From d7ee878393f046af475aa2e3cc666389cb58a0fd Mon Sep 17 00:00:00 2001
From: lorentz <lorentz@wulfconsulting.com>
Date: Tue, 21 Apr 2026 01:31:55 +0000
Subject: [PATCH] Fix n8n playbook dry-run failure on 1Password lookups

Shell tasks are skipped in check mode by default, leaving op_item.stdout
empty and breaking from_json in the set_fact. The op item get calls are
read-only, so mark them check_mode: no so dry runs reflect reality.
---
 playbooks/n8n.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/playbooks/n8n.yml b/playbooks/n8n.yml
index 9f02187..bf551bd 100644
--- a/playbooks/n8n.yml
+++ b/playbooks/n8n.yml
@@ -24,6 +24,7 @@
       register: op_check
       failed_when: false
       changed_when: false
+      check_mode: no
       environment:
         OP_SERVICE_ACCOUNT_TOKEN: "{{ lookup('env','OP_SERVICE_ACCOUNT_TOKEN') }}"
 
@@ -33,6 +34,7 @@
       shell: |
         op item get "{{ stack_name }}" --vault="Automation" --format json
       register: op_item
+      check_mode: no
       environment:
         OP_SERVICE_ACCOUNT_TOKEN: "{{ lookup('env','OP_SERVICE_ACCOUNT_TOKEN') }}"