hkblh

Author: EnricoBausenhart

.github/workflows/terraform-deploy.yml

@@ -59,26 +59,16 @@ jobs:
           python -m pip install --upgrade pip
           pip install ansible
 
-      - name: Create Inventory File
+      - name: Create SSH Key File
         run: |
           cd infrastructure/ansible
-          cat > inventory.yml << EOF
-          all:
-            hosts:
-              app_server:
-                ansible_host: ${{ steps.terraform.outputs.public_ip }}
-                ansible_user: ubuntu
-                ansible_ssh_private_key: ${{ secrets.AWS_EC2_PRIVATE_KEY }}
-                ansible_ssh_common_args: '-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null'
-          EOF
-          echo "=== Inventory File Contents ==="
-          cat inventory.yml
-          echo "=== End Inventory File ==="
+          echo "${{ secrets.AWS_EC2_PRIVATE_KEY }}" > vockey.pem
+          chmod 600 vockey.pem
 
       - name: Run Ansible Playbook
         run: |
           cd infrastructure/ansible
           echo "=== Testing SSH Connection ==="
-          ssh -i <(echo "${{ secrets.AWS_EC2_PRIVATE_KEY }}") -o StrictHostKeyChecking=no ubuntu@${{ steps.terraform.outputs.public_ip }} "echo 'SSH connection successful'"
+          ssh -i vockey.pem -o StrictHostKeyChecking=no ubuntu@${{ steps.terraform.outputs.public_ip }} "echo 'SSH connection successful'"
           echo "=== Running Ansible Playbook ==="
-          ANSIBLE_HOST_KEY_CHECKING=False ansible-playbook -i inventory.yml playbooks/deploy.yml -vvv
+          ANSIBLE_HOST_KEY_CHECKING=False ansible-playbook -i inventory.yml playbooks/deploy.yml -vvv --extra-vars "ansible_host=${{ steps.terraform.outputs.public_ip }}"

infrastructure/ansible/inventory.yml

@@ -1,7 +1,7 @@
 all:
   hosts:
     app_server:
-      ansible_host: "{{ lookup('env', 'EC2_PUBLIC_IP') }}"
+      ansible_host: "{{ ansible_host }}"
       ansible_user: ubuntu
-      ansible_ssh_private_key: "{{ lookup('env', 'AWS_EC2_PRIVATE_KEY') }}"
+      ansible_ssh_private_key_file: vockey.pem
       ansible_ssh_common_args: "-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null"