From fddc3963faea9ba8357b5c72106c5a5dfd138e0f Mon Sep 17 00:00:00 2001 From: "Trez.One" Date: Sun, 31 Aug 2025 22:30:25 -0400 Subject: [PATCH] Moving Vault Unseal workflow to tar-valon-ansible repo. --- .gitea/workflows/vault-auto-unseal-flow.yml | 54 --------------------- 1 file changed, 54 deletions(-) delete mode 100644 .gitea/workflows/vault-auto-unseal-flow.yml diff --git a/.gitea/workflows/vault-auto-unseal-flow.yml b/.gitea/workflows/vault-auto-unseal-flow.yml deleted file mode 100644 index cd789b33..00000000 --- a/.gitea/workflows/vault-auto-unseal-flow.yml +++ /dev/null @@ -1,54 +0,0 @@ -name: Auto-Unseal for Vault - -on: - workflow_dispatch: - schedule: - - cron: '30 5 * * *' - -env: - HC_VAULT_VERSION: '1.20.0' - -jobs: - auto-unseal: - name: Unseal Vault - runs-on: ubuntu-latest - env: - VAULT_ADDR: ${{ secrets.RINOA_VAULT_ADDR }} - VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }} - VAULT_SHARDS: ${{ secrets.VAULT_UNSEAL_SHARDS }} - VAULT_NAMESPACE: "" - steps: - - name: Vault Unseal Start - uses: eikendev/gotify-action@master - with: - gotify_api_base: '${{ secrets.RINOA_GOTIFY_URL }}' - gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}' - notification_title: 'GITEA: HC Vault @ Rinoa' - notification_message: 'Hashicorp Vault unsealing started... 🔐' - - - name: Cache Vault install - id: cache-vault - uses: actions/cache@v4 - with: - path: /opt/hostedtoolcache/vault/${{ env.HC_VAULT_VERSION }}/x64 - key: vault-${{ runner.os }}-${{ env.HC_VAULT_VERSION }} - - - name: Install Vault (only if not cached) - if: steps.cache-vault.outputs.cache-hit != 'true' - uses: cpanato/vault-installer@main - with: - version: ${{ env.HC_VAULT_VERSION }} - - - name: Unseal Vault - run: | - for vault_shard in $VAULT_SHARDS; do - vault operator unseal -address="${VAULT_ADDR}" -non-interactive "${vault_shard}" - done - - - name: Vault Unseal Completion - uses: eikendev/gotify-action@master - with: - gotify_api_base: '${{ secrets.RINOA_GOTIFY_URL }}' - gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}' - notification_title: 'GITEA: HC Vault @ Rinoa' - notification_message: 'Hashicorp Vault unsealed! 🔓'