---
kind: pipeline
type: docker
name: run updates

steps:
- name: setup ansible
  image: alpine
  environment:
    PASS:
      from_secret: pass
    KEY:
      from_secret: key
  commands:
  - sed -i "1s/^/[all:vars]\nansible_become_pass = $PASS\n/" servers.ini
  - echo "$KEY" > id_rsa

- name: run updates
  image: plugins/ansible
  settings:
    inventory: servers.ini
    playbook: site.yml
    tags: update
    verbose: 4
    ssh_common_args: -o "StrictHostKeyChecking no"
    private_key: id_rsa