Updated to new sectool
This commit is contained in:
@@ -1,8 +1,14 @@
|
|||||||
name: Setup K8S Environment
|
name: Setup K8S Environment
|
||||||
description: Prepare the environment for A13labs CI/CD pipelines
|
description: Prepare the environment for A13labs CI/CD pipelines
|
||||||
inputs:
|
inputs:
|
||||||
vault-master-password:
|
access-token:
|
||||||
description: "The master password for the vault"
|
description: "Bitwarden access token"
|
||||||
|
required: true
|
||||||
|
project-id:
|
||||||
|
description: "Bitwarden project ID"
|
||||||
|
required: true
|
||||||
|
organization-id:
|
||||||
|
description: "Bitwarden organization ID"
|
||||||
required: true
|
required: true
|
||||||
ansible-user:
|
ansible-user:
|
||||||
description: "The user to use for Ansible"
|
description: "The user to use for Ansible"
|
||||||
@@ -22,7 +28,9 @@ runs:
|
|||||||
id: get-system-id
|
id: get-system-id
|
||||||
shell: bash
|
shell: bash
|
||||||
env:
|
env:
|
||||||
VAULT_MASTER_PASSWORD: ${{ inputs.vault-master-password }}
|
BW_ACCESS_TOKEN: ${{ inputs.access-token }}
|
||||||
|
BW_PROJECT_ID: ${{ inputs.project-id }}
|
||||||
|
BW_ORGANIZATION_ID: ${{ inputs.organization-id }}
|
||||||
ANSIBLE_USER: ${{ inputs.ansible-user }}
|
ANSIBLE_USER: ${{ inputs.ansible-user }}
|
||||||
SSH_AUTH_SOCK: /tmp/ssh_agent.sock
|
SSH_AUTH_SOCK: /tmp/ssh_agent.sock
|
||||||
TARGET_HOST: ${{ inputs.target-host }}
|
TARGET_HOST: ${{ inputs.target-host }}
|
||||||
|
|||||||
@@ -1,8 +1,14 @@
|
|||||||
name: Setup Ansible Environment
|
name: Setup Ansible Environment
|
||||||
description: Prepare the environment for A13labs CI/CD pipelines
|
description: Prepare the environment for A13labs CI/CD pipelines
|
||||||
inputs:
|
inputs:
|
||||||
vault-master-password:
|
access-token:
|
||||||
description: "The master password for the vault"
|
description: "Bitwarden access token"
|
||||||
|
required: true
|
||||||
|
project-id:
|
||||||
|
description: "Bitwarden project ID"
|
||||||
|
required: true
|
||||||
|
organization-id:
|
||||||
|
description: "Bitwarden organization ID"
|
||||||
required: true
|
required: true
|
||||||
ansible-user:
|
ansible-user:
|
||||||
description: "The user to use for Ansible"
|
description: "The user to use for Ansible"
|
||||||
@@ -34,7 +40,9 @@ runs:
|
|||||||
- name: Prepare SSH key
|
- name: Prepare SSH key
|
||||||
shell: bash
|
shell: bash
|
||||||
env:
|
env:
|
||||||
VAULT_MASTER_PASSWORD: ${{ inputs.vault-master-password }}
|
BW_ACCESS_TOKEN: ${{ inputs.access-token }}
|
||||||
|
BW_PROJECT_ID: ${{ inputs.project-id }}
|
||||||
|
BW_ORGANIZATION_ID: ${{ inputs.organization-id }}
|
||||||
run: |
|
run: |
|
||||||
sectool ssh unlock ansible
|
sectool ssh unlock ansible
|
||||||
mkdir -p ~/.ssh
|
mkdir -p ~/.ssh
|
||||||
@@ -71,7 +79,9 @@ runs:
|
|||||||
id: start-ssh-agent
|
id: start-ssh-agent
|
||||||
shell: bash
|
shell: bash
|
||||||
env:
|
env:
|
||||||
VAULT_MASTER_PASSWORD: ${{ inputs.vault-master-password }}
|
BW_ACCESS_TOKEN: ${{ inputs.access-token }}
|
||||||
|
BW_PROJECT_ID: ${{ inputs.project-id }}
|
||||||
|
BW_ORGANIZATION_ID: ${{ inputs.organization-id }}
|
||||||
SSH_AUTH_SOCK: ${{ inputs.ssh-auth-socket }}
|
SSH_AUTH_SOCK: ${{ inputs.ssh-auth-socket }}
|
||||||
run: |
|
run: |
|
||||||
ssh-agent -a $SSH_AUTH_SOCK > /dev/null
|
ssh-agent -a $SSH_AUTH_SOCK > /dev/null
|
||||||
|
|||||||
@@ -1,8 +1,14 @@
|
|||||||
name: Setup K8S Environment
|
name: Setup K8S Environment
|
||||||
description: Prepare the environment for A13labs CI/CD pipelines
|
description: Prepare the environment for A13labs CI/CD pipelines
|
||||||
inputs:
|
inputs:
|
||||||
vault-master-password:
|
access-token:
|
||||||
description: "The master password for the vault"
|
description: "Bitwarden access token"
|
||||||
|
required: true
|
||||||
|
project-id:
|
||||||
|
description: "Bitwarden project ID"
|
||||||
|
required: true
|
||||||
|
organization-id:
|
||||||
|
description: "Bitwarden organization ID"
