try accepting self signed cert
All checks were successful
Docker Build / build-and-push-image (push) Successful in 56s
All checks were successful
Docker Build / build-and-push-image (push) Successful in 56s
This commit is contained in:
@@ -20,6 +20,7 @@ concurrency:
|
|||||||
id: vault-secrets
|
id: vault-secrets
|
||||||
with:
|
with:
|
||||||
url: https://vault.arcodange.lab
|
url: https://vault.arcodange.lab
|
||||||
|
caCertificate: ${{ secrets.HOMELAB_CA_CERT }}
|
||||||
jwtGiteaOIDC: ${{ needs.gitea_vault_auth.outputs.gitea_vault_jwt }}
|
jwtGiteaOIDC: ${{ needs.gitea_vault_auth.outputs.gitea_vault_jwt }}
|
||||||
role: gitea_cicd_webapp
|
role: gitea_cicd_webapp
|
||||||
method: jwt
|
method: jwt
|
||||||
@@ -38,7 +39,9 @@ jobs:
|
|||||||
- name: Auth with gitea for vault
|
- name: Auth with gitea for vault
|
||||||
id: gitea_vault_jwt
|
id: gitea_vault_jwt
|
||||||
run: |
|
run: |
|
||||||
|
git clone 'https://gitea.arcodange.lab/arcodange-org/vault-action.git' || echo 'oups'
|
||||||
echo -n "${{ secrets.vault_oauth__sh_b64 }}" | base64 -d | bash
|
echo -n "${{ secrets.vault_oauth__sh_b64 }}" | base64 -d | bash
|
||||||
|
git clone 'https://gitea.arcodange.lab/arcodange-org/vault-action.git'
|
||||||
|
|
||||||
tofu:
|
tofu:
|
||||||
name: Tofu - Vault
|
name: Tofu - Vault
|
||||||
@@ -49,6 +52,9 @@ jobs:
|
|||||||
OPENTOFU_VERSION: 1.8.2
|
OPENTOFU_VERSION: 1.8.2
|
||||||
TERRAFORM_VAULT_AUTH_JWT: ${{ needs.gitea_vault_auth.outputs.gitea_vault_jwt }}
|
TERRAFORM_VAULT_AUTH_JWT: ${{ needs.gitea_vault_auth.outputs.gitea_vault_jwt }}
|
||||||
steps:
|
steps:
|
||||||
|
- run: |
|
||||||
|
curl https://ssl-ca.arcodange.lab:8443/roots.pem -ks > /usr/local/share/ca-certificates/arcodange-root.crt && update-ca-certificates 2>/dev/null >/dev/null
|
||||||
|
export VAULT_CACERT=/usr/local/share/ca-certificates/arcodange-root.crt
|
||||||
- *vault_step
|
- *vault_step
|
||||||
- uses: actions/checkout@v4
|
- uses: actions/checkout@v4
|
||||||
- name: terraform apply
|
- name: terraform apply
|
||||||
|
|||||||
Reference in New Issue
Block a user