Skip to content

Commit

Permalink
two seperate files
Browse files Browse the repository at this point in the history
  • Loading branch information
joergi committed Oct 20, 2024
1 parent 0cda801 commit 38f5c0b
Show file tree
Hide file tree
Showing 2 changed files with 63 additions and 54 deletions.
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
name: Read secrets from vault
name: Linux - Read secrets from vault
on:
push:
branches: [ main, mac ]
Expand Down Expand Up @@ -55,56 +55,3 @@ jobs:
echo "password should be \"test_password\" but was $CHECKVAR"
exit 1
fi
mac:
runs-on: macos-13
steps:
- uses: actions/[email protected]

- uses: douglascamata/setup-docker-macos-action@v1-alpha
timeout-minutes: 12

- run: |
docker version
- name: run Docker hello-world
run: docker run hello-world

- name: brew vault
run: brew install hashicorp/tap/vault

- name: Run docker-compose
run: docker-compose -f ./vault-docker/docker-compose.yml up -d

- name: verifying vault
run: |
echo "Waiting for Vault to start..."
sleep 30
docker ps
echo "docker images"
export VAULT_ADDR=http://127.0.0.1:8200
echo "vault status"
vault status
echo "login to vault"
vault login token=vault-plaintext-root-token
echo "Passwort is: (next line)"
echo $(vault kv get -field=password "/my-secrets/dev")
mkdir $HOME/.superexport
touch $HOME/.superexport/.exported.sh
chmod +x $HOME/.superexport/.exported.sh
chmod +x superexport.sh
./superexport.sh MYKEY password /my-secrets/dev foo
echo "reading secrets from from secret tools"
source $HOME/.superexport/.secretreader.sh
echo "mykey is $MYKEY"
echo "GH_ENV=$MYKEY" >> $GITHUB_ENV
- name: check if the password is correct
run: |
CHECKVAR="${{ env.GH_ENV }}"
if [ "$CHECKVAR" = "test_password" ]; then
echo "password is correct"
exit 0
else
echo "password is wrong"
echo "password should be \"test_password\" but was $CHECKVAR"
exit 1
fi
62 changes: 62 additions & 0 deletions .github/workflows/testing-mac.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,62 @@
name: MAC - Read secrets from vault
on:
push:
branches: [ main, mac ]
workflow_dispatch: {}

jobs:
mac:
runs-on: macos-13
steps:
- uses: actions/[email protected]

- uses: douglascamata/setup-docker-macos-action@v1-alpha
timeout-minutes: 12

- run: |
docker version
- name: run Docker hello-world
run: docker run hello-world

- name: brew vault
run: brew install hashicorp/tap/vault

- name: Run docker-compose
run: docker-compose -f ./vault-docker/docker-compose.yml up -d

- name: verifying vault
run: |
echo "Waiting for Vault to start..."
sleep 30
docker ps
echo "docker images"
export VAULT_ADDR=http://127.0.0.1:8200
echo "vault status"
echo $VAULT_ADDR
vault status
echo "login to vault"
vault login token=vault-plaintext-root-token
vault token lookup
echo "Passwort is: (next line)"
echo $(vault kv get -field=password "/my-secrets/dev")
mkdir $HOME/.superexport
touch $HOME/.superexport/.exported.sh
chmod +x $HOME/.superexport/.exported.sh
chmod +x superexport.sh
./superexport.sh MYKEY password /my-secrets/dev foo
echo "reading secrets from from secret tools"
source $HOME/.superexport/.secretreader.sh
echo "mykey is $MYKEY"
echo "GH_ENV=$MYKEY" >> $GITHUB_ENV
- name: check if the password is correct
run: |
CHECKVAR="${{ env.GH_ENV }}"
if [ "$CHECKVAR" = "test_password" ]; then
echo "password is correct"
exit 0
else
echo "password is wrong"
echo "password should be \"test_password\" but was $CHECKVAR"
exit 1
fi

0 comments on commit 38f5c0b

Please sign in to comment.