Pin git repos to specific versions (closes #120)

ansible/group_vars/cluster/settings.yml.example

@@ -17,3 +17,8 @@ nextcloud_password: "{{ lookup('password', './secrets/nextcloud_admin_password c
 # Note that LE's production server has stricter rate limits, so set this to
 # "true" when you are testing something.
 acme_staging: false
+
+# git repo versions
+git_helmfiles_version: '3c97c3f'
+git_charts_version: 'HEAD'
+git_local_storage_version: 'HEAD'

ansible/roles/setup/tasks/main.yml

@@ -156,7 +156,7 @@
   git:
     repo: 'https://code.greenhost.net/openappstack/helmfiles'
     dest: '/oas/source/repos/helmfiles'
-    version: "master"
+    version: '{{ git_helmfiles_version }}'
 
 - name: Clone charts repo
   tags:
@@ -164,6 +164,7 @@
   git:
     repo: 'https://code.greenhost.net/openappstack/charts'
     dest: '/oas/source/repos/charts'
+    version: '{{ git_charts_version }}'
 
 - name: Clone local-storage repo
   tags:
@@ -171,6 +172,7 @@
   git:
     repo: 'https://code.greenhost.net/openappstack/local-storage'
     dest: '/oas/source/repos/local-storage'
+    version: '{{ git_local_storage_version }}'
 
 - name: Create OAS namespaces
   tags: