Migrate Ansible op calls to op read URI syntax #125

Merged

eblume merged 1 commit from op-read-migration into main

2026-02-08 10:52:44 -08:00

eblume commented

2026-02-08 10:51:22 -08:00

Owner

Summary

Convert all 12 op item get ... --fields ... --reveal calls in Ansible to the newer op read "op://vault/item/field" syntax
Remove the regex_replace workaround on the Fly deploy token (no longer needed since op read returns clean unquoted values)
Covers ansible/playbooks/indri.yml, ansible/roles/caddy/tasks/main.yml, ansible/roles/jellyfin_metrics/tasks/main.yml, and ansible/roles/alloy/tasks/main.yml

Test plan

mise run provision-indri -- --check --diff dry run passes (ok=67, failed=0)
No op item get calls remain in ansible/ directory
All pre-commit hooks pass (yaml, ansible-lint, TruffleHog, etc.)
Full provision run after merge to confirm secrets resolve correctly

🤖 Generated with Claude Code

## Summary - Convert all 12 `op item get ... --fields ... --reveal` calls in Ansible to the newer `op read "op://vault/item/field"` syntax - Remove the `regex_replace` workaround on the Fly deploy token (no longer needed since `op read` returns clean unquoted values) - Covers `ansible/playbooks/indri.yml`, `ansible/roles/caddy/tasks/main.yml`, `ansible/roles/jellyfin_metrics/tasks/main.yml`, and `ansible/roles/alloy/tasks/main.yml` ## Test plan - [x] `mise run provision-indri -- --check --diff` dry run passes (ok=67, failed=0) - [x] No `op item get` calls remain in `ansible/` directory - [x] All pre-commit hooks pass (yaml, ansible-lint, TruffleHog, etc.) - [ ] Full provision run after merge to confirm secrets resolve correctly 🤖 Generated with [Claude Code](https://claude.com/claude-code)

eblume added 1 commit

2026-02-08 10:51:22 -08:00

Migrate Ansible op calls from item get to op read URI syntax cf7f3ca4d9

`op read` returns clean values without quoting issues, removing the
need for the regex_replace workaround on the Fly deploy token.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>