Files
FabledSteward/steward/templates/ansible/playbook_editor.html
T
bvandeusen c10eae1c74
CI / lint (push) Successful in 2s
CI / unit (push) Successful in 7s
CI / integration (push) Successful in 2m17s
CI / publish (push) Successful in 1m6s
feat(ansible): in-app playbook authoring/editor
Adds create/edit/delete of playbooks from the UI (admin only), so a homelab
user without a git workflow can author automation in-app. A new always-present
writable local source "steward-local" (/data/ansible/playbooks, env-overridable,
created on first save) is editable alongside operator local-dir sources; the
bundled and git sources stay read-only (git is GitOps, clobbered on pull).

sources.py: write_playbook / delete_playbook (traversal-guarded, .yml/.yaml
only) + validate_playbook_yaml (YAML + play-list check) + is_editable_source.
routes.py: /playbooks/new, /edit, /save, /delete (admin). Browse gains a
"New playbook" button and per-playbook + view-page Edit/Delete for editable
sources. Plain textarea editor with save-time YAML validation. Unit tests for
write/delete/guard/validate.

Task #579 — completes milestone #37 (Ansible automation).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-16 11:39:47 -04:00

64 lines
2.9 KiB
HTML

{% extends "base.html" %}
{% block title %}{{ "Edit" if editing else "New" }} Playbook — Steward{% endblock %}
{% block content %}
<div style="display:flex;align-items:center;justify-content:space-between;margin-bottom:1.25rem;gap:1rem;flex-wrap:wrap;">
<h1 class="page-title" style="margin-bottom:0;">{{ "Edit playbook" if editing else "New playbook" }}</h1>
<a href="/ansible/browse" class="btn btn-ghost btn-sm">← Browse</a>
</div>
{% if error %}<div class="alert alert-error">{{ error }}</div>{% endif %}
{% if not editable_sources %}
<div class="card empty">
No writable playbook source is available. The built-in <code>steward-local</code> source should appear
automatically; you can also configure a local-dir source under <a href="/settings/ansible/">Settings → Ansible</a>.
</div>
{% else %}
<form method="post" action="/ansible/playbooks/save">
<input type="hidden" name="editing" value="{{ '1' if editing else '0' }}">
<div style="display:flex;gap:1rem;flex-wrap:wrap;margin-bottom:1rem;">
<div class="form-group" style="margin-bottom:0;">
<label>Source</label>
{% if editing %}
<input type="text" value="{{ source_name }}" readonly style="color:var(--text-muted);">
<input type="hidden" name="source_name" value="{{ source_name }}">
{% else %}
<select name="source_name" required>
{% for s in editable_sources %}
<option value="{{ s.name }}" {% if s.name == source_name %}selected{% endif %}>{{ s.name }}</option>
{% endfor %}
</select>
{% endif %}
</div>
<div class="form-group" style="margin-bottom:0;flex:1;min-width:240px;">
<label>Filename / path (.yml or .yaml)</label>
<input type="text" name="playbook_path" value="{{ playbook_path }}" required
{% if editing %}readonly style="color:var(--text-muted);"{% endif %}
placeholder="maintenance/restart_nginx.yml">
</div>
</div>
<div class="form-group">
<label>Playbook (YAML)</label>
<textarea name="content" rows="22" spellcheck="false"
style="width:100%;font-family:ui-monospace,monospace;font-size:0.85rem;white-space:pre;overflow-wrap:normal;overflow-x:auto;">{{ content }}</textarea>
<p style="color:var(--text-dim);font-size:0.75rem;margin-top:0.35rem;">
Validated as YAML on save. Runs as the configured Ansible user — admin only.
</p>
</div>
<div style="display:flex;gap:0.5rem;">
<button type="submit" class="btn">Save</button>
<a href="/ansible/browse" class="btn btn-ghost">Cancel</a>
</div>
</form>
{% if editing %}
<form method="post" action="/ansible/playbooks/delete" style="margin-top:1rem;"
onsubmit="return confirm('Delete {{ playbook_path }}?');">
<input type="hidden" name="source_name" value="{{ source_name }}">
<input type="hidden" name="playbook_path" value="{{ playbook_path }}">
<button type="submit" class="btn btn-danger btn-sm">Delete playbook</button>
</form>
{% endif %}
{% endif %}
{% endblock %}