wbyc/terraform-vsphere-resourcegroups
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use actual Vault credentials for terraform tests
Some checks failed
Code Quality & Security Scan / TFLint (push) Successful in 17s
Details
Code Quality & Security Scan / Terraform Destroy (push) Has been skipped
Details
Code Quality & Security Scan / Tfsec Security Scan (push) Successful in 33s
Details
Code Quality & Security Scan / Checkov Security Scan (push) Successful in 31s
Details
Code Quality & Security Scan / Terraform Tests (push) Failing after 1m29s
Details
Code Quality & Security Scan / SonarQube Trigger (push) Has been skipped
Details
Code Quality & Security Scan / Terraform Init (push) Has been skipped
Details
Code Quality & Security Scan / Terraform Apply (push) Has been skipped
Details

Browse Source 
- Changed from mock credentials to actual Vault AppRole secrets
- Added VAULT_ADDR environment variable for Vault connection
- Uses same credentials as terraform-init job (read-only access)
- Fixes: Vault authentication failures in test execution
This commit is contained in:
Patrick de Ruiter 2025-11-09 09:59:47 +01:00
parent 89dabee068
commit 74940bdc29
Signed by: pderuiter
GPG Key ID: 5EBA7F21CF583321
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
.gitea/workflows/sonarqube.yaml
View File

@ -82,14 +82,16 @@ jobs:
- name: Terraform Init (for testing)
run: terraform init -backend=false
env:
TF_VAR_role_id: "test-role-id"
TF_VAR_secret_id: "test-secret-id"
TF_VAR_role_id: ${{ secrets.VAULT_ROLE_ID }}
TF_VAR_secret_id: ${{ secrets.VAULT_SECRET_ID }}
VAULT_ADDR: ${{ secrets.VAULT_ADDR }}
- name: Run Terraform Tests
run: terraform test -verbose
env:
TF_VAR_role_id: "test-role-id"
TF_VAR_secret_id: "test-secret-id"
TF_VAR_role_id: ${{ secrets.VAULT_ROLE_ID }}
TF_VAR_secret_id: ${{ secrets.VAULT_SECRET_ID }}
VAULT_ADDR: ${{ secrets.VAULT_ADDR }}
- name: Generate Test Report
if: always()