Merge pull request 'deploy-image' (#4) from deploy-image into master

Reviewed-on: #4

.dockerignore

@@ -0,0 +1 @@
+Dockerfile

.drone.yml

@@ -0,0 +1,19 @@
+kind: pipeline
+name: default
+type: docker
+
+steps:
+- name: deploy
+  image: v4l3n71n/covas:latest
+  pull: if-not-exists
+  commands:
+    - eval $(ssh-agent -s)
+    - id -u ansible
+    - sshpass -p 50ford5080850 ssh-add ssh_keys/id_rsa_nas
+    - sshpass -p 23v4l3n71n02cz3ry841993 ssh-add ssh_keys/id_rsa_vps
+    - ansible-playbook -i inventory --syntax-check playbook.yml
+    - ansible --ask-vault-password -i inventory -m ping playbook.yml
+
+
+image_pull_secrets:
+  - dockerconfig

.gitignore

@@ -0,0 +1 @@
+ssh_keys/

Dockerfile

@@ -0,0 +1,9 @@
+FROM debian:bookworm-slim
+RUN apt-get update --yes && apt-get upgrade --yes && apt-get install --yes python3 python3-pip openssh-client sshpass && rm -rf /var/lib/apt/lists/*
+RUN groupadd -r ansible && useradd -m -r -g ansible ansible
+USER ansible
+RUN pip install ansible
+WORKDIR /home/ansible
+ENV PATH="${PATH}:/home/ansible/.local/bin"
+COPY --chown=ansible:ansible . /home/ansible
+RUN  ansible-galaxy install -vvvv -r requirements.yml

inventory/group_vars/db

@@ -1,3 +1,4 @@
+msg: db
 postgres_url: db.valczeryba.ovh
 postgres_db: toto
 postgres_port: 54321

inventory/group_vars/db_vault

@@ -1,14 +1,15 @@
 $ANSIBLE_VAULT;1.1;AES256
-30326462626436373330386637633864316430623235306239353439313932383964646435393965
-3662326631306134363862626638616330633765666538360a323264646135393935343434343362
-36666566316465383833386433623565373837353233366435346633313566623361653937306336
-6362383331643665300a393561643837376461326663663235343434363438623637306263626163
-38336162383331383732643765323763656130653432386534376335336338663663363439666361
-31306530666264323130333561356564626536643533356337383631613534383730666338313664
-34626261616430623063323836616130383335383965326239636362616531623565323734613532
-33313830663666633432666135346234643834316239633132383862393636623230316532616365
-30336564306336393064613330336436363631316236353237343838396637353735356461323331
-34343637336532373539663565666337383837373235613734303831376636303361376533346333
-32316430613936366464383832376237633036353737353566613638396236316664356638373635
-35303239353937316236323339633335373761623032313231383937306236303861306265646333
-65633638623065303761646562373936336235373533333265643534616663343538
+31393434663833363061653862663138393835663538346465383065323231616163343964303966
+3437316337383464323933306632393766386234366133360a313466356333343939396134333430
+38376636663234666534666637663638633766623034323164393234656365613437643738393833
+3466616536353935340a366165346464343863613133373739366534373835396436343138326532
+37376261383631366531333061353133643432623164633335373037393732366132346438326163
+32386639396661626431616463383165393035396139333336316263636236323130656534636237
+36636536613064393632343564343734626666323037303630623764316338346161373134656165
+64666133663364633064323763303964663964393139646663306334353435633839383164313734
+61373731356331336265663835346234323934656236646363663562396131336161663662393634
+65383761363763326366313063333337633039383830663066663261393464646437663366366565
+39366661653934626337656336306435363263373534323239353831343231303134613338623236
+63306464393031666666613530326138646535613534303365323965323466366131343236663030
+37323032656136383661333331363635643234333138626239383733336135333637353930316338
+6537303238333962313362376434383038666133376134383132

