Trez/hc-vault-env
4
0
Fork 0
Code Issues Pull Requests Actions Releases Activity

...

Browse Source
This commit is contained in:
Trez.One
2025-10-18 10:00:08 -04:00
parent 7089fc714e
commit bf533b839b
1 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
action.yml
+9 -9
View File
@@ -11,11 +11,11 @@ inputs:
required: true required: true
HC_VAULT_ADDR: HC_VAULT_ADDR:
description: "Vault URL" description: "Vault url"
required: true required: true
HC_VAULT_AUTH: HC_VAULT_AUTH:
description: "Specify preferred login method, e.g., token, userpass" description: "Specify preferred login method, e.g. token, userpass, etc."
required: true required: true
HC_VAULT_USERNAME: HC_VAULT_USERNAME:
@@ -46,10 +46,9 @@ runs:
shell: bash shell: bash
run: | run: |
curl -sS -O https://releases.hashicorp.com/vault/${{ inputs.HC_VAULT_VERSION }}/vault_${{ inputs.HC_VAULT_VERSION }}_linux_amd64.zip curl -sS -O https://releases.hashicorp.com/vault/${{ inputs.HC_VAULT_VERSION }}/vault_${{ inputs.HC_VAULT_VERSION }}_linux_amd64.zip
unzip -o vault_${{ inputs.HC_VAULT_VERSION }}_linux_amd64.zip unzip -u vault_${{ inputs.HC_VAULT_VERSION }}_linux_amd64.zip -d .
chmod +x vault chmod +x vault
sudo mv vault /usr/local/bin mv vault /usr/local/bin
rm vault_${{ inputs.HC_VAULT_VERSION }}_linux_amd64.zip
- name: Login to Hashicorp Vault with userpass - name: Login to Hashicorp Vault with userpass
shell: bash shell: bash
@@ -66,7 +65,7 @@ runs:
- name: Login to Hashicorp Vault with token - name: Login to Hashicorp Vault with token
shell: bash shell: bash
if: contains(inputs.HC_VAULT_AUTH, 'token') || inputs.HC_VAULT_AUTH == '' if: contains(inputs.HC_VAULT_AUTH, 'token')
env: env:
VAULT_ADDR: ${{ inputs.HC_VAULT_ADDR }} VAULT_ADDR: ${{ inputs.HC_VAULT_ADDR }}
VAULT_SKIP_VERIFY: "true" VAULT_SKIP_VERIFY: "true"
@@ -81,6 +80,7 @@ runs:
VAULT_ADDR: ${{ inputs.HC_VAULT_ADDR }} VAULT_ADDR: ${{ inputs.HC_VAULT_ADDR }}
VAULT_SKIP_VERIFY: "true" VAULT_SKIP_VERIFY: "true"
run: | run: |
vault kv get -format=json "${{ inputs.HC_VAULT_SECRETS_PATH }}" \ vault kv get -format=json ${{ inputs.HC_VAULT_SECRETS_PATH }} \
| jq -r '.data.data | to_entries[] | "\(.key)='\''\(.value)'\''"' \ | jq -r '.data.data' \
> "${{ inputs.ENV_FILE_NAME }}" | jq -r 'keys[] as $k | "\($k)='\''\(.[$k])'\''"' > .env \
> ${{ inputs.ENV_FILE_NAME }}