Skip to content
Snippets Groups Projects
Commit 06f3517a authored by Jörg Sachse's avatar Jörg Sachse
Browse files

feat: checkout exit script from Git using deploy key

parent cafca9be
No related branches found
No related tags found
No related merge requests found
...@@ -5,3 +5,15 @@ ...@@ -5,3 +5,15 @@
state: present state: present
key: "{{ vault_ssh_access.ssh_key }}" key: "{{ vault_ssh_access.ssh_key }}"
comment: "{{ vault_ssh_access.ssh_comment }}" comment: "{{ vault_ssh_access.ssh_comment }}"
- name: copy deploykey files to managed servers
copy:
src: "{{ role_path }}/../ansible_vaults/{{ role_name }}/{{ item }}"
dest: "~/.ssh/{{ item }}"
owner: "root"
group: "root"
mode: 0400
loop:
- "id_ed25519_deploykey"
- "id_ed25519_deploykey.pub"
...@@ -45,20 +45,14 @@ esac ...@@ -45,20 +45,14 @@ esac
echo "${MESSAGE}" | tee -a "${LOGFILE}" echo "${MESSAGE}" | tee -a "${LOGFILE}"
### GET EXIT SCRIPT FROM GITHUB ### EXIT_PERL="/usr/local/bin/rosettaExitStrategy/perl/exit_strategy.pl"
git clone "{{ vault_git_repo_url_exitstrategy }}" | tee -a EXIT_DB="/tmp/exit.db"
EXIT_PERL="${HOME}/rosettaExitStrategy/perl/exit_strategy.pl" ### GENERATE EXIT DATABASE ###
### GENERATE EXIT SQL SCRIPT ###
date | tee -a "${LOGFILE}" date | tee -a "${LOGFILE}"
echo -e "\n### GENERATE EXIT SQL SCRIPT ###\n" | tee -a "${LOGFILE}" echo -e "\n### GENERATE EXIT SQL SCRIPT ###\n" | tee -a "${LOGFILE}"
perl "${EXIT_PERL}" "${SQLFILE}" "${MOUNTPOINT}" 2>> "${LOGFILE}" perl "${EXIT_PERL}" "${EXIT_DB}" "${MOUNTPOINT}" 2>> "${LOGFILE}"
[[ $? -ne 0 ]] && echo "ERROR: Couldn't create SQLite database, exiting." && exit 10 [[ $? -ne 0 ]] && echo "ERROR: Couldn't create SQLite database, exiting." && exit 10
date | tee -a "${LOGFILE}" date | tee -a "${LOGFILE}"
### TIDY UP ###
rm -r ~/rosettaExitStrategy
exit 0 exit 0
...@@ -3,11 +3,7 @@ ...@@ -3,11 +3,7 @@
# ANY CONFIDENTIAL EDITS SHOULD GO TO THE ENCRYPTED VAULT FILE! # ANY CONFIDENTIAL EDITS SHOULD GO TO THE ENCRYPTED VAULT FILE!
# VARIABLES THAT ARE NOT CONFIDENTIAL CAN GO TO A SEPARATE "*.YML" FILE. # VARIABLES THAT ARE NOT CONFIDENTIAL CAN GO TO A SEPARATE "*.YML" FILE.
vault_git_repo_url_updatechecks: "<URL>" vault_slub_git_repo_fqdn: "<URL>"
vault_git_repo_url_exitstrategy: "<URL>"
vault_db_user: "<USERNAME>"
vault_db_group: "<GROUPNAME>"
vault_groups: vault_groups:
- name: "<GROUPNAME>" - name: "<GROUPNAME>"
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment