refactor(.woodpecker.yml): move auth to no-op provision case (Pattern B), remove AUTH_* env vars
ci/woodpecker/push/woodpecker Pipeline was successful

This commit is contained in:
2026-06-27 06:43:04 -07:00
parent 70e74e5b6e
commit b0dba66349
+1 -12
View File
@@ -25,12 +25,6 @@ steps:
from_secret: swarm_manager_ip from_secret: swarm_manager_ip
3DPRINT_DB_PASSWORD: 3DPRINT_DB_PASSWORD:
from_secret: 3dprint_db_password from_secret: 3dprint_db_password
AUTH_PG_PASSWORD:
from_secret: auth_pg_password
AUTH_SECRET_KEY:
from_secret: auth_secret_key
AUTH_PG_PASSWORD2:
from_secret: auth_pg_password2
GAMMA_AUTH_TOKEN: GAMMA_AUTH_TOKEN:
from_secret: gamma_auth_token from_secret: gamma_auth_token
GIT_DB_PASSWORD: GIT_DB_PASSWORD:
@@ -121,18 +115,13 @@ steps:
STACK=$(basename "$f" .yaml) STACK=$(basename "$f" .yaml)
echo "Provisioning: $STACK" echo "Provisioning: $STACK"
case "$STACK" in case "$STACK" in
maintenance|media|unifi|guacamole|security) maintenance|media|unifi|guacamole|security|auth)
echo " No Docker secrets for $STACK — secrets in host .env";; echo " No Docker secrets for $STACK — secrets in host .env";;
woodpecker) woodpecker)
echo " Manual only - skipping";; echo " Manual only - skipping";;
3dprint) 3dprint)
ssh -o StrictHostKeyChecking=no root@${SWARM_MANAGER_IP} "source /tmp/cs.sh ssh -o StrictHostKeyChecking=no root@${SWARM_MANAGER_IP} "source /tmp/cs.sh
create_or_update_secret '3dprint_db_password' '${3DPRINT_DB_PASSWORD}'";; create_or_update_secret '3dprint_db_password' '${3DPRINT_DB_PASSWORD}'";;
auth)
ssh -o StrictHostKeyChecking=no root@${SWARM_MANAGER_IP} "source /tmp/cs.sh
create_or_update_secret 'auth_pg_password' '${AUTH_PG_PASSWORD}'
create_or_update_secret 'auth_secret_key' '${AUTH_SECRET_KEY}'
create_or_update_secret 'auth_pg_password2' '${AUTH_PG_PASSWORD2}'";;
gamma) gamma)
ssh -o StrictHostKeyChecking=no root@${SWARM_MANAGER_IP} "source /tmp/cs.sh ssh -o StrictHostKeyChecking=no root@${SWARM_MANAGER_IP} "source /tmp/cs.sh
create_or_update_secret 'gamma_auth_token' '${GAMMA_AUTH_TOKEN}'";; create_or_update_secret 'gamma_auth_token' '${GAMMA_AUTH_TOKEN}'";;