From fe99381cb7c6e96f0dbfe0385de37bb124cd2a58 Mon Sep 17 00:00:00 2001 From: RaymondVerhoef Date: Wed, 24 Jun 2026 15:57:33 +0200 Subject: [PATCH] ci: pass Entra (Azure) secrets to deploy playbooks (#16) Co-Authored-By: Claude Opus 4.8 --- .github/workflows/deploy-dev.yml | 4 ++++ .github/workflows/deploy-prod.yml | 4 ++++ 2 files changed, 8 insertions(+) diff --git a/.github/workflows/deploy-dev.yml b/.github/workflows/deploy-dev.yml index ebb85f5..1d18f40 100644 --- a/.github/workflows/deploy-dev.yml +++ b/.github/workflows/deploy-dev.yml @@ -28,4 +28,8 @@ jobs: -i infra/development/hosts.ini \ -e "ansible_ssh_private_key_file=~/.ssh/deploy_key" \ -e "anthropic_api_key=${{ secrets.ANTHROPIC_API_KEY }}" \ + -e "entra_tenant_id=${{ secrets.ENTRA_TENANT_ID }}" \ + -e "entra_client_id=${{ secrets.ENTRA_CLIENT_ID }}" \ + -e "entra_client_secret=${{ secrets.ENTRA_CLIENT_SECRET }}" \ + -e "entra_admin_emails=${{ secrets.ENTRA_ADMIN_EMAILS }}" \ infra/development/site/deploy-playbook.yml diff --git a/.github/workflows/deploy-prod.yml b/.github/workflows/deploy-prod.yml index df0e00e..1aec18c 100644 --- a/.github/workflows/deploy-prod.yml +++ b/.github/workflows/deploy-prod.yml @@ -30,4 +30,8 @@ jobs: -i infra/production/hosts.ini \ -e "ansible_ssh_private_key_file=~/.ssh/deploy_key" \ -e "anthropic_api_key=${{ secrets.ANTHROPIC_API_KEY }}" \ + -e "entra_tenant_id=${{ secrets.ENTRA_TENANT_ID }}" \ + -e "entra_client_id=${{ secrets.ENTRA_CLIENT_ID }}" \ + -e "entra_client_secret=${{ secrets.ENTRA_CLIENT_SECRET }}" \ + -e "entra_admin_emails=${{ secrets.ENTRA_ADMIN_EMAILS }}" \ infra/production/site/deploy-playbook.yml