inventory/group_vars/drone

@@ -0,0 +1,22 @@
+drone_gitea_server: https://git.valczeryba.ovh
+drone_server_host: drone.valczeryba.ovh:8000
+drone_agents_enabled: true
+drone_server_proto: http
+drone_tls_autocert: false
+drone_open: false
+drone_host: http://localhost:8000
+drone_rpc_server: drone-server:8000
+
+msg: drone
+
+project_src: "/home/valentin/drone"
+
+project_directory: 
+  - "{{ project_src }}"
+
+project_env: env-drone.j2
+docker_compose_file: "docker-compose-drone.yml"
+
+ports_tcp:
+  - 8000
+  - 9000

inventory/group_vars/drone_vault

@@ -0,0 +1,18 @@
+$ANSIBLE_VAULT;1.1;AES256
+38303932316262306464333166316363643239366561323234643563623362336335613237376239
+3535393466323064333163363932663731663031663933350a323431653239396663343666373765
+31373066383234303139663135326462613539626363373930346366383831646536316465373563
+3537653761373233300a383637623932616663393763643066326238633932643730336339336330
+38366430336561613866373634313130616438313234666431396638366161613839303864353561
+35613234326539383765666637323236303161623061633164646430663834393764623931656638
+63336533383065343738373564393266653738656163643165383434623836666434646337336565
+32373261636363396363343236353336306331313761623531653834346536353039656564316138
+66643166653435666162383333366233353165393837303539646538353765653465363532346231
+65633365353131613437623663313934626461313437373730623164636364393362366537373162
+62363965323662356638633661363236326437353366356134346333313466323139336362363234
+62376262346338643339363566303339366165636566623565363238363736646637646635303531
+38343031666635323539353431316164353830363838313662613063616532623730346561333665
+33316137613666636439383364353735653535346537383831323333646238356534393935643435
+31643637323366616230633039336633313631316330323064306638663039393330376366633930
+65643861363231313033333662396339636432343133336561356438636233643762313539323166
+6261

inventory/group_vars/local

@@ -1,4 +1,20 @@
 project_terraform: "/home/valentin/terraform"
+project_backend: "/home/valentin/k8s_backend"
+project_kubeconfig: "/home/valentin/.kube/config"
 region_k8s: "fr-par"
-project_name: "terraform-test"
+project_name_tf: "terraform-test"
 quarkus_project: "covas-quarkus"
+
+mailer_host: "smtp.gmail.com"
+mailer_from: "valczebackup@gmail.com"
+mailer_port: "587"
+
+port: 8083
+targetPort: 8080
+
+
+backend_yaml:
+  - backend-deployment
+  - backend-service
+  - env-configmap
+  - secret

