Fix Forgejo mailer ESO field mapping and token bootstrap env
Map OpenBao key PASSWD to Secret MAILER_PASSWD so ExternalSecret syncs against the live coulombcore path. Allow non-interactive bootstrap via OPENBAO_TOKEN_FILE for make forgejo-openbao-eso-token-apply.
This commit is contained in:
parent
844a3503bb
commit
d61173d66e
2 changed files with 17 additions and 4 deletions
|
|
@ -22,8 +22,21 @@ fi
|
|||
|
||||
echo "OpenBao addr: $BAO_ADDR"
|
||||
echo "Policy: $POLICY_NAME"
|
||||
read -r -s -p "OpenBao operator token (coulombcore / bao.coulomb.social): " BAO_TOKEN
|
||||
echo >&2
|
||||
|
||||
if [[ -n "${BAO_TOKEN:-}" ]]; then
|
||||
:
|
||||
elif [[ -n "${OPENBAO_TOKEN_FILE:-}" && -f "${OPENBAO_TOKEN_FILE}" ]]; then
|
||||
BAO_TOKEN="$(head -n 1 "${OPENBAO_TOKEN_FILE}")"
|
||||
else
|
||||
read -r -s -p "OpenBao operator token (coulombcore / bao.coulomb.social): " BAO_TOKEN
|
||||
echo >&2
|
||||
fi
|
||||
|
||||
if [[ -z "${BAO_TOKEN:-}" ]]; then
|
||||
echo "ERROR: empty OpenBao token" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
export BAO_ADDR BAO_TOKEN
|
||||
|
||||
health="$(curl -fsS "$BAO_ADDR/v1/sys/health")"
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue