ci.yml

name: CI

on:
  push:
    branches-ignore:
      - master
  pull_request:
    branches:
      - master

  workflow_dispatch:

defaults:
  run:
    shell: bash

jobs:
  ci:
    name: Test Ansible playbook
    runs-on: macos-latest
    env:
      INVENTORY: work
    steps:
      - run: echo "🎉 The job was automatically triggered by a ${{ github.event_name }} event."
      - run: echo "🐧 This job is now running on a ${{ runner.os }} server hosted by GitHub!"
      - run: echo "🔎 The name of your branch is ${{ github.ref }} and your repository is ${{ github.repository }}."

      - name: Check out repository code
        uses: actions/checkout@v4

      - run: echo "💡 The ${{ github.repository }} repository has been cloned to the runner."
      - run: echo "🖥️ The workflow is now ready to test your code on the runner."

      - name: Install Ansible
        run: brew install ansible

      - run: ansible --version

      - name: Verify the playbook's syntax
        run: ansible-playbook --inventory ${INVENTORY} --syntax-check site.yml

      - name: Test the playbook
        run: ansible-playbook --inventory ${INVENTORY} site.yml

      - name: Test the playbook's idempotence
        run: |
          ansible-playbook --inventory ${INVENTORY} site.yml > ansible_output

          set +e
          anything_changed=$(tail ansible_output | grep -q 'changed=0.*failed=0'; echo $?)
          set -e

          if [[ "${anything_changed}" -gt 0 ]]; then
            echo "Playbook not idempotent!"
          fi

      - run: echo "🍏 This job's status is ${{ job.status }}."