Skip to content

Commit e5f16b0

Browse files
committed
ci: add a varname to switch all become to false, as GH action does not allow priv escalation anymore
1 parent 111349a commit e5f16b0

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

.github/workflows/ci.yml

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ on:
99
molecule_tests:
1010
required: true
1111
type: string
12-
sanity_includes:
12+
root_permission_varname:
1313
required: false
1414
type: string
1515
default: "[]"
@@ -213,11 +213,12 @@ jobs:
213213
- name: Run molecule test
214214
run: |
215215
molecule --version
216-
molecule test -s ${{ matrix.molecule_test }}
216+
molecule test -e ${{ inputs.root_permission_varname }}=false -s ${{ matrix.molecule_test }}
217217
working-directory: ./ansible_collections/${{ inputs.fqcn }}
218218
env:
219219
ANSIBLE_VERBOSITY: ${{ inputs.debug_verbosity }}
220-
PROD_JBOSSNETWORK_API_CLIENTID: '${{ secrets.PROD_JBOSSNETWORK_API_CLIENTID }}'
220+
:$
221+
PROD_JBOSSNETWORK_API_CLIENTID: '${{ secrets.PROD_JBOSSNETWORK_API_CLIENTID }}'
221222
PROD_JBOSSNETWORK_API_SECRET: '${{ secrets.PROD_JBOSSNETWORK_API_SECRET }}'
222223
STAGE_JBOSSNETWORK_API_CLIENTID: '${{ secrets.STAGE_JBOSSNETWORK_API_CLIENTID }}'
223224
STAGE_JBOSSNETWORK_API_SECRET: '${{ secrets.STAGE_JBOSSNETWORK_API_SECRET }}'

0 commit comments

Comments
 (0)