develop_branch.yml

---
name: Hayaworld Ansible Jobs (Develpoment Branches)
on:
  push:
    branches:
      - '**'
      - '!master'
  workflow_dispatch:

jobs:
  Yamllint:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Run YAML Lint
        run: yamllint --strict --format github .

  AnsibleLint:
    runs-on: self-hosted
    container:
      image: ghcr.io/ansible/community-ansible-dev-tools:latest
      credentials:
        username: "${{ secrets.GHCR_USERNAME }}"
        password: "${{ secrets.GHCR_PASSWORD }}"
      volumes:
        - ansible-galaxy:/github/home/.ansible
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Prepare environments (ansible-galaxy install role)
        run: |
          ansible-galaxy role install -r requirements.yml --ignore-errors

      - name: Prepare environments (ansible-galaxy install collection)
        run: |
          ansible-galaxy collection install -r requirements.yml --ignore-errors

      - name: Run Ansible-lint
        run: |
          ansible-lint

  Duplicate_Check:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Add exec flag to dupcheck.sh
        run: "chmod +x ./dupcheck.sh"

      - name: NXDOMAIN_Duplicate_Check
        run: >
          "./dupcheck.sh"
          "inventories/host_vars/dns/NXDOMAIN.yml"

  Dry_Run_ansible:
    needs:
      - Yamllint
      - AnsibleLint
      - Duplicate_Check
    runs-on: self-hosted
    strategy:
      fail-fast: false
      matrix:
        vm:
          - console
          - dockerservice
          - jenkins
          - mariadb
          - rui
          - runner03
          - skylark
          - tm
    environment: Staging
    container:
      image: ghcr.io/ansible/community-ansible-dev-tools:latest
      volumes:
        - /home/runner/ansible-vault:/tmp:ro
        - /home/runner/.ssh:/root/.ssh:ro
        - ansible-galaxy:/github/home/.ansible
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          submodules: "recursive"

      - name: Prepare environments (ansible-galaxy install role)
        run: |
          ansible-galaxy role install -r requirements.yml --ignore-errors

      - name: Prepare environments (ansible-galaxy install collection)
        run: |
          ansible-galaxy collection install -r requirements.yml --ignore-errors

      - name: "ansible-playbook -C"
        env:
          ANSIBLE_FORCE_COLOR: '1'
        run: |
          ansible-playbook \
            -i inventories \
            -C \
            --ssh-extra-args='-o StrictHostKeyChecking=no' \
            --vault-password-file /tmp/${{ secrets.VAULT_PASSWORD_FILE }} \
            --extra-vars "ansible_sudo_pass=${{ secrets.SUDO }}" \
            ${{ matrix.vm }}.yml