbook
ansible-playbook playbook.yml
Add --check
to do a dry run
Edit the vault
ansible-vault edit group_vars/all/vault
with the edditor defined in the env varible $EDITOR
and the password of the vault in the file .vault_password
(Carefull not to commit it!!!)
SSH key whith passphrase
To avoid entering the passphrase of the ssh key for each host, we have to use an ssh-agent. The ssh-agent with xonsh does not really works, so in my case I have to use ansible and the agent inside a sh process:
sh
eval `ssh-agent -s`
ssh-add
ansible all -m ping # or whatever you want to do with ansible
exit