Update CI workflow to exclude example vault files from validation and add host variables for dev02
Some checks failed
CI / lint-and-test (pull_request) Successful in 1m21s
CI / ansible-validation (pull_request) Successful in 8m50s
CI / secret-scanning (pull_request) Successful in 2m49s
CI / dependency-scan (pull_request) Successful in 6m8s
CI / sast-scan (pull_request) Successful in 6m31s
CI / license-check (pull_request) Successful in 1m16s
CI / vault-check (pull_request) Successful in 5m34s
CI / playbook-test (pull_request) Successful in 5m33s
CI / container-scan (pull_request) Failing after 2m51s
CI / sonar-analysis (pull_request) Failing after 1m10s
CI / workflow-summary (pull_request) Successful in 1m11s

- Modify CI workflow to filter out example vault files during encryption validation
- Add new host variables for dev02, including sudo configuration and shell user settings
- Disable installation of data science stack components for dev02
This commit is contained in:
ilia 2025-12-28 21:31:02 -05:00
parent c7a300b922
commit 9ea1090d02
2 changed files with 17 additions and 1 deletions

View File

@ -159,7 +159,7 @@ jobs:
- name: Validate vault files are encrypted
run: |
echo "Checking for Ansible Vault files..."
vault_files=$(find . -name "*vault*.yml" -o -name "*vault*.yaml" | grep -v ".git" || true)
vault_files=$(find . -name "*vault*.yml" -o -name "*vault*.yaml" | grep -v ".git" | grep -v ".example" || true)
if [ -z "$vault_files" ]; then
echo "No vault files found"
exit 0

View File

@ -0,0 +1,16 @@
---
# Host variables for dev02
# Use ladmin user with sudo to become root
ansible_become: true
ansible_become_method: sudo
ansible_become_password: "{{ vault_dev02_become_password }}"
# Configure shell for ladmin
shell_users:
- ladmin
# Skip data science stack
install_conda: false
install_jupyter: false
install_r: false