configure vault oidc login and cicd jwt login

This commit is contained in:
2024-10-07 17:39:27 +02:00
parent 5beaee60ac
commit 50399328dc
17 changed files with 271 additions and 28 deletions
@@ -1,7 +1,10 @@
# to see generated tokens
# go to https://gitea.arcodange.duckdns.org/user/settings/applications
- when: lookup('ansible.builtin.varnames', '^' ~ gitea_token_fact_name ~ '$') | length == 0 or gitea_token_delete
- when: >-
lookup('ansible.builtin.varnames', '^' ~ gitea_token_fact_name ~ '$') | length == 0
or lookup('vars', gitea_token_fact_name) == 'deleted'
or gitea_token_delete
block:
- &createTokenTask
@@ -46,5 +49,11 @@
msg: 'WARN: gitea_api_token required when gitea_token_delete or gitea_token_replace is true'
- ansible.builtin.set_fact:
'{{ gitea_token_fact_name }}': '{{ (gitea_api_token_cmd.rc == 0) | ternary(gitea_api_token_cmd.stdout, gitea_api_token_cmd_bis.stdout) }}'
when: not gitea_token_delete
'{{ gitea_token_fact_name }}': >-
{{
'deleted' if gitea_token_delete else
(
(gitea_api_token_cmd.rc == 0)
| ternary(gitea_api_token_cmd.stdout, gitea_api_token_cmd_bis.stdout)
)
}}