|
||||||
required: true
|
required: true
|
||||||
ansible-user:
|
ansible-user:
|
||||||
description: "The user to use for Ansible"
|
description: "The user to use for Ansible"
|
||||||
@@ -20,7 +26,9 @@ runs:
|
|||||||
- name: Copy Kube Config from remote host
|
- name: Copy Kube Config from remote host
|
||||||
shell: bash
|
shell: bash
|
||||||
env:
|
env:
|
||||||
VAULT_MASTER_PASSWORD: ${{ inputs.vault-master-password }}
|
BW_ACCESS_TOKEN: ${{ inputs.access-token }}
|
||||||
|
BW_PROJECT_ID: ${{ inputs.project-id }}
|
||||||
|
BW_ORGANIZATION_ID: ${{ inputs.organization-id }}
|
||||||
ANSIBLE_USER: ${{ inputs.ansible-user }}
|
ANSIBLE_USER: ${{ inputs.ansible-user }}
|
||||||
SSH_AUTH_SOCK: ${{ inputs.ssh-auth-sock }}
|
SSH_AUTH_SOCK: ${{ inputs.ssh-auth-sock }}
|
||||||
K8S_TARGET: ${{ inputs.k8s-target }}
|
K8S_TARGET: ${{ inputs.k8s-target }}
|
||||||
@@ -31,7 +39,9 @@ runs:
|
|||||||
- name: Forward K8S API Server port
|
- name: Forward K8S API Server port
|
||||||
shell: bash
|
shell: bash
|
||||||
env:
|
env:
|
||||||
VAULT_MASTER_PASSWORD: ${{ inputs.vault-master-password }}
|
BW_ACCESS_TOKEN: ${{ inputs.access-token }}
|
||||||
|
BW_PROJECT_ID: ${{ inputs.project-id }}
|
||||||
|
BW_ORGANIZATION_ID: ${{ inputs.organization-id }}
|
||||||
ANSIBLE_USER: ${{ inputs.ansible-user }}
|
ANSIBLE_USER: ${{ inputs.ansible-user }}
|
||||||
SSH_AUTH_SOCK: ${{ inputs.ssh-auth-sock }}
|
SSH_AUTH_SOCK: ${{ inputs.ssh-auth-sock }}
|
||||||
K8S_TARGET: ${{ inputs.k8s-target }}
|
K8S_TARGET: ${{ inputs.k8s-target }}
|
||||||
|
|||||||
@@ -21,7 +21,9 @@ jobs:
|
|||||||
- name: Setup Ansible environment
|
- name: Setup Ansible environment
|
||||||
uses: ./.github/actions/setup-ansible-env
|
uses: ./.github/actions/setup-ansible-env
|
||||||
with:
|
with:
|
||||||
vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
project-id: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
organization-id: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
access-token: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
||||||
|
|
||||||
- name: Setup Terraform environment
|
- name: Setup Terraform environment
|
||||||
@@ -30,14 +32,18 @@ jobs:
|
|||||||
- name: Setup Kubernetes Environment
|
- name: Setup Kubernetes Environment
|
||||||
uses: ./.github/actions/setup-k8s-env
|
uses: ./.github/actions/setup-k8s-env
|
||||||
with:
|
with:
|
||||||
vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
project-id: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
organization-id: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
access-token: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
||||||
|
|
||||||
- name: Get remote host info
|
- name: Get remote host info
|
||||||
uses: ./.github/actions/get-host-info
|
uses: ./.github/actions/get-host-info
|
||||||
id: get-host-info
|
id: get-host-info
|
||||||
with:
|
with:
|
||||||
vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
project-id: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
organization-id: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
access-token: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
||||||
|
|
||||||
- name: Test ansible
|
- name: Test ansible
|
||||||
|
|||||||
@@ -22,13 +22,17 @@ jobs:
|
|||||||
- name: Setup Ansible environment
|
- name: Setup Ansible environment
|
||||||
uses: ./.github/actions/setup-ansible-env
|
uses: ./.github/actions/setup-ansible-env
|
||||||
with:
|
with:
|
||||||
vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
project-id: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
organization-id: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
access-token: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
||||||
trusted-hosts: ${{ secrets.TRUSTED_HOSTS }}
|
trusted-hosts: ${{ secrets.TRUSTED_HOSTS }}
|
||||||
|
|
||||||
- name: Apply the playbook that triggered the workflow
|
- name: Apply the playbook that triggered the workflow
|