inventory/group_vars/local_vault

@@ -1,10 +1,46 @@
 $ANSIBLE_VAULT;1.1;AES256
-38396665356139383861356137373362393834373765663937373730333434356565383864333137
-3763386361323938326462393632346565386432336531620a616261656133323236343464303837
-39613966333435393336396361666337306438393138363961336462383666326363326439373762
-6139623462323133330a646432336365666164643435383430616137313130646137623463373636
-32313561383838366437633634376434616438633665363465626633633537383435616537336339
-64313836613730613135363739363536356362373762313431353938653738613666313966393163
-33336234363964633633663431353966666530353432643461656336356166393837316634313164
-65653033636338363563666363326433636163323363656530323834303464356136346163353466
-3533
+30356465363432393266326366393162306331353564346565663139336538613832396135306537
+6262336438613736636266623766333233336631656661640a663838373936613666373133383632
+32613962623330303964333161373165363164646266396461633233346136336630646631306564
+3939363432643961610a313338306136303132666461393637643235623361393830653534643137
+38623038613364396538353533336631633863343834333030653164303231346263316435356231
+61383966663834333662393138303035613330366533663037326532356332633839363763356466
+63396536323864383933346434363231396164613838316162656333626634373936643738386565
+32326532346334343666383632306264636132613266333863626462366530306439613130333564
+38623461613739343461386564323865316332653530623862313163396566616230653030653266
+61613836303231363534393531373233363332316639316137653132336638356161333764373562
+34363034353935633437353466303364653039626137383534633239316563373663623030646330
+38383639326563643266346530616666646337373765643336326536303864613363663536643465
+34343663373131323437666462303763366439356362306337356131383932353731393935343931
+32613333373439343864653864636438646431306637613038313061663961653033643465643864
+31333366663037373835326330316535326134393761333662326665333464666164623336666439
+35313066303830343737343063396335383461653338303734353461643736343163346565323864
+65356437376663386535646437653566326532346462313932346435393730366530646164323537
+35363633333065356162653762623239343836356230303734316130383234313536623339626531
+36643434336233626234333235636566313566353939616433373465666362316663353336653162
+32346534333665353934653738343335356137643539376639323164393837383065323436363064
+35643762656365313261373030336339616266333765613735346565623138366533626335633033
+38373732626337353535656230636235373535363332376535343162666266393931303236653631
+33653432633337306230396434316230663438363630313038386538663732393863633837313638
+31663763303462343063613638663361626462623035336465383661646433643833636361346236
+32386263326664363338633861643264383462313863666662623033323761613132666130353235
+34633261303761623033633964323862666137333035306333323932346334356365333563316630
+34313263306561303538353134613233313337323636623230616532383133613561333439663337
+64376230363038306238656236653366353738633436623330383239373062313831393066313838
+38653532356632383765613530373034396639633064383336393934353061656266633463336333
+66356538616233313936376565386432303134306363343734333563333266643062666231303532
+37363664396165653333656661376334333432376566666237316232643234386332323936346630
+63303563363162356666643732366131393066333838363935613336353062633862353838613761
+64333939663733643132366334653835633733623539393735313961613131303934363731663231
+64313434613934336630306165343665376261353562656634356365613137346232633431343734
+63363532313765646434346132313434373366656332353133383530306639633062633365613932
+65383865643262666666383933363534623838653661376531303763623261323937626335373635
+32623262343130383462316462643338363433653133353737633562353330313533303835666634
+65386336616466316663356236316466353164353139326333316362303737343335353731366531
+36653062323764316332353136343738616338313465333261363664663934393038343237313135
+64363036636634646137616365366538613338343761646137623432396539363035663031313464
+66646663373838316161643161613838343139346165663331373334383334316562353235633461
+65316666616334653034393165616434306664633336613639636433663761363932396663396630
+64383961623136623639306435663965303632663039653538646463663235653333306434313931
+32636536643536636561663534346633663464333830646139383939626665393964353739616435
+35663834393738646130316564633966653765303033356132393961653831646362

inventory/group_vars/nas_vault

@@ -1,6 +1,7 @@
 $ANSIBLE_VAULT;1.1;AES256
-35333863396561393462653263323133343233346534616138616530643066323161656534653738
-3335306466663636623236383435663337393466633437660a303961663331653463343933353966
-35636161393663386137306561613965653438626432323865323233636662653333616532636665
-3562333936366238640a646262373233363665366437653032303238313266356138343239303936
-36663531303061663763653637333365303664666563353631303435633462343537
+61643965343735653231363764646132363434653530346532343765663036376434353334356330
+6133383634643439353338383039653234303666306661350a636366343465356639646535663234
+31356434363130663961653638363463333330346561333933643263643362343132376131313764
+3439663335386235610a396435303138666166383363303038663163393538323362313965613933
+65666338653533386234336365316664313266326130313064653864386235323461303938386333
+3239646561363831643530633466613035643630363761326666

inventory/group_vars/registry

@@ -1,9 +1,10 @@
-
+msg: registry
 project_src: "/home/valentin/registry"
 
 project_directory:
   - "{{ project_src }}"
 
+
 docker_compose_file: "docker-compose-registry.yml"
 
 

inventory/hosts

@@ -1,10 +1,14 @@
-vps ansible_connection=ssh ansible_host=51.222.107.37 ansible_port=2424 ansible_user=valentin
+vps-host ansible_connection=ssh ansible_host=51.222.107.37 ansible_port=2424 ansible_user=valentin 
 valentin-nas ansible_connection=ssh ansible_host=151.80.37.38 ansible_port=2424 ansible_user=valentin
-localhost ansible_host=127.0.0.1
+drone-host ansible_connection=ssh ansible_host=151.80.37.38 ansible_port=2424 ansible_user=valentin
+localhost ansible_host=127.0.0.1 ansible_python_interpreter=/usr/bin/python3.10
 
