COA Deploy Ansible with GitHub UseCase.

-- How to build ansible pipeline with GitHub Action --

✅ Showcase

GitHub Actions is a continuous integration and continuous delivery (CI/CD) platform that allows you to automate your build, test, and deployment pipelines. You can create workflows that build and test every pull request to your repository, or deploy merged pull requests to production.

A workflow is a configurable automated process that will run one or more jobs. Workflows are defined by a YAML file checked in to your repository and will run when triggered by an event in your repository, or they can be triggered manually, or at a defined schedule.

During this UseCase we're going to:

• Use Github Actions to build different workflows.
• Create a test workflow using Lint ansible.
• Run gitops operations in an ATP workload using ansible playbooks.
• We´ll use a host bastion as ansible control node

✅ Usage

• Clone this repo in GitHub and create you own repository.

• Add the ssh key in the github secrets in order to connect to the bastion :

  • Navigate to your repository and select the Settings tab.
  • Once there you should see on the left a Secrets section third from the bottom of the list, click on that.
  • Click on the New repository secret button.
  • Add the next secrets:

SSH_PRIVATE_KEY

• Add also the VAULT_PASSWORD as another secret varible in github. Read the readme.md included in ansible/vault to see more information related to encryp files with ansible-vault.

VAULT_PASSWORD

• The pipelines/workflows configuration are defined in the directory .github/workflows, in this case we have created two different workdlows: **LintAnsible.yaml and DeployAnsible.yaml

• Go to settings of your repo, and active the use of workflows.(Settings-> Actions-> General-> Allow all actions and reusable workflows)

• Create a new branch, review the different playbooks examples in /ansible/playbooks , copy the content os the choose operation in ./ansible/playbook.yaml and publish the changes to the new branch.

• Review if the playbook uses any vault file, if is needed you need to encrypt the content of the file using ansible-vault.

• Open a "merge pull request" and check how the first pipeline run:

• After review the test pipeline (ansible lint) outcome, you can go and confirm the merge. (pull requests-> request)
• When you approve the merge, the "ansible deploy" pipeline will be automatically launch.

• If we review the tab "actions" , we can check our two workflows

✅ References

• Ansible Lint
• Ansible Linting with GitHub Actions
• Run Ansible playbook GitHub Action