lorentz/wulf-ansible
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Read OP_SERVICE_ACCOUNT_TOKEN from extra-vars, not controller env

Browse source 
Semaphore injects environment secrets as ansible extra-vars, not as
process env vars, so lookup('env','OP_SERVICE_ACCOUNT_TOKEN') resolved
to empty string and the op CLI hung waiting for interactive auth.
Reference the variable directly instead.
This commit is contained in:
lorentz 2026-04-21 01:59:08 +00:00
parent 323616f802
commit 62f28f5c51
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
playbooks/n8n.yml
View file

@ -30,7 +30,7 @@
become: false
no_log: true
environment:
OP_SERVICE_ACCOUNT_TOKEN: "{{ lookup('env','OP_SERVICE_ACCOUNT_TOKEN') }}"
OP_SERVICE_ACCOUNT_TOKEN: "{{ OP_SERVICE_ACCOUNT_TOKEN }}"
# 🔐 Load existing secrets
- name: Load secrets from 1Password
@ -44,7 +44,7 @@
become: false
no_log: true
environment:
OP_SERVICE_ACCOUNT_TOKEN: "{{ lookup('env','OP_SERVICE_ACCOUNT_TOKEN') }}"
OP_SERVICE_ACCOUNT_TOKEN: "{{ OP_SERVICE_ACCOUNT_TOKEN }}"
- name: Set secrets from 1Password
when: op_check.rc == 0
@ -84,7 +84,7 @@
"postgres_password={{ n8n_postgres_password }}" \
"encryption_key={{ n8n_encryption_key }}"
environment:
OP_SERVICE_ACCOUNT_TOKEN: "{{ lookup('env','OP_SERVICE_ACCOUNT_TOKEN') }}"
OP_SERVICE_ACCOUNT_TOKEN: "{{ OP_SERVICE_ACCOUNT_TOKEN }}"
# 🧱 Infrastructure
- name: Ensure stack directory exists