fix: prevent CI jobs from restarting Traefik
Some checks failed
🚀 Build & Deploy Image / Determine Build Necessity (push) Successful in 28s
Security Vulnerability Scan / Check for Dependency Changes (push) Successful in 35s
🚀 Build & Deploy Image / Build Runtime Base Image (push) Successful in 18s
🚀 Build & Deploy Image / Run Tests & Quality Checks (push) Has been skipped
Security Vulnerability Scan / Composer Security Audit (push) Has been skipped
🚀 Build & Deploy Image / Build Docker Image (push) Successful in 17s
🚀 Build & Deploy Image / Auto-deploy to Staging (push) Failing after 1m9s
🚀 Build & Deploy Image / Auto-deploy to Production (push) Has been skipped

- Add traefik_auto_restart check to fix-gitea-timeouts.yml
- Add traefik_auto_restart check to fix-gitea-ssl-routing.yml
- Add traefik_auto_restart check to fix-gitea-complete.yml
- Set traefik_auto_restart=false in all Gitea workflow Ansible calls
- Set gitea_auto_restart=false in all Gitea workflow Ansible calls
- Add redeploy-traefik-gitea.yml playbook for clean redeployment

This prevents CI/CD pipelines from causing Traefik restart loops by
ensuring all remediation playbooks respect the traefik_auto_restart
flag, which is set to false in group_vars/production/vars.yml.
This commit is contained in:
2025-11-08 23:47:44 +01:00
parent a96bd41326
commit f548a0322c
5 changed files with 899 additions and 0 deletions

View File

@@ -983,6 +983,8 @@ jobs:
-e "deployment_environment=staging" \
-e "deployment_hosts=production" \
-e "git_branch=staging" \
-e "traefik_auto_restart=false" \
-e "gitea_auto_restart=false" \
--vault-password-file /tmp/vault_pass \
--private-key ~/.ssh/production
@@ -997,6 +999,8 @@ jobs:
-e "docker_registry=${{ env.REGISTRY }}" \
-e "docker_registry_username=${{ secrets.REGISTRY_USER }}" \
-e "docker_registry_password=${{ secrets.REGISTRY_PASSWORD }}" \
-e "traefik_auto_restart=false" \
-e "gitea_auto_restart=false" \
--vault-password-file /tmp/vault_pass \
--private-key ~/.ssh/production
@@ -1006,6 +1010,8 @@ jobs:
ansible-playbook -i inventory/production.yml \
playbooks/install-composer-dependencies.yml \
-e "deployment_environment=staging" \
-e "traefik_auto_restart=false" \
-e "gitea_auto_restart=false" \
--vault-password-file /tmp/vault_pass \
--private-key ~/.ssh/production
@@ -1155,6 +1161,8 @@ jobs:
-e "deployment_environment=production" \
-e "deployment_hosts=production" \
-e "git_branch=main" \
-e "traefik_auto_restart=false" \
-e "gitea_auto_restart=false" \
--vault-password-file /tmp/vault_pass \
--private-key ~/.ssh/production
@@ -1169,6 +1177,8 @@ jobs:
-e "docker_registry=${{ env.REGISTRY }}" \
-e "docker_registry_username=${{ secrets.REGISTRY_USER }}" \
-e "docker_registry_password=${{ secrets.REGISTRY_PASSWORD }}" \
-e "traefik_auto_restart=false" \
-e "gitea_auto_restart=false" \
--vault-password-file /tmp/vault_pass \
--private-key ~/.ssh/production
@@ -1178,6 +1188,8 @@ jobs:
ansible-playbook -i inventory/production.yml \
playbooks/install-composer-dependencies.yml \
-e "deployment_environment=production" \
-e "traefik_auto_restart=false" \
-e "gitea_auto_restart=false" \
--vault-password-file /tmp/vault_pass \
--private-key ~/.ssh/production