bvandeusen
42f7840c26
Extend the playbook metadata convention with a namespaced `# steward:<key>:` comment block: - steward:category — free-text grouping label, shown as a badge in the browse list and on the run form. - steward:confirm — true/yes/1/on marks a playbook destructive; the run form then requires a confirmation tick (required checkbox in the shared vars fragment) before it can launch. sources.discover_playbook_meta() parses description + category + confirm (first match per key; `# description:` still primary, `# steward:description:` alias). discover_playbook_description() now delegates to it. The browse list reads per-playbook meta to show category badges + descriptions; the run-form and playbook-vars fragments render the badge + confirm gate. Bundled playbooks tagged: docker_prune → category maintenance + confirm true; provision/install/update → category host-agent. Docs: docs/reference/playbook-authoring.md updated (keys now implemented) and a quick reference added next to the code at steward/ansible/PLAYBOOK_CONVENTIONS.md. Tests added for category/confirm/alias parsing. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
50 lines
1.8 KiB
YAML
50 lines
1.8 KiB
YAML
---
|
|
# description: Update the Steward host agent (refresh agent.py + restart) on hosts already running it.
|
|
# steward:category: host-agent
|
|
# Update an already-installed Steward host agent: refresh agent.py and restart.
|
|
#
|
|
# Deliberately does NOT touch the registration token or /etc/steward-agent.conf
|
|
# — the host already has a working token, so an update leaves identity alone and
|
|
# only swaps the agent binary. Connects as the managed `steward` account (set
|
|
# globally as the SSH user); no bootstrap password or token injection needed.
|
|
#
|
|
# For a fresh host with no agent, use provision.yml (new host) or install.yml
|
|
# (already-provisioned host) instead — those mint and install the token.
|
|
- name: Update Steward host agent
|
|
hosts: all
|
|
become: true
|
|
gather_facts: false
|
|
vars:
|
|
steward_url: ""
|
|
tasks:
|
|
- name: Require steward_url
|
|
ansible.builtin.assert:
|
|
that:
|
|
- steward_url | length > 0
|
|
fail_msg: "Pass steward_url as an extra-var (the Update action sets it)."
|
|
|
|
- name: Confirm the agent is already installed
|
|
ansible.builtin.stat:
|
|
path: /usr/local/lib/steward-agent/agent.py
|
|
register: agent_file
|
|
|
|
- name: Fail clearly if the agent is missing
|
|
ansible.builtin.fail:
|
|
msg: "No agent at /usr/local/lib/steward-agent — provision or install this host first."
|
|
when: not agent_file.stat.exists
|
|
|
|
- name: Refresh agent.py
|
|
ansible.builtin.get_url:
|
|
url: "{{ steward_url }}/plugins/host_agent/agent.py"
|
|
dest: /usr/local/lib/steward-agent/agent.py
|
|
mode: "0755"
|
|
force: true
|
|
notify: restart steward-agent
|
|
|
|
handlers:
|
|
- name: restart steward-agent
|
|
ansible.builtin.systemd:
|
|
name: steward-agent
|
|
state: restarted
|
|
daemon_reload: true
|