From e5f16b0cc3642e5b7e4d17aaaea8f268df2a2219 Mon Sep 17 00:00:00 2001 From: Romain Pelisse Date: Thu, 30 Jan 2025 10:28:00 +0100 Subject: [PATCH] ci: add a varname to switch all become to false, as GH action does not allow priv escalation anymore --- .github/workflows/ci.yml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d6eb706..ac60c1f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -9,7 +9,7 @@ on: molecule_tests: required: true type: string - sanity_includes: + root_permission_varname: required: false type: string default: "[]" @@ -213,11 +213,12 @@ jobs: - name: Run molecule test run: | molecule --version - molecule test -s ${{ matrix.molecule_test }} + molecule test -e ${{ inputs.root_permission_varname }}=false -s ${{ matrix.molecule_test }} working-directory: ./ansible_collections/${{ inputs.fqcn }} env: ANSIBLE_VERBOSITY: ${{ inputs.debug_verbosity }} - PROD_JBOSSNETWORK_API_CLIENTID: '${{ secrets.PROD_JBOSSNETWORK_API_CLIENTID }}' + :$ + PROD_JBOSSNETWORK_API_CLIENTID: '${{ secrets.PROD_JBOSSNETWORK_API_CLIENTID }}' PROD_JBOSSNETWORK_API_SECRET: '${{ secrets.PROD_JBOSSNETWORK_API_SECRET }}' STAGE_JBOSSNETWORK_API_CLIENTID: '${{ secrets.STAGE_JBOSSNETWORK_API_CLIENTID }}' STAGE_JBOSSNETWORK_API_SECRET: '${{ secrets.STAGE_JBOSSNETWORK_API_SECRET }}'