||||||
env:
|
env:
|
||||||
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
BW_PROJECT_ID: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
BW_ORGANIZATION_ID: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
BW_ACCESS_TOKEN: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }}
|
ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }}
|
||||||
SSH_AUTH_SOCK: /tmp/ssh_agent.sock
|
SSH_AUTH_SOCK: /tmp/ssh_agent.sock
|
||||||
CHANGED_FILES: ${{ steps.setup_env.outputs.CHANGED_FILES }}
|
CHANGED_FILES: ${{ steps.setup_env.outputs.CHANGED_FILES }}
|
||||||
|
|||||||
@@ -22,13 +22,17 @@ jobs:
|
|||||||
- name: Setup Ansible environment
|
- name: Setup Ansible environment
|
||||||
uses: ./.github/actions/setup-ansible-env
|
uses: ./.github/actions/setup-ansible-env
|
||||||
with:
|
with:
|
||||||
vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
project-id: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
organization-id: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
access-token: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
||||||
trusted-hosts: ${{ secrets.TRUSTED_HOSTS }}
|
trusted-hosts: ${{ secrets.TRUSTED_HOSTS }}
|
||||||
|
|
||||||
- name: Apply the playbook that triggered the workflow
|
- name: Apply the playbook that triggered the workflow
|
||||||
env:
|
env:
|
||||||
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
BW_PROJECT_ID: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
BW_ORGANIZATION_ID: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
BW_ACCESS_TOKEN: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }}
|
ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }}
|
||||||
SSH_AUTH_SOCK: /tmp/ssh_agent.sock
|
SSH_AUTH_SOCK: /tmp/ssh_agent.sock
|
||||||
CHANGED_FILES: ${{ steps.setup_env.outputs.CHANGED_FILES }}
|
CHANGED_FILES: ${{ steps.setup_env.outputs.CHANGED_FILES }}
|
||||||
|
|||||||
@@ -25,13 +25,17 @@ jobs:
|
|||||||
- name: Setup Ansible environment
|
- name: Setup Ansible environment
|
||||||
uses: ./.github/actions/setup-ansible-env
|
uses: ./.github/actions/setup-ansible-env
|
||||||
with:
|
with:
|
||||||
vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
project-id: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
organization-id: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
access-token: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
||||||
trusted-hosts: ${{ secrets.TRUSTED_HOSTS }}
|
trusted-hosts: ${{ secrets.TRUSTED_HOSTS }}
|
||||||
|
|
||||||
- name: Apply the playbook that triggered the workflow
|
- name: Apply the playbook that triggered the workflow
|
||||||
env:
|
env:
|
||||||
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
BW_PROJECT_ID: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
BW_ORGANIZATION_ID: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
BW_ACCESS_TOKEN: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }}
|
ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }}
|
||||||
SSH_AUTH_SOCK: /tmp/ssh_agent.sock
|
SSH_AUTH_SOCK: /tmp/ssh_agent.sock
|
||||||
run: |
|
run: |
|
||||||
|
|||||||
@@ -21,13 +21,14 @@ jobs:
|
|||||||
- name: Setup environment
|
- name: Setup environment
|
||||||
uses: ./.github/actions/setup-env
|
uses: ./.github/actions/setup-env
|
||||||
|
|
||||||
|
|
||||||
- name: Setup Terraform environment
|
- name: Setup Terraform environment
|
||||||
uses: ./.github/actions/setup-terraform-env
|
uses: ./.github/actions/setup-terraform-env
|
||||||
|
|
||||||
- name: Terraform Init and Apply
|
- name: Terraform Init and Apply
|
||||||
env:
|
env:
|
||||||
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
BW_PROJECT_ID: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
BW_ORGANIZATION_ID: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
BW_ACCESS_TOKEN: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
run: |
|
run: |
|
||||||
cd terraform/aws-iac
|
cd terraform/aws-iac
|
||||||
sectool exec terraform init
|
