RWejlgaard/pez-infra
1
0
Fork 0
mirror of https://github.com/RWejlgaard/pez-infra.git synced 2026-05-06 04:14:43 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

ci: add ansible-galaxy collection install to deploy workflows

Browse source 
Both deploy-on-merge.yml and deploy.yml install ansible via pip but
never install the required Galaxy collections (community.docker,
community.general, ansible.posix) from ansible/requirements.yml.

This works by accident because the pip ansible package bundles some
collections, but it's fragile — a pip upgrade or runner image change
could break deploys silently.

Fixes PESO-110
This commit is contained in:
Rasmus Wejlgaard 2026-04-03 00:17:22 +00:00
parent d3bce0d5c2
commit 98f8d42343
2 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
.github/workflows/deploy-on-merge.yml vendored
View file

@ -38,6 +38,9 @@ jobs:
wget -qO /tmp/sops.deb https://github.com/getsops/sops/releases/download/v3.9.4/sops_3.9.4_amd64.deb wget -qO /tmp/sops.deb https://github.com/getsops/sops/releases/download/v3.9.4/sops_3.9.4_amd64.deb
sudo dpkg -i /tmp/sops.deb sudo dpkg -i /tmp/sops.deb
- name: Install Ansible collections
run: ansible-galaxy install -r ansible/requirements.yml
- name: Decrypt secrets - name: Decrypt secrets
env: env:
SOPS_AGE_KEY: ${{ secrets.AGE_SECRET_KEY }} SOPS_AGE_KEY: ${{ secrets.AGE_SECRET_KEY }}

3
.github/workflows/deploy.yml vendored
View file

@ -48,6 +48,9 @@ jobs:
wget -qO /tmp/sops.deb https://github.com/getsops/sops/releases/download/v3.9.4/sops_3.9.4_amd64.deb wget -qO /tmp/sops.deb https://github.com/getsops/sops/releases/download/v3.9.4/sops_3.9.4_amd64.deb
sudo dpkg -i /tmp/sops.deb sudo dpkg -i /tmp/sops.deb
- name: Install Ansible collections
run: ansible-galaxy install -r ansible/requirements.yml
- name: Decrypt secrets - name: Decrypt secrets
env: env:
SOPS_AGE_KEY: ${{ secrets.AGE_SECRET_KEY }} SOPS_AGE_KEY: ${{ secrets.AGE_SECRET_KEY }}