ci: switch openbao loading to approle
CI / Rust Checks (push) Has been cancelled
CI / UI Checks (push) Has been cancelled
CI / Frontend E2E (push) Has been cancelled
CI / Deployment Manifests (push) Has been cancelled
Deploy / build-images (apps/admin-api/Dockerfile, git.itexp.me/bsodfather/crank-community-admin-api, admin-api) (push) Has been cancelled
Deploy / build-images (apps/mcp-server/Dockerfile, git.itexp.me/bsodfather/crank-community-mcp-server, mcp-server) (push) Has been cancelled
Deploy / build-images (apps/ui/Dockerfile, git.itexp.me/bsodfather/crank-community-ui, ui) (push) Has been cancelled
Deploy / deploy (push) Has been cancelled

This commit is contained in:
github-ops
2026-06-16 17:50:18 +00:00
parent 1b528106b7
commit 7ab04aab2d
7 changed files with 108 additions and 43 deletions
+15 -5
View File
@@ -36,13 +36,17 @@ jobs:
uses: actions/checkout@v5
- name: Verify runner toolchain
run: docker --version
run: |
docker --version
command -v bao
bao version
- name: Load deployment secrets from OpenBao
env:
BAO_ADDR: ${{ secrets.BAO_ADDR }}
BAO_TOKEN: ${{ secrets.BAO_TOKEN }}
BAO_SECRET_PATH: ${{ secrets.BAO_SECRET_PATH }}
BAO_ROLE_ID: ${{ secrets.BAO_ROLE_ID }}
BAO_SECRET_ID: ${{ secrets.BAO_SECRET_ID }}
OPENBAO_APP: crank
run: scripts/load-openbao-env.sh
- name: Login to registry
@@ -68,11 +72,17 @@ jobs:
- name: Checkout
uses: actions/checkout@v5
- name: Verify OpenBao CLI
run: |
command -v bao
bao version
- name: Load deployment secrets from OpenBao
env:
BAO_ADDR: ${{ secrets.BAO_ADDR }}
BAO_TOKEN: ${{ secrets.BAO_TOKEN }}
BAO_SECRET_PATH: ${{ secrets.BAO_SECRET_PATH }}
BAO_ROLE_ID: ${{ secrets.BAO_ROLE_ID }}
BAO_SECRET_ID: ${{ secrets.BAO_SECRET_ID }}
OPENBAO_APP: crank
run: scripts/load-openbao-env.sh
- name: Configure SSH key