arcodange-org/factory
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

use self signed cert

Browse Source
This commit is contained in:
Gabriel Radureau
2026-01-02 15:07:59 +01:00
parent 5b3c896a25
commit 22710d12a9
2 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.gitea/workflows/iac.yaml
View File

@@ -23,6 +23,7 @@ concurrency:
id: vault-secrets
with:
url: https://vault.arcodange.lab
caCertificate: ${{ secrets.HOMELAB_CA_CERT }}
jwtGiteaOIDC: ${{ needs.gitea_vault_auth.outputs.gitea_vault_jwt }}
role: gitea_cicd
method: jwt
@@ -53,6 +54,7 @@ jobs:
env:
OPENTOFU_VERSION: 1.8.2
TERRAFORM_VAULT_AUTH_JWT: ${{ needs.gitea_vault_auth.outputs.gitea_vault_jwt }}
VAULT_CACERT: /usr/local/share/ca-certificates/root_ca.crt
steps:
- *vault_step
- uses: actions/checkout@v4

7
.gitea/workflows/postgres.yaml
View File

@@ -21,6 +21,7 @@ concurrency:
id: vault-secrets
with:
url: https://vault.arcodange.lab
caCertificate: ${{ secrets.HOMELAB_CA_CERT }}
jwtGiteaOIDC: ${{ needs.gitea_vault_auth.outputs.gitea_vault_jwt }}
role: gitea_cicd
method: jwt
@@ -50,7 +51,13 @@ jobs:
env:
OPENTOFU_VERSION: 1.8.2
TERRAFORM_VAULT_AUTH_JWT: ${{ needs.gitea_vault_auth.outputs.gitea_vault_jwt }}
VAULT_CACERT: homelab.pem
steps:
- name: check cert
run: |
cp /usr/local/share/ca-certificates/root_ca.crt $VAULT_CACERT
realpath $VAULT_CACERT
chmod 777 $VAULT_CACERT
- *vault_step
- uses: actions/checkout@v4
- name: terraform apply