Reworking playbooks and workflows.
Auto-Unseal for Vault / Unseal Vault (push) Successful in 35s

This commit is contained in:
2025-09-13 17:35:28 -04:00
parent 16c0a6f956
commit 7c7ae8e19b
4 changed files with 56 additions and 26 deletions
+1 -14
View File
@@ -1,4 +1,3 @@
# .github/workflows/validate-dags.yml
name: Validate DAGs
on:
@@ -38,19 +37,7 @@ jobs:
directory: .
vault_password: ${{ secrets.ANSIBLE_VAULT_PASSWORD }}
requirements: collections/requirements.yml
playbook: |
- hosts: localhost
gather_facts: false
vars:
vault_addr: ${{ env.VAULT_ADDR }}
vault_token: ${{ env.VAULT_TOKEN }}
dags_path: ${{ env.DAGS_PATH }}
tasks:
- name: Render DAG templates
template:
src: "{{ item }}"
dest: "{{ item | regex_replace('\\.j2$', '') }}"
loop: "{{ lookup('fileglob', dags_path ~ '/*.yaml.j2', wantlist=True) }}"
playbook: playbooks/rinoa-render-dags.yml
- name: Install dagu
uses: jaxxstorm/action-install-gh-release@v1
@@ -3,7 +3,7 @@ name: Gitea Branch PR & Ansible Deployment
on:
workflow_dispatch:
workflow_run:
workflows: [Home Assistant Config Check, Validate DAs]
workflows: [Home Assistant Config Check, Validate DAGs]
types:
- completed
branches: main
@@ -11,13 +11,9 @@ on:
branches-ignore:
- 'main'
paths:
- 'app-configs/**'
- 'inventory/hosts.yml'
- 'host_vars/**'
- 'group_vars/**'
- '**/tar-valon_config_deploy.yml'
- '**/gitea_tar-valon_ansible_deploy.yml'
- '!app-configs/rikku/homeassistant/**'
- '!app-configs/rinoa/dagu/dags/**'
- 'app-configs/**'
env:
VAULT_ADDR: ${{ secrets.VAULT_ADDR }}
@@ -120,7 +116,7 @@ jobs:
uses: dawidd6/action-ansible-playbook@v3
with:
directory: .
playbook: tar-valon_config_deploy.yml
playbook: playbooks/tar-valon_config_deploy.yml
vault_password: ${{ secrets.ANSIBLE_VAULT_PASSWORD }}
key: ${{ secrets.ANSIBLE_PRIVATE_KEY }}
requirements: collections/requirements.yml