mirror of
https://github.com/trailofbits/algo.git
synced 2026-08-17 21:25:50 +02:00
984831bcab
* fix: add explicit bool filters for Ansible 12 jinja2_native compatibility Ansible 12 enables jinja2_native by default, which means string values like "true"/"false" are no longer automatically coerced to booleans in when: conditions and Jinja2 if statements. Add | bool filters to all boolean variable references in tasks, templates, and handlers. Also reformats long single-line Jinja2 conditionals into multi-line for readability, fixes GCE default() calls for native mode, adds help command to the algo script, and updates test fixtures to register the bool filter. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * ci: add j2lint for Jinja2 template linting Add j2lint (aristanetworks/j2lint) to catch syntax errors, spacing issues, and operator formatting in Jinja2 templates. Integrated into pre-commit hooks, lint.yml CI, and smart-tests.yml. Rules S3/S5/S6/S7/V1 are ignored — they enforce conventions incompatible with Ansible's config-file-embedded templates. Also fixes int+1 → int + 1 operator spacing in server.conf.j2. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix: resolve all ansible-lint warnings and enforce zero-tolerance policy Fix 18 jinja[spacing] errors across 12 files by moving Jinja2 block delimiters to prevent YAML >- folding from introducing trailing spaces. Fix 27 key-order[task] warnings across 17 files by reordering task keys to canonical order (name → when → tags → environment → become → block). Promote key-order[task] and yaml[line-length] from warn_list to hard errors by removing warn_list entirely from .ansible-lint. Add zero-tolerance warning policy to CLAUDE.md explaining why warnings are unacceptable in a security tool and documenting resolution order. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
76 lines
2.5 KiB
YAML
76 lines
2.5 KiB
YAML
---
|
|
- name: Include prompts
|
|
import_tasks: prompts.yml
|
|
|
|
- environment:
|
|
SCW_TOKEN: "{{ algo_scaleway_token }}"
|
|
block:
|
|
- name: Get Ubuntu 22.04 image ID from Scaleway Marketplace API
|
|
uri:
|
|
url: "https://api-marketplace.scaleway.com/images?arch={{ cloud_providers.scaleway.arch }}&include_eol=false"
|
|
method: GET
|
|
return_content: true
|
|
register: marketplace_images
|
|
|
|
- name: Find Ubuntu 22.04 Jammy image
|
|
set_fact:
|
|
scaleway_image_id: >-
|
|
{{ (marketplace_images.json.images |
|
|
selectattr('name', 'match', '.*Ubuntu.*22\\.04.*Jammy.*') |
|
|
first).versions[0].local_images |
|
|
selectattr('zone', 'equalto', algo_region) |
|
|
map(attribute='id') | first }}
|
|
|
|
- name: Create a server
|
|
scaleway_compute:
|
|
name: "{{ algo_server_name }}"
|
|
enable_ipv6: true
|
|
public_ip: dynamic
|
|
boot_type: local
|
|
state: present
|
|
image: "{{ scaleway_image_id }}"
|
|
project: "{{ algo_scaleway_org_id }}"
|
|
region: "{{ algo_region }}"
|
|
commercial_type: "{{ cloud_providers.scaleway.size }}"
|
|
wait: true
|
|
tags:
|
|
- Environment:Algo
|
|
- AUTHORIZED_KEY={{ lookup('file', SSH_keys.public) | regex_replace(' ', '_') }}
|
|
register: scaleway_compute
|
|
|
|
- name: Patch the cloud-init
|
|
uri:
|
|
url: https://cp-{{ algo_region }}.scaleway.com/servers/{{ scaleway_compute.msg.id }}/user_data/cloud-init
|
|
method: PATCH
|
|
body: "{{ lookup('template', 'files/cloud-init/base.yml') }}"
|
|
status_code: 204
|
|
headers:
|
|
Content-Type: text/plain
|
|
X-Auth-Token: "{{ algo_scaleway_token }}"
|
|
|
|
- name: Start the server
|
|
scaleway_compute:
|
|
name: "{{ algo_server_name }}"
|
|
enable_ipv6: true
|
|
public_ip: dynamic
|
|
boot_type: local
|
|
state: running
|
|
image: "{{ scaleway_image_id }}"
|
|
project: "{{ algo_scaleway_org_id }}"
|
|
region: "{{ algo_region }}"
|
|
commercial_type: "{{ cloud_providers.scaleway.size }}"
|
|
wait: true
|
|
tags:
|
|
- Environment:Algo
|
|
- AUTHORIZED_KEY={{ lookup('file', SSH_keys.public) | regex_replace(' ', '_') }}
|
|
register: algo_instance
|
|
until: algo_instance.msg.public_ip
|
|
retries: 3
|
|
delay: 3
|
|
|
|
- set_fact:
|
|
cloud_instance_ip: "{{ algo_instance.msg.public_ip.address }}"
|
|
ansible_ssh_user: algo
|
|
ansible_ssh_port: "{{ ssh_port }}"
|
|
cloudinit: true
|