sectool exec terraform init
|
||||||
|
|||||||
@@ -28,7 +28,9 @@ jobs:
|
|||||||
|
|
||||||
- name: Terraform Init and Validate
|
- name: Terraform Init and Validate
|
||||||
env:
|
env:
|
||||||
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
BW_PROJECT_ID: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
BW_ORGANIZATION_ID: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
BW_ACCESS_TOKEN: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
run: |
|
run: |
|
||||||
cd terraform/aws-iac
|
cd terraform/aws-iac
|
||||||
sectool exec terraform init
|
sectool exec terraform init
|
||||||
|
|||||||
@@ -32,7 +32,9 @@ jobs:
|
|||||||
uses: ./.github/actions/get-host-info
|
uses: ./.github/actions/get-host-info
|
||||||
id: get-host-info
|
id: get-host-info
|
||||||
with:
|
with:
|
||||||
vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
project-id: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
organization-id: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
access-token: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
||||||
target-host: iac
|
target-host: iac
|
||||||
|
|
||||||
@@ -41,7 +43,9 @@ jobs:
|
|||||||
|
|
||||||
- name: Terraform Init and Apply
|
- name: Terraform Init and Apply
|
||||||
env:
|
env:
|
||||||
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
BW_PROJECT_ID: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
BW_ORGANIZATION_ID: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
BW_ACCESS_TOKEN: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
SYSTEM_ID: ${{ steps.get-host-info.outputs.system-id }}
|
SYSTEM_ID: ${{ steps.get-host-info.outputs.system-id }}
|
||||||
run: |
|
run: |
|
||||||
cd terraform/iac
|
cd terraform/iac
|
||||||
|
|||||||
@@ -26,7 +26,9 @@ jobs:
|
|||||||
- name: Setup Ansible environment
|
- name: Setup Ansible environment
|
||||||
uses: ./.github/actions/setup-ansible-env
|
uses: ./.github/actions/setup-ansible-env
|
||||||
with:
|
with:
|
||||||
vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
project-id: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
organization-id: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
access-token: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
||||||
host-group: iac
|
host-group: iac
|
||||||
|
|
||||||
@@ -34,7 +36,9 @@ jobs:
|
|||||||
uses: ./.github/actions/get-host-info
|
uses: ./.github/actions/get-host-info
|
||||||
id: get-host-info
|
id: get-host-info
|
||||||
with:
|
with:
|
||||||
vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
project-id: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
organization-id: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
access-token: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
||||||
target-host: iac
|
target-host: iac
|
||||||
|
|
||||||
@@ -43,7 +47,9 @@ jobs:
|
|||||||
|
|
||||||
- name: Terraform Init and Validate
|
- name: Terraform Init and Validate
|
||||||
env:
|
env:
|
||||||
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
BW_PROJECT_ID: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
BW_ORGANIZATION_ID: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
BW_ACCESS_TOKEN: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
SYSTEM_ID: ${{ steps.get-host-info.outputs.system-id }}
|
SYSTEM_ID: ${{ steps.get-host-info.outputs.system-id }}
|
||||||
run: |
|
run: |
|
||||||
cd terraform/iac
|
cd terraform/iac
|
||||||
|
|||||||
@@ -25,7 +25,9 @@ jobs:
|
|||||||
id: setup_ansible_env
|
id: setup_ansible_env
|
||||||
uses: ./.github/actions/setup-ansible-env
|
uses: ./.github/actions/setup-ansible-env
|
||||||
with:
|
with:
|
||||||
vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
project-id: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
organization-id: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
access-token: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
||||||
host-group: microk8s
|
host-group: microk8s
|
||||||
|
|
||||||
