Gitlab runner service override pr devel

ce-dev/ansible/plays/gitlab/gitlab.yml

@@ -16,6 +16,24 @@
     - ansible.builtin.import_role:
         name: _init
     - ansible.builtin.import_role:
-        name: _meta/deploy
+        name: user_provision
+    - ansible.builtin.import_role:
+        name: _meta/common_base
+    - ansible.builtin.import_role:
+        name: ce_deploy
+    - ansible.builtin.import_role:
+        name: aws/aws_credentials
+    - ansible.builtin.import_role:
+        name: gitlab
+    - ansible.builtin.import_role:
+        name: gitlab_runner
+    - ansible.builtin.import_role:
+        name: ssh_server
+    - ansible.builtin.import_role:
+        name: sops
+    - ansible.builtin.import_role:
+        name: gpg_key
+    - ansible.builtin.import_role:
+        name: firewall_config
     - ansible.builtin.import_role:
         name: _exit

ce-dev/ansible/vars/gitlab/gpg_key.yml

@@ -0,0 +1,8 @@
+---
+gpg_key:
+  - username: ce-dev # Must exist already on the server.
+    publish: false # Whether to publish to HKS public servers.
+    key_type: "RSA"
+    key_length: 4096
+    email: sysadm@codeenigma.com
+    expire: 0

roles/gitlab_runner/tasks/main.yml

@@ -77,6 +77,16 @@
     group: "{{ gitlab_runner.username }}"
   become: true
 
+- name: Ensure the Gitlab runner service override directory exists.
+  ansible.builtin.file:
+    path: /etc/systemd/system/gitlab-runner.service.d
+    state: directory
+    mode: '0755'
+    owner: root
+    group: root
+    force: true
+  become: true
+
 - name: Place the gitlab-runner unit override file. # see https://gitlab.com/gitlab-org/gitlab-runner/-/issues/2422#note_838191146
   ansible.builtin.template:
     src: override.conf.j2