summaryrefslogtreecommitdiff
path: root/worker/scripts/ansible_playbook
diff options
context:
space:
mode:
authorElizabeth Hunt <me@liz.coffee>2025-06-15 21:13:00 -0700
committerElizabeth Hunt <me@liz.coffee>2025-06-15 21:13:00 -0700
commit037c85fdd373322a84afd8acd9c652deeab37520 (patch)
tree9d830ca8b2f79e3e2ec2e5218873e0028d7fede6 /worker/scripts/ansible_playbook
parent1e38d81ceec451f25d3a11fbd82e5c225848d172 (diff)
downloadci-037c85fdd373322a84afd8acd9c652deeab37520.tar.gz
ci-037c85fdd373322a84afd8acd9c652deeab37520.zip
Use .ts extensions for deno parser
Diffstat (limited to 'worker/scripts/ansible_playbook')
-rwxr-xr-xworker/scripts/ansible_playbook113
1 files changed, 0 insertions, 113 deletions
diff --git a/worker/scripts/ansible_playbook b/worker/scripts/ansible_playbook
deleted file mode 100755
index fe2810b..0000000
--- a/worker/scripts/ansible_playbook
+++ /dev/null
@@ -1,113 +0,0 @@
-#!/usr/bin/env -S deno run --allow-env --allow-net --allow-run --allow-read --allow-write
-
-import {
- Either,
- getRequiredEnvVars,
- getStdout,
- type IEither,
- LogTraceable,
- LogMetricTraceable,
- Metric,
- prependWith,
- TraceUtil,
-} from "@emprespresso/pengueno";
-import type { AnsiblePlaybookJob } from "@emprespresso/ci_model";
-import { Bitwarden, type SecureNote } from "@emprespresso/ci_worker";
-
-const eitherJob = getRequiredEnvVars([
- "path",
- "playbooks",
-])
- .mapRight((baseArgs) => (
- <AnsiblePlaybookJob> {
- type: "ansible_playbook",
- arguments: baseArgs,
- }
- ));
-
-const eitherVault = Bitwarden.getConfigFromEnvironment()
- .mapRight((config) => new Bitwarden(config));
-
-const playbookMetric = Metric.fromName("ansiblePlaybook.playbook");
-const _logJob = LogTraceable.of(eitherJob).bimap(TraceUtil.withTrace("ansible_playbook"));
-await LogMetricTraceable.ofLogTraceable(_logJob).bimap(TraceUtil.withMetricTrace(playbookMetric))
- .peek((tEitherJob) =>
- tEitherJob.trace.trace("starting ansible playbook job! (⑅˘꒳˘)")
- )
- .map((tEitherJob) =>
- tEitherJob.get().flatMapAsync((job) =>
- eitherVault.flatMapAsync(async (vault) => {
- const eitherKey = await vault.unlock(tEitherJob);
- return eitherKey.mapRight((key) => ({ job, key, vault }));
- })
- )
- )
- .map(async (tEitherJobVault) => {
- tEitherJobVault.trace.trace(
- "getting ansible secwets uwu~",
- );
- const eitherJobVault = await tEitherJobVault.get();
-
- const eitherSshKey = await eitherJobVault
- .flatMapAsync(({ key, vault }) =>
- vault.fetchSecret<SecureNote>(tEitherJobVault, key, "ssh_key")
- );
- const eitherSshKeyFile = await eitherSshKey.mapRight(({ notes }) => notes)
- .flatMapAsync(saveToTempFile);
- const eitherAnsibleSecrets = await eitherJobVault
- .flatMapAsync(({ key, vault }) =>
- vault.fetchSecret<SecureNote>(tEitherJobVault, key, "ansible_playbooks")
- );
- const eitherAnsibleSecretsFile = await eitherAnsibleSecrets.mapRight((
- { notes },
- ) => notes).flatMapAsync(saveToTempFile);
-
- return eitherJobVault.flatMapAsync(async ({ job, vault, key }) => {
- const eitherLocked = await vault.lock(tEitherJobVault, key);
- return eitherLocked.flatMap((_locked) =>
- eitherSshKeyFile.flatMap((sshKeyFile) =>
- eitherAnsibleSecretsFile.mapRight((secretsFile) => ({
- job,
- sshKeyFile,
- secretsFile,
- }))
- )
- );
- });
- })
- .map(async (tEitherJobAndSecrets) => {
- const eitherJobAndSecrets = await tEitherJobAndSecrets.get();
- return eitherJobAndSecrets.flatMapAsync(
- ({ job, sshKeyFile, secretsFile }) => {
- const volumes = [
- `${job.arguments.path}:/ansible`,
- `${sshKeyFile}:/root/id_rsa`,
- `${secretsFile}:/ansible/secrets.yml`,
- ];
- const playbookCmd =
- `ansible-playbook -e @secrets.yml ${job.arguments.playbooks}`;
- const deployCmd = [
- "docker",
- "run",
- ...prependWith(volumes, "-v"),
- "willhallonline/ansible:latest",
- ...playbookCmd.split(" "),
- ];
- tEitherJobAndSecrets.trace.trace(
- `running ansible magic~ (◕ᴗ◕✿) ${deployCmd}`,
- );
- return tEitherJobAndSecrets.move(deployCmd).map(getStdout).get();
- },
- );
- })
- .get();
-
-const saveToTempFile = (text: string): Promise<IEither<Error, string>> =>
- Either.fromFailableAsync(
- () => Deno.makeTempDir({ dir: Deno.cwd() })
- .then((dir) => Deno.makeTempFile({ dir }))
- .then(async (f) => {
- await Deno.writeTextFile(f, text);
- return f;
- }),
- );