claude-botandClaude Opus 5.5
5528ccbd0b
Pipeline branch filters and PR bases, Flux GitRepository ref, image automation checkout and push, restore-test, vmtest and bootstrap.sh. Merge right before the master -> main rename. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
48 lines
1.6 KiB
YAML
48 lines
1.6 KiB
YAML
when:
|
|
# Deploy only on main (merge) + manual — never auto-deploy from a branch.
|
|
- event: push
|
|
branch: main
|
|
path:
|
|
- "ansible/roles/uptime-kuma/**"
|
|
- "ansible/plays/install-uptime-kuma.yml"
|
|
- ".woodpecker/deploy-uptime-kuma.yml"
|
|
- event: deployment
|
|
evaluate: 'CI_PIPELINE_DEPLOY_TARGET == "deploy-uptime-kuma"'
|
|
- event: cron
|
|
cron: uptime-kuma-token-renew
|
|
|
|
timeout: 30
|
|
|
|
steps:
|
|
- name: renew-openbao-token
|
|
image: gitea.renner.uno/gitea_admin/ci-ansible:2026-10-18
|
|
environment:
|
|
VAULT_TOKEN:
|
|
from_secret: openbao_uptime_kuma_token
|
|
commands:
|
|
- 'curl -sSf -X POST -H "X-Vault-Token: $VAULT_TOKEN" https://openbao.renner.uno/v1/auth/token/renew-self -o /dev/null'
|
|
|
|
- name: deploy-uptime-kuma
|
|
image: gitea.renner.uno/gitea_admin/ci-ansible:2026-10-18
|
|
when:
|
|
- event: [push, deployment]
|
|
environment:
|
|
ANSIBLE_FORCE_COLOR: "true"
|
|
ANSIBLE_HOST_KEY_CHECKING: "false"
|
|
ANSIBLE_ROLES_PATH: "../roles:./roles"
|
|
SSH_PRIVATE_KEY:
|
|
from_secret: ssh_private_key
|
|
VAULT_PASS:
|
|
from_secret: vault_pass
|
|
VAULT_TOKEN:
|
|
from_secret: openbao_uptime_kuma_token
|
|
commands:
|
|
- mkdir -p ~/.ssh
|
|
- echo "$SSH_PRIVATE_KEY" | base64 -d > ~/.ssh/id_ed25519
|
|
- chmod 600 ~/.ssh/id_ed25519
|
|
- printf "Host *\n\tStrictHostKeyChecking no\n\tUserKnownHostsFile /dev/null\n" > ~/.ssh/config
|
|
- cd ansible
|
|
- echo "$VAULT_PASS" > .vault_pass && chmod 600 .vault_pass
|
|
- export ANSIBLE_VAULT_PASSWORD_FILE=.vault_pass
|
|
- ansible-playbook -i inventory/ plays/install-uptime-kuma.yml -v
|