use secrets directly

This commit is contained in:
2025-08-12 20:51:49 +05:30
parent 1ecdb74431
commit fe7e03ca3b

View File

@@ -15,11 +15,9 @@ jobs:
- name: Run Ansible playbook - name: Run Ansible playbook
env: env:
ANSIBLE_HOST_KEY_CHECKING: 'false' ANSIBLE_HOST_KEY_CHECKING: 'false'
SSH_KEY: ${{ secrets.ANSIBLE_PRIVATE_KEY }}
BECOME_PASS: ${{ secrets.ANSIBLE_BECOME_PASS }}
run: | run: |
apt update && apt install -y ansible && \ apt update && apt install -y ansible && \
echo -e ${SSH_KEY} > /mnt/default-key && \ echo -e "${{ secrets.ANSIBLE_PRIVATE_KEY }}" > /mnt/default-key && \
echo ${BECOME_PASS} > /mnt/become-pass.txt && \ echo "${{ secrets.ANSIBLE_BECOME_PASS }}" > /mnt/become-pass.txt && \
chmod 600 /mnt/default-key && \ chmod 600 /mnt/default-key && \
ansible-playbook -i inventory.yml --vault-pass-file /mnt/become-pass.txt --key-file /mnt/default-key playbooks/update-packages.yml ansible-playbook -i inventory.yml --vault-pass-file /mnt/become-pass.txt --key-file /mnt/default-key playbooks/update-packages.yml