Snippet from an env role to generate programmatic .env files via the `get_secrets.py` script

get_secrets.py

...
@log_call
def file_exists(filename):
    """Check if a file exists."""
    fn = Path.cwd() / filename
    if fn.exists():
        overwrite = input(f"File '{filename}' already exists. Do you want to overwrite it? (y/n): ")
        match overwrite.lower():
            case "y" | "yes":
                fn.touch(exist_ok=True)
            case "n" | "no":
                print("Exiting...")
                sys.exit()
            case _:
                print("Invalid input. Exiting...")
                sys.exit()
    else:
        fn.touch(exist_ok=True)
...

main.yml

---
- name: Install dependencies
  ansible.builtin.pip:
    name:
    - eliot
    - python-decouple
    - requests
    - requests-cache
    state: present
    # umask: "0022"
    virtualenv: "{{ ansible_env.HOME }}/.venv"
    virtualenv_command: python -m venv
  environment:
    PATH: "{{ ansible_env.HOME }}/.asdf/shims:{{ ansible_env.HOME }}/.asdf/bin:{{ ansible_env.PATH }}"
  changed_when: false
  become_method: su
  become_user: "{{ local_user }}"
  become_flags: '-s /bin/sh'
  tags: pre
  
- name: Run get_secrets.py on target host
  ansible.builtin.script:
    cmd: "{{ tld }}/roles/create-env/files/get_secrets.py"
  args:
    chdir: "/tmp"
    executable: "python"
  environment:
    PATH: "{{ ansible_env.HOME }}/.venv/bin:{{ ansible_env.PATH }}"
    ENV: "prod"
    ENV_FILE: ".env"
    CLIENT_ID: "{{ client_id }}"
    CLIENT_SECRET: "{{ client_secret }}"
  tags: pre,qa

The PATH is manipulated to use asdf's python runtime and install packages globally instead of in a virtual environment (hence the extra_args passed to pip.)

client_id and client_secret are read from a local vault file exported before running ansible-playbook ...

Attempting to use eliot to figure out why the task is hanging with no stdout/stderr feedback. Incidentally that caused another deps error lmao

Fixed the general deps issue. Now just back to square one with lines 21-33 hanging