|
14 | 14 | - name: Checkout code
|
15 | 15 | uses: actions/checkout@v4
|
16 | 16 |
|
17 |
| - - name: Get Secrets from Bitwarden |
18 |
| - id: bitwarden-secrets |
19 |
| - uses: https://github.com/bitwarden/sm-action@v2 |
20 |
| - with: |
21 |
| - access_token: ${{ secrets.BW_ACCESS_TOKEN }} |
22 |
| - base_url: https://vault.bitwarden.com |
23 |
| - secrets: | |
24 |
| - c65f8886-f6fb-4c17-bc79-b208000604bf > arrbuntu_ip_address |
25 |
| - a54974b8-c6b3-4df7-9042-b20800064050 > downloaders_ip_address |
26 |
| - dacbeafa-c671-4b9c-9334-b2080006f75b > init_password |
27 |
| - 9ceabbd0-6492-4674-9bab-b2080006e333 > init_username |
28 |
| - 0bc3c1a3-fc48-48ce-85c5-b2080007136a > kasm_ip |
29 |
| - 63ca1819-5090-4e30-9dba-b20800072718 > kasm_ssh_ip |
30 |
| - 47ef68aa-32a9-45b0-835d-b2080006ce38 > npm_ip_address |
31 |
| - d0c7f3ec-8277-4b1b-9a1b-b2080006b842 > prox_ip_address |
32 |
| - 17ab7869-c7a1-4ece-8c64-b20800075213 > pve2_ip_address |
33 |
| - f8f85ab2-5f6d-46a7-9e06-b20800076d26 > s3_endpoint |
34 |
| - 68f1d77d-4e96-498a-9464-b208000679a4 > ssh_password |
35 |
| - d0762ced-73de-4f30-aa1c-b20800069536 > ssh_username |
36 |
| - d8017351-7a11-42e6-9e8d-b208000739b8 > ubu_ip_address |
37 |
| - 1d250f4a-ae18-4e19-934c-b2080005e132 > virtual_environment_api |
38 |
| - a4ed343a-bb92-4beb-a421-b2080005bf98 > virtual_environment_endpoint |
39 |
| - af0ed579-05f8-405f-b0f3-b208000620ca > vlan_gateway |
40 |
| -
|
41 |
| -
|
42 |
| - - name: Write secrets to terraform.tfvars |
43 |
| - working-directory: ./terraform |
44 |
| - run: | |
45 |
| - SECRETS=( |
46 |
| - "arrbuntu_ip_address" |
47 |
| - "downloaders_ip_address" |
48 |
| - "init_password" |
49 |
| - "kasm_ip" |
50 |
| - "kasm_ssh_ip" |
51 |
| - "npm_ip_address" |
52 |
| - "prox_ip_address" |
53 |
| - "pve2_ip_address" |
54 |
| - "s3_endpoint" |
55 |
| - "ssh_password" |
56 |
| - "ssh_username" |
57 |
| - "ubu_ip_address" |
58 |
| - "virtual_environment_api" |
59 |
| - "virtual_environment_endpoint" |
60 |
| - "vlan_gateway" |
61 |
| - ) |
62 |
| - # Clear previous terraform.tfvars if it exists |
63 |
| - > terraform.tfvars |
64 |
| - |
65 |
| - for secret in "${SECRETS[@]}"; do |
66 |
| - value="${{ steps.bitwarden-secrets.outputs[secret] }}" |
67 |
| - echo "${secret} = \"${value}\"" >> terraform.tfvars |
68 |
| - done |
69 |
| -
|
70 |
| -
|
71 | 17 | - name: Create AWS Credentials Directory
|
72 | 18 | run: mkdir -p ~/.aws
|
73 | 19 |
|
|
79 | 25 |
|
80 | 26 | - name: Setup OpenTofu
|
81 | 27 | uses: https://github.com/opentofu/setup-opentofu@v1
|
82 |
| - |
| 28 | + with: |
| 29 | + cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }} |
| 30 | + |
83 | 31 | - name: Run OpenTofu Init
|
84 | 32 | working-directory: ./terraform
|
85 | 33 | run: tofu init
|
|
0 commit comments