From 20274d49d429002ce7cb47b652dc977ec7c27822 Mon Sep 17 00:00:00 2001 From: "Rasmus \"Pez\" Wejlgaard" Date: Fri, 3 Apr 2026 01:18:30 +0100 Subject: [PATCH] ci: add ansible-galaxy collection install to deploy workflows (#39) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Both deploy-on-merge.yml and deploy.yml install ansible via pip but never install the required Galaxy collections (community.docker, community.general, ansible.posix) from ansible/requirements.yml. This works by accident because the pip ansible package bundles some collections, but it's fragile — a pip upgrade or runner image change could break deploys silently. Fixes PESO-110 --- .github/workflows/deploy-on-merge.yml | 3 +++ .github/workflows/deploy.yml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/.github/workflows/deploy-on-merge.yml b/.github/workflows/deploy-on-merge.yml index c759817..ad14d87 100644 --- a/.github/workflows/deploy-on-merge.yml +++ b/.github/workflows/deploy-on-merge.yml @@ -38,6 +38,9 @@ jobs: wget -qO /tmp/sops.deb https://github.com/getsops/sops/releases/download/v3.9.4/sops_3.9.4_amd64.deb sudo dpkg -i /tmp/sops.deb + - name: Install Ansible collections + run: ansible-galaxy install -r ansible/requirements.yml + - name: Decrypt secrets env: SOPS_AGE_KEY: ${{ secrets.AGE_SECRET_KEY }} diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index f35a07b..3c25ce4 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -48,6 +48,9 @@ jobs: wget -qO /tmp/sops.deb https://github.com/getsops/sops/releases/download/v3.9.4/sops_3.9.4_amd64.deb sudo dpkg -i /tmp/sops.deb + - name: Install Ansible collections + run: ansible-galaxy install -r ansible/requirements.yml + - name: Decrypt secrets env: SOPS_AGE_KEY: ${{ secrets.AGE_SECRET_KEY }}