-[db]
+[vps]
+vps-host
+
+[db:children]
+local
 vps
-localhost
 
 [db_vault:children]
 db
@@ -12,8 +16,16 @@ db
 [nas]
 valentin-nas
 
-[registry:children]
-nas
+ 
+[registry]
+valentin-nas
+
+
+[drone]
+drone-host
+
+[drone_vault:children]
+drone
 
 [nas_vault:children]
 nas

playbook.yml

@@ -1,9 +1,10 @@
 ---
-- hosts: registry db
+- hosts: registry vps
   remote_user: valentin
   roles:
     - server
 
+
 - hosts: local
   remote_user: valentin
   roles:

requirements.yml

@@ -1,7 +1,4 @@
-/home/valentin/.ansible/collections/ansible_collections:
-  community.docker:
-    version: 3.1.0
-/usr/lib/python3.10/site-packages/ansible_collections:
+collections:
   amazon.aws:
     version: 3.4.0
   ansible.netcommon:

scaleway-k8s/files/requierements.txt

@@ -0,0 +1 @@
+ovh

scaleway-k8s/tasks/create-build.yml

@@ -28,3 +28,33 @@
   template:
     src: "env-build.j2"
     dest: "{{ home_dir }}/{{ quarkus_project }}/.env"
+
+- name: Pause for build image 
+  pause:
+    prompt: aller au dossier {{ home_dir }}/{{ quarkus_project }}, et exécuter le script build-image.sh
+
+- name: Get quarkus image 
+  docker_image_info:
+    name: quarkus-native
+  register: result
+
+- name: Check quarkus image
+  assert:
+    that:
+      - result.images | length == 1
+
+- name: Login to scaleway registry
+  docker_login:
+    registry_url: rg.fr-par.scw.cloud/covas
+    username: nologin
+    password: "{{ token_scaleway }}"
+    reauthorize: true
+
+
+- name: Tag and push to custom registry
+  docker_image:
+     name: quarkus-native
+     repository: rg.fr-par.scw.cloud/covas/quarkus-native
+     tag: latest
+     push: yes
+     source: local

scaleway-k8s/tasks/deploy-backend.yml

@@ -0,0 +1,98 @@
+---
+# tasks file for create cluster k8s via terraform
+
+- name: Create directory {{ project_terraform }} 
+  file:
+    path: "{{ project_backend }}"
+    state: directory
+
+- name: Copy backend k8s yaml
+  template:
+    src: "{{ item }}.yaml.j2"
+    dest: "{{ project_backend }}/{{ item }}.yaml"
+  with_items: "{{ backend_yaml }}"
+
+- name: Create a k8s namespace
+  kubernetes.core.k8s:
+    name: testing
+    api_version: v1
+    kind: Namespace
+    state: present
+
+
+- name: Apply deployment
+  kubernetes.core.k8s:
+    src: "{{ project_backend }}/backend-deployment.yaml"
+    state: present
+
+- name: Apply services
+  kubernetes.core.k8s:
+    src: "{{ project_backend }}/backend-service.yaml"
+    state: present
+
+- name: Apply configmap
+  kubernetes.core.k8s:
+    src: "{{ project_backend }}/env-configmap.yaml"
+    state: present
+
+
+- name: Apply secret
+  kubernetes.core.k8s:
+    src: "{{ project_backend }}/secret.yaml"
+    state: present
+
+- name: En attente d'une adresse IP publique du cluster
+  ansible.builtin.pause:
+    minutes: 2
+
+- name: Get IP Cluster
+  block:
+    - name: Fetch services
+      set_fact:
+        service: "{{ query('kubernetes.core.k8s', kind='Service', namespace='testing') }}"
+      register: result
+
+    - name: debug services
+      debug:
+        msg: "{{ result.ansible_facts.service[0].status.loadBalancer.ingress[0].ip }}"
+
+    - name: Test API Backend
+      ansible.builtin.uri:
+        url: "http://{{ result.ansible_facts.service[0].status.loadBalancer.ingress[0].ip }}:{{ port }}/api/hello"
+        status_code: 200
+        method: GET
+  tags: ["services", "dns"]
+
+- name: Add DNS for IP Cluster
+  block:
+    - name: Copy script add or update DNS
+      template:
+        src: "dns_add_update.py.j2"
+        dest: "{{ project_backend }}/dns_add_update.py"
+    
+    - name: Copy requierements python
+      copy:
+        src: "requierements.txt"
+        dest: "{{ project_backend }}"
+    
+    - name: Pip install requierements
+      shell: "pip3.10 install -r {{ project_backend }}/requierements.txt"
+      
+    - name: En attente de l'installation des packages
+      ansible.builtin.pause:
+        minutes: 2
+        
+    - name: Add or update DNS
+      shell: "python3.10 {{ project_backend }}/dns_add_update.py --ip {{ result.ansible_facts.service[0].status.loadBalancer.ingress[0].ip }}"
+      register: result
+    
+    - name: Display result script
+      debug:
+        msg: "{{ result }}"
+        
+    - name: Test API Backend with DNS
+      ansible.builtin.uri:
+        url: "http://api.valczeryba.ovh:{{ port }}/api/hello"
+        status_code: 200
+        method: GET
+  tags: [ "dns" ]

