test.yml

---
name: Test

on:
  push:
    branch:
      - "devops/fix*"

permissions:
  id-token: write
  contents: read

env:
  CARGO_TERM_COLOR: always

jobs:
  Ansible:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install Ansible
        run: |
          sudo apt update
          sudo apt install software-properties-common
          sudo add-apt-repository --yes --update ppa:ansible/ansible
          sudo apt install ansible

      - name: Install boto
        run: |
           pipx inject ansible-core boto3
           pipx inject ansible-core botocore

      - name: configure aws credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          audience: sts.amazonaws.com.
          role-to-assume: arn:aws:iam::381491931967:role/GitHubAction-EC2-RO
          role-session-name: deploy-role-session
          aws-region: us-east-2

      - name: Prepare ssh key
        shell: bash
        env:
          SSH_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
        run: |
          mkdir ~/.ssh
          chmod 700 ~/.ssh
          echo $SSH_KEY > ~/.ssh/glove.prv
          chmod 600 ~/.ssh/glove.prv

      - name: Run Ansible
        uses: dawidd6/action-ansible-playbook@v2
        with:
          playbook: glove.yml
          directory: devops/ansible
          configuration: |
            [defaults]
            inventory = inventory_aws_ec2.yml
          key: ${{ secrets.SSH_PRIVATE_KEY }}
          options: |
            --inventory inventory_aws_ec2.yml