fix: pass meraki api key explicitly via provider block and TF_VAR

This commit is contained in:
Xavier Lario
2026-04-20 16:43:24 +02:00
parent 6ffe6bfcc5
commit 55a6a98044
4 changed files with 15 additions and 9 deletions
+3 -4
View File
@@ -71,7 +71,6 @@ jobs:
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
AWS_REGION: us-east-1
MERAKI_DASHBOARD_API_KEY: ${{ secrets.MERAKI_DASHBOARD_API_KEY }}
- name: Terraform Apply
working-directory: sites/${{ matrix.site }}
@@ -80,6 +79,6 @@ jobs:
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
AWS_REGION: us-east-1
MERAKI_DASHBOARD_API_KEY: ${{ secrets.MERAKI_DASHBOARD_API_KEY }}
TF_VAR_radius_secret: ${{ secrets.RADIUS_SECRET }}
TF_VAR_wifi_password_psk: ${{ secrets.WIFI_PASSWORD_PSK }}
TF_VAR_meraki_dashboard_api_key: ${{ secrets.MERAKI_DASHBOARD_API_KEY }}
TF_VAR_radius_secret: ${{ secrets.RADIUS_SECRET }}
TF_VAR_wifi_password_psk: ${{ secrets.WIFI_PASSWORD_PSK }}
+3 -4
View File
@@ -74,7 +74,6 @@ jobs:
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
AWS_REGION: us-east-1
MERAKI_DASHBOARD_API_KEY: ${{ secrets.MERAKI_DASHBOARD_API_KEY }}
- name: Terraform Plan
id: plan
@@ -84,9 +83,9 @@ jobs:
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
AWS_REGION: us-east-1
MERAKI_DASHBOARD_API_KEY: ${{ secrets.MERAKI_DASHBOARD_API_KEY }}
TF_VAR_radius_secret: ${{ secrets.RADIUS_SECRET }}
TF_VAR_wifi_password_psk: ${{ secrets.WIFI_PASSWORD_PSK }}
TF_VAR_meraki_dashboard_api_key: ${{ secrets.MERAKI_DASHBOARD_API_KEY }}
TF_VAR_radius_secret: ${{ secrets.RADIUS_SECRET }}
TF_VAR_wifi_password_psk: ${{ secrets.WIFI_PASSWORD_PSK }}
- name: Comentar Plan en el PR
uses: actions/github-script@v7
+3 -1
View File
@@ -9,7 +9,9 @@ terraform {
}
}
provider "meraki" {}
provider "meraki" {
meraki_dashboard_api_key = var.meraki_dashboard_api_key
}
locals {
organization_name = "Adevinta Information Services SLU"
+6
View File
@@ -1,6 +1,12 @@
# Sensitive variables — injected via TF_VAR_* environment variables (GitHub Secrets).
# Never put values for these in any .tf file.
variable "meraki_dashboard_api_key" {
type = string
sensitive = true
description = "Meraki Dashboard API key. Pass via TF_VAR_meraki_dashboard_api_key (GitHub Secret: MERAKI_DASHBOARD_API_KEY)."
}
variable "radius_secret" {
type = string
sensitive = true