scaleway-k8s/tasks/destroy-backend.yml

@@ -0,0 +1,42 @@
+---
+# tasks file for create cluster k8s via terraform
+
+- name: Apply deployment
+  kubernetes.core.k8s:
+    src: "{{ project_backend }}/backend-deployment.yaml"
+    state: absent
+
+- name: Apply services
+  kubernetes.core.k8s:
+    src: "{{ project_backend }}/backend-service.yaml"
+    state: absent
+
+- name: Apply configmap
+  kubernetes.core.k8s:
+    src: "{{ project_backend }}/env-configmap.yaml"
+    state: absent
+
+
+- name: Apply secret
+  kubernetes.core.k8s:
+    src: "{{ project_backend }}/secret.yaml"
+    state: absent
+
+
+- name: Create a k8s namespace
+  kubernetes.core.k8s:
+    name: testing
+    api_version: v1
+    kind: Namespace
+    state: absent
+
+
+- name: Create directory {{ project_terraform }} 
+  file:
+    path: "{{ project_backend }}"
+    state: absent
+
+
+
+
+

scaleway-k8s/tasks/kubeconfig.yml

@@ -16,6 +16,10 @@
     method: GET
     headers:
       X-Auth-Token: "{{ scw_secret_key }}"
-  when: item.name == "{{ project_name }}"
+  when: item.name == "{{ project_name_tf }}"
   with_items: "{{ (output.content |from_json).clusters }}"
 
+- name: Copy kubeconfig
+  copy:
+    src: "{{ project_terraform }}/kubeconfig"
+    dest: "{{ project_kubeconfig }}"

scaleway-k8s/tasks/main.yml

@@ -1,15 +1,24 @@
 - name: Create folder for image
-  ansible.builtin.import_tasks: create-build.yml
+  import_tasks: create-build.yml
   tags: ["create-build"]
 
 - name: Create cluster k8s scaleway via terraform
-  ansible.builtin.import_tasks: create-cluster.yml
+  import_tasks: create-cluster.yml
   tags: ["create-cluster"]
 
 - name: Get id Cluster
-  ansible.builtin.import_tasks: kubeconfig.yml
+  import_tasks: kubeconfig.yml
   tags: ["create-cluster", "kubeconfig"]
 
