From 8191038ee0cb7d178193e618c4e1ebc3c8130160 Mon Sep 17 00:00:00 2001 From: dunemask Date: Thu, 15 Feb 2024 04:48:52 +0000 Subject: [PATCH 1/4] [FEATURE] Adjust URLS --- README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index e4fd7c2..0e57a58 100644 --- a/README.md +++ b/README.md @@ -6,8 +6,9 @@ The actions are used by Elysium to run CI/CD tasks and this repo will be archive The actions available are: - [S3 Backup](https://gitea.dunemask.dev/elysium/elysium-actions/src/branch/s3-backup/action.yml) -- [Oasis Deploy](https://gitea.dunemask.dev/elysium/elysium-actions/src/branch/oasis-deploy/action.yml) +- [Oasis Auto Setup](https://gitea.dunemask.dev/elysium/elysium-actions/src/branch/oasis-setup-auto/action.yml) - [Infisical Env](https://gitea.dunemask.dev/elysium/elysium-actions/src/branch/infisical-env/action.yml) +- [Oasis Advanced Setup](https://gitea.dunemask.dev/elysium/elysium-actions/src/branch/oasis-setup-advanced/action.yml) - [Elysium CI/CD](https://gitea.dunemask.dev/elysium/elysium-actions/src/branch/elysium-ci-cd/action.yml) ## Workflow Template From ce41d087582bbf91cf1b6ec48b1c965b95b0302b Mon Sep 17 00:00:00 2001 From: Dunemask Date: Wed, 14 Feb 2024 22:08:47 -0700 Subject: [PATCH 2/4] [TMP] Init prototype --- action.yml | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 action.yml diff --git a/action.yml b/action.yml new file mode 100644 index 0000000..b2c02c0 --- /dev/null +++ b/action.yml @@ -0,0 +1,30 @@ +# Based on https://github.com/zerodays/action-infisical/blob/master/action.yml +name: 'Elysium Infisical Secrets' +description: 'Fetch secrets from Infisical and add them to the env' +inputs: + infisical-token: + description: 'Infisical API Token' + required: true + environment: + description: 'The environment to fetch secrets for (e.g., staging, production)' + required: true + secret-matrix: + description: 'Secret Matrix' + required: true + api-url: + description: 'Infisical API URL (defaults to https://infisical.dunemask.dev/api)' + required: false + default: 'https://infisical.dunemask.dev/api' +runs: + using: 'composite' + strategy: + matrix: + secret-path: ${{ inputs.secret-matrix}} + steps: + - name: Infisical CLI install + shell: bash + run: | + curl -s -L https://github.com/Infisical/infisical/releases/download/infisical-cli%2Fv0.16.10/infisical_0.16.10_linux_amd64.tar.gz | tar xvz + ./infisical export --domain ${{ inputs.api-url }} --token ${{ inputs.infisical-token}} --env ${{ inputs.environment }} --path ${{ matrix.secret-path }} >> $GITHUB_ENV + - shell: bash + run: echo "Secrets added to environment!". \ No newline at end of file From 61f1240abf022021e84541ac8ca09e71dbbecdcd Mon Sep 17 00:00:00 2001 From: Dunemask Date: Wed, 14 Feb 2024 22:16:28 -0700 Subject: [PATCH 3/4] [RETRY] Infisical multienv? --- action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/action.yml b/action.yml index b2c02c0..df58c8a 100644 --- a/action.yml +++ b/action.yml @@ -25,6 +25,6 @@ runs: shell: bash run: | curl -s -L https://github.com/Infisical/infisical/releases/download/infisical-cli%2Fv0.16.10/infisical_0.16.10_linux_amd64.tar.gz | tar xvz - ./infisical export --domain ${{ inputs.api-url }} --token ${{ inputs.infisical-token}} --env ${{ inputs.environment }} --path ${{ matrix.secret-path }} >> $GITHUB_ENV + ./infisical export --domain ${{ inputs.api-url }} --token ${{ inputs.infisical-token}} --env ${{ inputs.environment }} --path / >> $GITHUB_ENV - shell: bash run: echo "Secrets added to environment!". \ No newline at end of file From a125f4dfedb511554b737d016d6d8c761edeea8f Mon Sep 17 00:00:00 2001 From: Dunemask Date: Wed, 14 Feb 2024 22:18:36 -0700 Subject: [PATCH 4/4] [RETRY] Infisical multienv? --- action.yml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/action.yml b/action.yml index df58c8a..20d2f80 100644 --- a/action.yml +++ b/action.yml @@ -17,13 +17,11 @@ inputs: default: 'https://infisical.dunemask.dev/api' runs: using: 'composite' - strategy: - matrix: - secret-path: ${{ inputs.secret-matrix}} steps: - name: Infisical CLI install shell: bash run: | + echo ${{inputs.secret-matrix}} curl -s -L https://github.com/Infisical/infisical/releases/download/infisical-cli%2Fv0.16.10/infisical_0.16.10_linux_amd64.tar.gz | tar xvz ./infisical export --domain ${{ inputs.api-url }} --token ${{ inputs.infisical-token}} --env ${{ inputs.environment }} --path / >> $GITHUB_ENV - shell: bash