diff --git a/.woodpecker.yml b/.woodpecker.yml index 8ed9b98..7f166b4 100644 --- a/.woodpecker.yml +++ b/.woodpecker.yml @@ -10,7 +10,8 @@ steps: from_secret: vault_secret_id commands: - export VAULT_TOKEN=$(vault write -field=token auth/approle/login role_id=$VAULT_ROLE_ID secret_id=$VAULT_SECRET_ID) - - vault kv get -format=json projects/test/demo | jq -r '.data.data | to_entries[] | "export \(.key)=\(.value)"' > .env.vault + - vault kv get -format=json projects/test/demo > /tmp/secrets.json + - python3 -c "import json; d=json.load(open('/tmp/secrets.json'))['data']['data']; f=open('.env.vault','w'); [f.write(f'export {k}={v}\n') for k,v in d.items()]" - echo "Fetched secrets:" - cat .env.vault