+- name: Deploy a API backend
+  import_tasks: deploy-backend.yml
+  tags: ["deploy"] 
+
+- name: Deploy a API backend
+  import_tasks: destroy-backend.yml
+  tags: ["destroy"]  
+
+
 - name: Destroy cluster k8s scaleway via terraform
-  ansible.builtin.import_tasks: destroy-cluster.yml
+  import_tasks: destroy-cluster.yml
   tags: ["destroy-cluster"]

scaleway-k8s/templates/backend-deployment.yaml.j2

@@ -0,0 +1,98 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  annotations:
+    kompose.cmd: kompose convert -f ../docker-compose.yml
+    kompose.version: 1.26.0 (40646f47)
+  creationTimestamp: null
+  labels:
+    io.kompose.service: backend
+  name: backend
+  namespace: testing
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      io.kompose.service: backend
+  strategy: {}
+  template:
+    metadata:
+      annotations:
+        kompose.cmd: kompose convert -f ../docker-compose.yml
+        kompose.version: 1.26.0 (40646f47)
+      creationTimestamp: null
+      labels:
+        io.kompose.service: backend
+    spec:
+      imagePullSecrets:
+        - name: regcred
+      containers:
+        - env:
+            - name: POSTGRES_DB
+              valueFrom:
+                configMapKeyRef:
+                  key: POSTGRES_DB
+                  name: env
+            - name: POSTGRES_PASSWORD
+              valueFrom:
+                configMapKeyRef:
+                  key: POSTGRES_PASSWORD
+                  name: env
+            - name: POSTGRES_PORT
+              valueFrom:
+                configMapKeyRef:
+                  key: POSTGRES_PORT
+                  name: env
+            - name: POSTGRES_URL
+              valueFrom:
+                configMapKeyRef:
+                  key: POSTGRES_URL
+                  name: env
+            - name: POSTGRES_USER
+              valueFrom:
+                configMapKeyRef:
+                  key: POSTGRES_USER
+                  name: env
+            - name: REDIS_PORT
+              valueFrom:
+                configMapKeyRef:
+                  key: REDIS_PORT
+                  name: env
+            - name: REDIS_URL
+              valueFrom:
+                configMapKeyRef:
+                  key: REDIS_URL
+                  name: env
+            - name: MAILER_FROM
+              valueFrom:
+                configMapKeyRef:
+                  key: MAILER_FROM
+                  name: env
+            - name: MAILER_HOST
+              valueFrom:
+                configMapKeyRef:
+                  key: MAILER_HOST
+                  name: env
+            - name: MAILER_PORT
+              valueFrom:
+                configMapKeyRef:
+                  key: MAILER_PORT
+                  name: env
+            - name: MAILER_USERNAME
+              valueFrom:
+                configMapKeyRef:
+                  key: MAILER_USERNAME
+                  name: env
+            - name: MAILER_PASSWORD
+              valueFrom:
+                configMapKeyRef:
+                  key: MAILER_PASSWORD
+                  name: env
+          image: rg.fr-par.scw.cloud/covas/quarkus-native
+          name: backend
+          
+          ports:
+            - containerPort: 8080
+          resources: {}
+      restartPolicy: Always
+status: {}

scaleway-k8s/templates/backend-service.yaml.j2

@@ -0,0 +1,21 @@
+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+    kompose.cmd: kompose convert -f ../docker-compose.yml
+    kompose.version: 1.26.0 (40646f47)
+  creationTimestamp: null
+  labels:
+    io.kompose.service: backend
+  name: backend
+  namespace: testing
+spec:
+  ports:
+    - name: "{{ port }}"
+      port: {{ port }}
+      targetPort: {{ targetPort }}
+  type: LoadBalancer
+  selector:
+    io.kompose.service: backend
+status:
+  loadBalancer: {}

scaleway-k8s/templates/dns_add_update.py.j2

@@ -0,0 +1,49 @@
+# -*- encoding: utf-8 -*-
+'''
+First, install the latest release of Python wrapper: $ pip install ovh
+'''
+import json
+import ovh
+import argparse
+
+parser = argparse.ArgumentParser()
+parser.add_argument('--ip', help='foo help')
+args = parser.parse_args()
+
+# Instanciate an OVH Client.
+# You can generate new credentials with full access to your account on
+# the token creation page
+client = ovh.Client(
+    endpoint='ovh-eu',               # Endpoint of API OVH Europe (List of available endpoints)
+    application_key='{{ application_key }}',    # Application Key
+    application_secret='{{ application_secret }}', # Application Secret
+    consumer_key='{{ consumer_key }}',       # Consumer Key
+)
+
+result = client.get('/domain/zone/valczeryba.ovh/record', 
+    fieldType='A', 
+    subDomain='api', 
+)
+
+# Pretty print
+
+if len(result) > 0:
+    for idDns in result:
+        result = client.get('/domain/zone/valczeryba.ovh/record/{0}'.format(idDns))
+        if result["target"] != args.ip:
+            result = client.put('/domain/zone/valczeryba.ovh/record/{0}'.format(idDns), 
+                subDomain='api',
+                target=args.ip,
+            )
+        print(result)
+
+
+        
+else:
+    result = client.post('/domain/zone/valczeryba.ovh/record', 
+    fieldType='A', 
+    subDomain='api',
+    target=args.ip, 
+    ttl=None,
+    )
+    print(result)

