use ansible-vault for aws credentials (replaces prod.env)

2025-12-08 11:22:55 -06:00 · 2025-12-08 11:22:55 -06:00 · 3314292a8b
commit 3314292a8b
parent 4a75be6699
1 changed files with 6 additions and 0 deletions
--- a/deploy/roles/galion_monitor/tasks/main.yml
+++ b/deploy/roles/galion_monitor/tasks/main.yml
@ -9,3 +9,9 @@
    src: prometheus.yml.j2
    dest: /etc/prometheus/prometheus.yml
  notify: restart prometheus
+
+- name: Configure AWS credentials from vault
+  template:
+    src: aws_credentials.j2
+    dest: /home/galion/.aws/credentials
+    mode: '0600'