stabify/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

modified: infrastructure/ansible/deploy_logic_pull.yml

Browse Source 
modified:   infrastructure/ansible/deploy_logic_push.yml
This commit is contained in:
Ubuntu
2026-01-09 14:43:48 +00:00
parent c51f441de3
commit d459ce504d
2 changed files with 12 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
infrastructure/ansible/deploy_logic_pull.yml
View File

@@ -41,12 +41,12 @@
{# Fallback: Wenn app_secrets direkt die Daten sind oder in 'secret'/'data' stecken #} {# Fallback: Wenn app_secrets direkt die Daten sind oder in 'secret'/'data' stecken #}
{% set final_secrets = app_secrets.secret | default(app_secrets.data | default(app_secrets)) %} {% set final_secrets = app_secrets.secret | default(app_secrets.data | default(app_secrets)) %}
{% if final_secrets is mapping %} {% if final_secrets is mapping %}
{% for key, value in final_secrets.items() %} {% for key, value in final_secrets.items() %}
{# Filtere Meta-Daten raus, falls wir doch das falsche Level erwischt haben #} {# Filtere Meta-Daten raus #}
{% if key not in ['data', 'metadata', 'auth', 'lease_id', 'lease_duration', 'renewable', 'request_id', 'wrap_info', 'warnings', 'raw'] %} {% if key not in ['data', 'metadata', 'auth', 'lease_id', 'lease_duration', 'renewable', 'request_id', 'wrap_info', 'warnings', 'raw'] %}
{{ key | trim }}={{ value }} {{ key | trim }}={{ value }}
{% endif %} {% endif %}
{% endfor %} {% endfor %}
{% endif %} {% endif %}
mode: '0600' mode: '0600'
when: catalog_entry.stat.exists and app_item.has_secrets | default(false) and app_secrets is defined and app_secrets | length > 0 when: catalog_entry.stat.exists and app_item.has_secrets | default(false) and app_secrets is defined and app_secrets | length > 0

12
infrastructure/ansible/deploy_logic_push.yml
View File

@@ -54,12 +54,12 @@
{# Fallback: Wenn app_secrets direkt die Daten sind oder in 'secret'/'data' stecken #} {# Fallback: Wenn app_secrets direkt die Daten sind oder in 'secret'/'data' stecken #}
{% set final_secrets = app_secrets.secret | default(app_secrets.data | default(app_secrets)) %} {% set final_secrets = app_secrets.secret | default(app_secrets.data | default(app_secrets)) %}
{% if final_secrets is mapping %} {% if final_secrets is mapping %}
{% for key, value in final_secrets.items() %} {% for key, value in final_secrets.items() %}
{# Filtere Meta-Daten raus, falls wir doch das falsche Level erwischt haben #} {# Filtere Meta-Daten raus #}
{% if key not in ['data', 'metadata', 'auth', 'lease_id', 'lease_duration', 'renewable', 'request_id', 'wrap_info', 'warnings', 'raw'] %} {% if key not in ['data', 'metadata', 'auth', 'lease_id', 'lease_duration', 'renewable', 'request_id', 'wrap_info', 'warnings', 'raw'] %}
{{ key | trim }}={{ value }} {{ key | trim }}={{ value }}
{% endif %} {% endif %}
{% endfor %} {% endfor %}
{% endif %} {% endif %}
mode: '0600' mode: '0600'
when: app_item.has_secrets | default(false) and app_secrets | length > 0 when: app_item.has_secrets | default(false) and app_secrets | length > 0