scaleway-k8s/templates/env-build.j2

@@ -5,3 +5,10 @@ POSTGRES_URL={{ postgres_url }}
 POSTGRES_PORT={{ postgres_port }}
 REDIS_URL={{ redis_url }}
 REDIS_PORT={{ redis_port }}
+
+
+MAILER_FROM={{ mailer_from }}
+MAILER_HOST={{ mailer_host }}
+MAILER_PORT={{ mailer_port }}
+MAILER_USERNAME={{ mailer_username }}
+MAILER_PASSWORD={{ mailer_password }}

scaleway-k8s/templates/env-configmap.yaml.j2

@@ -0,0 +1,22 @@
+apiVersion: v1
+data:
+  POSTGRES_DB: {{ postgres_db }}
+  POSTGRES_PASSWORD: {{ postgres_password }}
+  POSTGRES_PORT: "{{ postgres_port }}"
+  POSTGRES_URL: {{ postgres_url }}
+  POSTGRES_USER: {{ postgres_user }}
+  REDIS_PORT: "{{ redis_port }}"
+  REDIS_URL: {{ redis_url }}
+  MAILER_FROM: {{ mailer_from }}
+  MAILER_HOST: {{ mailer_host }}
+  MAILER_PORT: "{{ mailer_port }}"
+  MAILER_USERNAME: {{ mailer_username }}
+  MAILER_PASSWORD: {{ mailer_password }}
+kind: ConfigMap
+metadata:
+  creationTimestamp: null
+  labels:
+    io.kompose.service: backend-env
+  name: env
+  namespace: testing
+

scaleway-k8s/templates/main.tf.j2

@@ -8,8 +8,8 @@ terraform {
 }
 
 
- resource "scaleway_k8s_cluster" "{{ project_name }}" {
-   name    = "{{ project_name }}"
+ resource "scaleway_k8s_cluster" "{{ project_name_tf }}" {
+   name    = "{{ project_name_tf }}"
    version = "1.24.3"
    cni     = "cilium"
    project_id = "{{ project_id }}"
@@ -17,7 +17,7 @@ terraform {
  }
 
  resource "scaleway_k8s_pool" "john" {
-   cluster_id = scaleway_k8s_cluster.{{ project_name }}.id
+   cluster_id = scaleway_k8s_cluster.{{ project_name_tf }}.id
    name       = "john"
    node_type  = "DEV1-M"
    size       = 1
@@ -26,9 +26,9 @@ terraform {
  resource "null_resource" "kubeconfig" {
   depends_on = [scaleway_k8s_pool.john] # at least one pool here
   triggers = {
-    host                   = scaleway_k8s_cluster.{{ project_name }}.kubeconfig[0].host
-    token                  = scaleway_k8s_cluster.{{ project_name }}.kubeconfig[0].token
-    cluster_ca_certificate = scaleway_k8s_cluster.{{ project_name }}.kubeconfig[0].cluster_ca_certificate
+    host                   = scaleway_k8s_cluster.{{ project_name_tf }}.kubeconfig[0].host
+    token                  = scaleway_k8s_cluster.{{ project_name_tf }}.kubeconfig[0].token
+    cluster_ca_certificate = scaleway_k8s_cluster.{{ project_name_tf }}.kubeconfig[0].cluster_ca_certificate
   }
 }
 

