From 1c71fedb6ed392db20aa6b277a3cf2210c372a22 Mon Sep 17 00:00:00 2001
From: Sven Ketelsen <sven.ketelsen@netgo.de>
Date: Wed, 30 Mar 2022 12:38:08 +0200
Subject: [PATCH] chore: gitlab - fixed vault passwords

---
 .gitlab-ci.yml | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 293568f..514332d 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -84,7 +84,6 @@ builder-job:
     - chmod 0700 ~/.ssh
     - '[[ -f /.dockerenv ]] && echo -e "Host *\n\tStrictHostKeyChecking no\n\n" >> ~/.ssh/config'
     - ssh-add -L
-    - echo "${ANSIBLE_VAULT_PASS_DEV}" > /tmp/vault-pass
     - export HETZNER_LABEL_SELECTOR="stage=${STAGE}"
     - ansible-playbook -i stage-${STAGE}-netgo-hcloud.yml setup.yml --vault-password-file /tmp/vault-pass -t common -u gitlabci
   after_script:
@@ -95,6 +94,7 @@ run-setup-dev:
   resource_group: dev
   before_script:
     - export STAGE=dev
+    - echo "${ANSIBLE_VAULT_PASS_DEV}" > /tmp/vault-pass
   only:
     - main
 
@@ -103,6 +103,7 @@ run-setup-qa:
   resource_group: qa
   before_script:
     - export STAGE=qa
+    - echo "${ANSIBLE_VAULT_PASS_QA}" > /tmp/vault-pass
   only:
     - qa
 
@@ -111,6 +112,7 @@ run-setup-prodnso:
   resource_group: prodnso
   before_script:
     - export STAGE=prodnso
+    - echo "${ANSIBLE_VAULT_PASS_PRODNSO}" > /tmp/vault-pass
   only:
     - prodnso
 
@@ -148,6 +150,7 @@ run-kubernetes-dev:
   resource_group: dev
   before_script:
     - export STAGE=dev
+    - echo "${ANSIBLE_VAULT_PASS_DEV}" > /tmp/vault-pass
   only:
     - main
 
@@ -156,6 +159,7 @@ run-kubernetes-qa:
   resource_group: qa
   before_script:
     - export STAGE=qa
+    - echo "${ANSIBLE_VAULT_PASS_QA}" > /tmp/vault-pass
   only:
     - qa
 
@@ -164,6 +168,7 @@ run-kubernetes-prodnso:
   resource_group: prodnso
   before_script:
     - export STAGE=prodnso
+    - echo "${ANSIBLE_VAULT_PASS_PRODNSO}" > /tmp/vault-pass
   only:
     - prodnso
 
@@ -204,6 +209,7 @@ run-management-update-dev:
   resource_group: dev
   before_script:
     - export STAGE=dev
+    - echo "${ANSIBLE_VAULT_PASS_DEV}" > /tmp/vault-pass
   only:
     - main
 
@@ -212,6 +218,7 @@ run-management-update-qa:
   resource_group: qa
   before_script:
     - export STAGE=qa
+    - echo "${ANSIBLE_VAULT_PASS_QA}" > /tmp/vault-pass
   only:
     - qa
 
@@ -220,6 +227,7 @@ run-management-update-prodnso:
   resource_group: prodnso
   before_script:
     - export STAGE=prodnso
+    - echo "${ANSIBLE_VAULT_PASS_PRODNSO}" > /tmp/vault-pass
   only:
     - prodnso
 
@@ -258,6 +266,7 @@ run-patchday-dev:
   resource_group: dev
   before_script:
     - export STAGE=dev
+    - echo "${ANSIBLE_VAULT_PASS_DEV}" > /tmp/vault-pass
   only:
     - main
 
@@ -266,6 +275,7 @@ run-patchday-qa:
   resource_group: qa
   before_script:
     - export STAGE=qa
+    - echo "${ANSIBLE_VAULT_PASS_QA}" > /tmp/vault-pass
   only:
     - qa
 
@@ -274,5 +284,6 @@ run-patchday-prodnso:
   resource_group: prodnso
   before_script:
     - export STAGE=prodnso
+    - echo "${ANSIBLE_VAULT_PASS_PRODNSO}" > /tmp/vault-pass
   only:
     - prodnso