Skip to content

Commit e98ae40

Browse files
committed
ci: add a varname to switch all become to false, as GH action does not allow priv escalation anymore
1 parent 111349a commit e98ae40

File tree

1 file changed

+6
-2
lines changed

1 file changed

+6
-2
lines changed

.github/workflows/ci.yml

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,9 @@ on:
99
molecule_tests:
1010
required: true
1111
type: string
12+
root_permission_varname:
13+
required: false
14+
type: string
1215
sanity_includes:
1316
required: false
1417
type: string
@@ -213,11 +216,12 @@ jobs:
213216
- name: Run molecule test
214217
run: |
215218
molecule --version
216-
molecule test -s ${{ matrix.molecule_test }}
219+
molecule test -e ${{ inputs.root_permission_varname }}=false -s ${{ matrix.molecule_test }}
217220
working-directory: ./ansible_collections/${{ inputs.fqcn }}
218221
env:
219222
ANSIBLE_VERBOSITY: ${{ inputs.debug_verbosity }}
220-
PROD_JBOSSNETWORK_API_CLIENTID: '${{ secrets.PROD_JBOSSNETWORK_API_CLIENTID }}'
223+
:$
224+
PROD_JBOSSNETWORK_API_CLIENTID: '${{ secrets.PROD_JBOSSNETWORK_API_CLIENTID }}'
221225
PROD_JBOSSNETWORK_API_SECRET: '${{ secrets.PROD_JBOSSNETWORK_API_SECRET }}'
222226
STAGE_JBOSSNETWORK_API_CLIENTID: '${{ secrets.STAGE_JBOSSNETWORK_API_CLIENTID }}'
223227
STAGE_JBOSSNETWORK_API_SECRET: '${{ secrets.STAGE_JBOSSNETWORK_API_SECRET }}'

0 commit comments

Comments
 (0)