provision-ansible.yml

- name: Create instance(s)
  hosts: localhost
  gather_facts: no
  connection: local

  vars:
    machine_name: ansible2
    machine_type: f1-micro
    image: https://www.googleapis.com/compute/v1/projects/ubuntu-os-cloud/global/images/ubuntu-1604-xenial-v20170330
    service_account_email: ansible-service@paris-code.iam.gserviceaccount.com
    credentials_file: /etc/ansible/keys/service-key.json
    project_id: paris-code

  tasks:
    - name: Launch instances
      gce:
          instance_names: "{{ machine_name }}"
          machine_type: "{{ machine_type }}"
          image: "{{ image }}"
          service_account_email: "{{ service_account_email }}"
          credentials_file: "{{ credentials_file }}"
          project_id: "{{ project_id }}"
          tags: ansible
      register: gce

    - name: Wait for SSH to come up
      wait_for: host={{ item.public_ip }} port=22 delay=5 timeout=60
      with_items: "{{ gce.instance_data }}"

    - name: Add host to groupname
      add_host: hostname={{ item.public_ip }} groupname=launched
      with_items: "{{ gce.instance_data }}"

    - name: reset known-hosts for ips
      command: ssh-keygen -R {{ item.public_ip }}
      with_items: "{{ gce.instance_data }}"

    - shell: ssh-keyscan -H {{ item.public_ip }} >> ~/.ssh/known_hosts
      with_items: "{{ gce.instance_data }}"

    - name: reset known-hosts for names
      command: ssh-keygen -R {{ item.name }}
      with_items: "{{ gce.instance_data }}"

    - shell: ssh-keyscan -H {{ item.name }} >> ~/.ssh/known_hosts
      with_items: "{{ gce.instance_data }}"

- name: Set up machines
  hosts: launched
  connection: ssh
  become: yes

  vars_files:
    - vars/secrets.yml

  vars:
    - user_used: "{{ansible_user|default(lookup('env', 'USER'), True) }}"

  tasks:
    - name: Install https support for apt
      apt: name=apt-transport-https update_cache=yes

    - name: upgrade apt packages to the latest version
      apt: upgrade=dist

    - name: Add nodesource signing key
      apt_key: >
        url=https://keyserver.ubuntu.com/pks/lookup?op=get&fingerprint=on&search=0x1655A0AB68576280
        id=68576280

    - name: Add nodesource apt repository
      apt_repository: >
        repo='deb https://deb.nodesource.com/node_0.12 wheezy main'

    - name: upgrade apt packages to the latest version
      apt: upgrade=dist

    - name: Install apt packages
      apt: pkg={{ item }} state=latest
      with_items:
        - build-essential
        - python-setuptools
        - python-dev
        - python-openssl
        - libssl-dev
        - libffi-dev
        - nodejs
        - git
        - vim
        - bash-completion

    - name: Install pip
      easy_install: name=pip

    - name: Install ansible
      pip: name={{ item }}
      with_items:
        - ansible
        - apache-libcloud

    - name: copy ssh key
      become: no
      copy: src=/home/{{ user_used }}/.ssh/id_rsa mode=400
           dest=/home/{{ user_used }}/.ssh/id_rsa

    - name: ensure github.com is a known host
      become: no
      lineinfile:
        dest: /home/{{ user_used }}/.ssh/known_hosts
        create: yes
        state: present
        line: "{{ lookup('pipe', 'ssh-keyscan -t rsa github.com') }}"
        regexp: "^github\\.com"

    - name: sync {{ dir }} to latest code
      git: >
        repo=git@github.com:PencilCode/deployment.git
        dest=/home/{{ user_used }}/deployment
      become_user: "{{ user_used }}"

    - file: path=/etc/ansible state=directory

    - name: set up gce configruation
      copy: src=files/gce.py dest=/etc/ansible/hosts mode=755
    - copy: src=files/gce.ini dest=/etc/ansible/gce.ini
    - file: path=/etc/ansible/keys state=directory
    - copy:
        content: "{{ gce_json_key }}"
        dest: /etc/ansible/keys/service-key.json

    - name: set up ansible defaults
      become: no
      copy: src=/home/{{ user_used }}/{{ item }}
           dest=/home/{{ user_used }}/{{ item }}
      with_items:
       - .ansible.cfg
       - .ansible_vault_password
       - .ssh/id_rsa.pub
       - .gitconfig