A Concourse CI resource for running Ansible playbooks.

The resource image contains the latest version of ansible, installed by pip, as of when the image was created. It runs ansible with python 3. See the Dockerfile for other supplied system and pip packages.

See Docker Hub for tagged image versions available.

Most source attributes map directly to ansible-playbook options. See the ansible-playbook --help for further details.

The git_* attributes are relevant to referencing git repositories in the requirements.yml file which are pulled from during ansible-galaxy install.

• debug: Optional. Boolean. Default false. Echo commands and other normally-hidden outputs useful for troubleshooting.
• env: Optional. A list of environment variables to apply. Useful for supplying task configuration dependencies like AWS_ACCESS_KEY_ID, for example, or specifying ansible configuration options that are unsupported by this resource. Note: Unsupported ansible configurations can also be applied in ansible.cfg in the playbook source.
• git_global_config: Optional. A list of git global configurations to apply (with git config --global).
• git_https_username: Optional. The username for git http/s access.
• git_https_password: Optional. The password for git http/s access.
• git_private_key: Optional. The git ssh private key.
• git_skip_ssl_verification: Optional. Boolean. Default false. Don't verify TLS certificates.
• user: Optional. Connect to the remote system with this user.
• requirements: Optional. Default requirements.yml. If this file is present in the playbook source directory, it is used with ansible-galaxy --install before running the playbook.
• ssh_common_args: Optional. Specify options to pass to ssh.
• ssh_private_key: Optional. The ssh private key with which to connect to the remote system.
• vault_password: Optional. The value of the ansible-vault password.
• verbose: Optional. Specify, v, vv, etc., to increase the verbosity of the ansible-playbook execution.

resource_types:
- name: ansible-playbook
  type: docker-image
  source:
    repository: troykinsella/concourse-ansible-playbook-resource
    tag: latest

resources:
- name: ansible
  type: ansible-playbook
  source:
    debug: false
    user: ubuntu
    ssh_private_key: ((ansible_ssh_private_key))
    vault_password: ((ansible_vault_password))
    verbose: v

Execute ansible-playbook against a given playbook and inventory file, firstly installing dependencies with ansible-galaxy install -r requirements.yml if necessary.

Prior to running ansible-playbook, if an ansible.cfg file is present in the path directory, it is sanitized by removing entries for which the equivalent command line options are managed by this resource. The result of this sanitization can be seen by setting source.debug: true.

Most parameters map directly to ansible-playbook options. See the ansible-playbook --help for further details.

• become: Optional. Boolean. Default false. Run operations as become (privilege escalation).
• become_user: Optional. Run operations with this user.
• become_method: Optional. Privilege escalation method to use.
• check: Optional. Boolean. Default false. Don't make any changes; instead, try to predict some of the changes that may occur.
• diff: Optional. Boolean. Default false. When changing (small) files and templates, show the differences in those files; works great with check: true.
• inventory: Required. The path to the inventory file to use, relative to path.
• limit: Optional. Limit the playbook run to provided hosts/groups.
• playbook: Optional. Default site.yml. The path to the playbook file to run, relative to path.
• skip_tags: Optional. Only run plays and tasks not tagged with this list of values.
• setup_commands: Optional. A list of shell commands to run before executing the playbook. See the Custom Setup Commands section for explanation.
• tags: Optional. Only run plays and tasks tagged with this list of values.
• vars: Optional. An object of extra variables to pass to ansible-playbook. Mutually exclusive with vars_file.
• vars_file: Optional. A file containing a JSON object of extra variables to pass to ansible-playbook. Mutually exclusive with vars.
• path: Required. The path to the directory containing playbook sources. This typically will point to a resource pulled from source control.

As there are a myriad of Ansible modules, each of which having specific system dependencies, it becomes untenable for all of them to be supported by this resource Docker image. The setup_commands parameter of the put operation allows the pipeline manager to install system packages known to be depended upon by the particular playbooks being executed. Of course, this flexibility comes at the cost of having to execute the commands upon every put. That said, this Concourse resource does intend to supply a set of dependencies out of the box to support the most common or basic Ansible modules. Please open a ticket requesting the addition of a system package if it can be rationalized that it will benefit a wide variety of use cases.

# Extends example in Source Configuration

jobs:
- name: provision-frontend
  plan:
  - get: master # git resource
  - put: ansible
    params:
      check: true
      diff: true
      inventory: inventory/some-hosts.yml
      playbook: site.yml
      path: master

docker build .

MIT © Troy Kinsella