Trez/hc-vault-env
4
0
Fork 0
Code Issues Pull Requests Actions Releases Activity

...

Browse Source
This commit is contained in:
Trez.One
2025-10-18 09:52:36 -04:00
parent b1d0010720
commit 7089fc714e
1 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
action.yml
+9 -9
View File
@@ -11,11 +11,11 @@ inputs:
required: true required: true
HC_VAULT_ADDR: HC_VAULT_ADDR:
description: "Vault url" description: "Vault URL"
required: true required: true
HC_VAULT_AUTH: HC_VAULT_AUTH:
description: "Specify preferred login method, e.g. token, userpass, etc." description: "Specify preferred login method, e.g., token, userpass"
required: true required: true
HC_VAULT_USERNAME: HC_VAULT_USERNAME:
@@ -46,9 +46,10 @@ runs:
shell: bash shell: bash
run: | run: |
curl -sS -O https://releases.hashicorp.com/vault/${{ inputs.HC_VAULT_VERSION }}/vault_${{ inputs.HC_VAULT_VERSION }}_linux_amd64.zip curl -sS -O https://releases.hashicorp.com/vault/${{ inputs.HC_VAULT_VERSION }}/vault_${{ inputs.HC_VAULT_VERSION }}_linux_amd64.zip
unzip -u vault_${{ inputs.HC_VAULT_VERSION }}_linux_amd64.zip -d . unzip -o vault_${{ inputs.HC_VAULT_VERSION }}_linux_amd64.zip
chmod +x vault chmod +x vault
mv vault /usr/local/bin sudo mv vault /usr/local/bin
rm vault_${{ inputs.HC_VAULT_VERSION }}_linux_amd64.zip
- name: Login to Hashicorp Vault with userpass - name: Login to Hashicorp Vault with userpass
shell: bash shell: bash
@@ -65,7 +66,7 @@ runs:
- name: Login to Hashicorp Vault with token - name: Login to Hashicorp Vault with token
shell: bash shell: bash
if: contains(inputs.HC_VAULT_AUTH, 'token') if: contains(inputs.HC_VAULT_AUTH, 'token') || inputs.HC_VAULT_AUTH == ''
env: env:
VAULT_ADDR: ${{ inputs.HC_VAULT_ADDR }} VAULT_ADDR: ${{ inputs.HC_VAULT_ADDR }}
VAULT_SKIP_VERIFY: "true" VAULT_SKIP_VERIFY: "true"
@@ -80,7 +81,6 @@ runs:
VAULT_ADDR: ${{ inputs.HC_VAULT_ADDR }} VAULT_ADDR: ${{ inputs.HC_VAULT_ADDR }}
VAULT_SKIP_VERIFY: "true" VAULT_SKIP_VERIFY: "true"
run: | run: |
vault kv get -format=json ${{ inputs.HC_VAULT_SECRETS_PATH }} \ vault kv get -format=json "${{ inputs.HC_VAULT_SECRETS_PATH }}" \
| jq -r '.data.data' \ | jq -r '.data.data | to_entries[] | "\(.key)='\''\(.value)'\''"' \
| jq -r 'keys[] as $k | "\($k)='\''\(.[$k])'\''"' > .env \ > "${{ inputs.ENV_FILE_NAME }}"
> ${{ inputs.ENV_FILE_NAME }}