rblundon/homelab
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(semaphore/configure): template vault entry requires type='password'

Browse Source 
Semaphore v2.18 source (db/TemplateVault.go) shows FillTemplateVault
only loads the key when type==TemplateVaultPassword. With type left
as the default empty string, the vault key is stored but never
materialised at task-run time; ansible-playbook gets no password and
fails with 'Attempting to decrypt but no vault secrets found'.

Confirmed by patching live templates via PUT with type='password';
next task run succeeded.
This commit is contained in:
Hermes Agent service account
2026-05-29 23:25:07 -05:00
parent 8fd9fd5b20
commit 09ae954085
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
ansible/roles/semaphore/tasks/configure.yml
View File

@@ -307,7 +307,8 @@
| combine( | combine(
{'vaults': [{'id': 0, {'vaults': [{'id': 0,
'vault_key_id': _semaphore_key_ids[item.vault_password] | int, 'vault_key_id': _semaphore_key_ids[item.vault_password] | int,
'name': 'default'}]} 'name': 'default',
'type': 'password'}]}
if item.vault_password is defined else {} if item.vault_password is defined else {}
) )
}} }}