@@ -35,12 +37,16 @@ jobs:
|
|||||||
- name: Setup Kubernetes Environment
|
- name: Setup Kubernetes Environment
|
||||||
uses: ./.github/actions/setup-k8s-env
|
uses: ./.github/actions/setup-k8s-env
|
||||||
with:
|
with:
|
||||||
vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
project-id: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
organization-id: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
access-token: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
||||||
|
|
||||||
- name: Terraform Init and Apply
|
- name: Terraform Init and Apply
|
||||||
env:
|
env:
|
||||||
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
BW_PROJECT_ID: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
BW_ORGANIZATION_ID: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
BW_ACCESS_TOKEN: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }}
|
ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }}
|
||||||
SSH_AUTH_SOCK: ${{ steps.setup_ansible_env.outputs.ssh-auth-sock }}
|
SSH_AUTH_SOCK: ${{ steps.setup_ansible_env.outputs.ssh-auth-sock }}
|
||||||
run: |
|
run: |
|
||||||
|
|||||||
@@ -27,7 +27,9 @@ jobs:
|
|||||||
id: setup_ansible_env
|
id: setup_ansible_env
|
||||||
uses: ./.github/actions/setup-ansible-env
|
uses: ./.github/actions/setup-ansible-env
|
||||||
with:
|
with:
|
||||||
vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
project-id: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
organization-id: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
access-token: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
||||||
host-group: microk8s
|
host-group: microk8s
|
||||||
|
|
||||||
@@ -37,12 +39,16 @@ jobs:
|
|||||||
- name: Setup Kubernetes Environment
|
- name: Setup Kubernetes Environment
|
||||||
uses: ./.github/actions/setup-k8s-env
|
uses: ./.github/actions/setup-k8s-env
|
||||||
with:
|
with:
|
||||||
vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
project-id: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
organization-id: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
access-token: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
||||||
|
|
||||||
- name: Terraform Init and Validate
|
- name: Terraform Init and Validate
|
||||||
env:
|
env:
|
||||||
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
BW_PROJECT_ID: ${{ secrets.BW_PROJECT_ID }}
|
||||||
|
BW_ORGANIZATION_ID: ${{ secrets.BW_ORGANIZATION_ID }}
|
||||||
|
BW_ACCESS_TOKEN: ${{ secrets.BW_ACCESS_TOKEN }}
|
||||||
run: |
|
run: |
|
||||||
cd terraform/k8sapps
|
cd terraform/k8sapps
|
||||||
sectool exec terraform init
|
sectool exec terraform init
|
||||||
|
|||||||
@@ -0,0 +1,7 @@
|
|||||||
|
{
|
||||||
|
"provider": "bitwarden",
|
||||||
|
"bitwarden": {
|
||||||
|
"api_url": "https://api.bitwarden.eu",
|
||||||
|
"identity_url": "https://identity.bitwarden.eu"
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -1 +0,0 @@
|
|||||||
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
|
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
{
|
||||||
|
"provider": "bitwarden",
|
||||||
|
"bitwarden": {
|
||||||
|
"api_url": "https://api.bitwarden.eu",
|
||||||
|
"identity_url": "https://identity.bitwarden.eu"
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
{
|
||||||
|
"provider": "bitwarden",
|
||||||
|
"bitwarden": {
|
||||||
|
"api_url": "https://api.bitwarden.eu",
|
||||||
|
"identity_url": "https://identity.bitwarden.eu"
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
{
|
||||||
|
"provider": "bitwarden",
|
||||||
|
"bitwarden": {
|
||||||
|
"api_url": "https://api.bitwarden.eu",
|
||||||
|
"identity_url": "https://identity.bitwarden.eu"
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
{
|
||||||
|
"provider": "bitwarden",
|
||||||
|
"bitwarden": {
|
||||||
|
"api_url": "https://api.bitwarden.eu",
|
||||||
|
"identity_url": "https://identity.bitwarden.eu"
|
||||||
|
}
|
||||||
|
}
|
||||||
Reference in New Issue
Block a user