scaleway-k8s/templates/secret.yaml.j2

@@ -0,0 +1,10 @@
+apiVersion: v1
+data:
+  .dockerconfigjson: {{ dockerconfigjson }}
+kind: Secret
+metadata:
+  creationTimestamp: "2022-11-26T19:19:41Z"
+  name: regcred
+  namespace: testing
+  uid: {{ uid_secret }}
+type: kubernetes.io/dockerconfigjson

server/files/docker-compose-drone.yml

@@ -0,0 +1,51 @@
+version: '3.5'
+
+services:
+  drone-server:
+    image: drone/drone:2
+    ports:
+      - 8000:80
+      - 9000:443
+    networks:
+      - drone
+    volumes:
+      - ./drone-data:/var/lib/drone/
+      - /var/run/docker.sock:/var/run/docker.sock
+    env_file:
+      - .env
+    restart: always
+    environment:
+      - DRONE_GITHUB_SKIP_VERIFY=true
+      - DRONE_AGENTS_ENABLED=true
+      - DRONE_SERVER_PROTO=http
+      - DRONE_TLS_AUTOCERT=false
+      - DRONE_OPEN=false
+      - DRONE_HOST=http://drone.valczeryba.ovh:8000
+      - DRONE_GITHUB=true
+      # Variables below set via drone.env file
+      # - DRONE_USER_CREATE=
+      # - DRONE_USER_FILTER=
+      # - DRONE_GITHUB_CLIENT_ID=
+      # - DRONE_GITHUB_CLIENT_SECRET=
+      # - DRONE_RPC_SECRET=
+
+  drone-agent:
+    image: drone/agent:1.2.1
+    command: agent
+    restart: always
+    depends_on:
+      - drone-server
+    networks:
+      - drone
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+    env_file:
+      - .env
+    environment:
+      - DRONE_RPC_SERVER=drone-server:8000
+      # Variables below set via drone.env file
+      # - DRONE_RPC_SECRET=
+
+networks:
+  drone:
+    name: drone_network

server/files/docker-compose-registry.yml

@@ -7,5 +7,6 @@ services:
     - "5000:5000"
     environment:
       REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY: /data
+    
     volumes:
       - ./data:/data    

server/tasks/debug.yml

@@ -0,0 +1,3 @@
+- name: debug
+  debug:
+    msg: "coucou {{ msg }}"

server/tasks/main.yml

@@ -1,19 +1,24 @@
 ---
 # tasks file for server
 
+
+- name: Debug role
+  import_tasks: debug.yml
+  tags: ["debug"]
+
 - name: Deploy services
-  ansible.builtin.import_tasks: deploy.yml
-  tags: ["deploy", "create"]
+  import_tasks: deploy.yml
+  tags: ["configure", "create"]
 
 - name: Start services
-  ansible.builtin.import_tasks: start.yml
-  tags: ["deploy", "start"]
+  import_tasks: start.yml
+  tags: ["configure", "start"]
 
 
 - name: stop services
-  ansible.builtin.import_tasks: stop.yml
-  tags: ["destroy", "stop"]
+  import_tasks: stop.yml
+  tags: ["deconfigure", "stop"]
 
 - name: Remove services
-  ansible.builtin.import_tasks: remove.yml
-  tags: ["destroy"]
+  import_tasks: remove.yml
+  tags: ["deconfigure"]

server/tasks/remove.yml

@@ -16,3 +16,7 @@
   file:
     path: "{{ project_src }}"
     state: absent
+  vars:
+    ansible_become: yes
+    ansible_become_method: sudo
+    ansible_become_password: "{{ sudo_password }}"

server/templates/env-drone.j2

@@ -0,0 +1,8 @@
+# Drone secret key, used for private communication between agents and web UI
+DRONE_USER_CREATE=
+DRONE_USER_FILTER= {{ drone_user_filter }}
+DRONE_GITEA_SERVER={{ drone_gitea_server }}
+DRONE_GITEA_CLIENT_ID={{ drone_gitea_client_id }}
+DRONE_GITEA_CLIENT_SECRET={{ drone_gitea_client_secret }}
+DRONE_RPC_SECRET={{ drone_rpc_secret }}
+DRONE_SERVER_HOST={{ drone_server_host }}