Merge remote-tracking branch 'origin/layers-secrets-share'

.gitignore

@@ -1,6 +1,7 @@
 .vagrant/
 .venv/
 build/
+metal/secrets/
 
 *.log
 .terraform*

infra/Makefile

@@ -6,7 +6,9 @@ init:
 	terraform init
 
 plan:
-	terraform plan
+	source ../metal/secrets/env \
+	&& terraform plan
 
 apply:
-	terraform apply
+	source ../metal/secrets/env \
+	&& terraform apply

metal/roles/lxd/tasks/main.yml

@@ -35,22 +35,18 @@
     creates: /var/snap/lxd/common/lxd/server.crt
   when: inventory_hostname != groups['metal'][0]
 
-# - name: Add remote
+- name: Add LXD server to environment variables
-#   command:
+  lineinfile:
-#     argv:
+    path: "{{ playbook_dir }}/secrets/env"
-#       - lxc
+    line: "LXD_ADDR={{ hostvars[groups['metal'][0]]['ansible_host'] }}"
-#       - remote
+    create: yes
-#       - add
+  delegate_to: localhost
-#       - vagrant
+  run_once: yes
-#       - "{{ hostvars[groups['metal'][0]]['ansible_host'] }}"
-#       - --accept-certificate
-#       - --password
-#       - 1
 
-# - name: Change default remote
+- name: Add LXD password to environment variables
-#   command:
+  lineinfile:
-#     argv:
+    path: "{{ playbook_dir }}/secrets/env"
-#       - lxc
+    line: "LXD_PASSWORD={{ lxd_password }}"
-#       - remote
+    create: yes
-#       - switch
+  delegate_to: localhost
-#       - vagrant
+  run_once: yes

metal/roles/lxd/templates/env

@@ -0,0 +1,2 @@
+LXD_ADDR={{ hostvars[groups['metal'][0]]['ansible_host'] }}
+LXD_PASSWORD={{ lxd_password }}