Merge pull request #28 from trento-project/fix-secrets-generation

Fix container secrets random generation
trento-project · Feb 21, 2024 · 2445096 · 2445096
2 parents 4694a34 + 3f903bb
commit 2445096
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 3 deletions.
diff --git a/roles/containers/defaults/main.yml b/roles/containers/defaults/main.yml
@@ -21,9 +21,9 @@ wanda_postgres_db: wandadb
 rabbitmq_username: trento
 rabbitmq_host: host.docker.internal
 rabbitmq_vhost: "trento"
-secret_key_base: "{{ lookup('community.general.random_string', base64=True, length=64) }}"
-access_token_secret: "{{ lookup('community.general.random_string', base64=True, length=64) }}"
-refresh_token_secret: "{{ lookup('community.general.random_string', base64=True, length=64) }}"
+secret_key_base: ""
+access_token_secret: ""
+refresh_token_secret: ""
 web_admin_username: admin
 enable_api_key: "true"
 enable_charts: "true"

diff --git a/roles/containers/tasks/main.yml b/roles/containers/tasks/main.yml
@@ -1,5 +1,15 @@
 # code: language=ansible
 ---
+- name: Create secrets
+  no_log: true
+  ansible.builtin.set_fact: # noqa: var-naming[no-jinja]
+    "{{ item }}": "{{ lookup('community.general.random_string', base64=True, length=64) }}"
+  when: lookup('vars', item) == ""
+  loop:
+    - secret_key_base
+    - access_token_secret
+    - refresh_token_secret
+
 - name: Install docker python management deps
   ansible.builtin.pip:
     name: