Fix 1Password secret tasks always reporting changed in ringtail playbook #213

Merged

eblume merged 1 commit from fix/ringtail-1password-secrets-idempotent into main

2026-02-19 07:25:26 -08:00

eblume commented

2026-02-19 07:25:07 -08:00

Owner

Summary

Replace changed_when: true with register + output inspection on the two 1Password secret tasks in ringtail.yml
Tasks now correctly report ok when the secret content hasn't changed, and changed only when kubectl apply outputs configured or created

Test plan

Run mise run provision-ringtail twice — second run should show both tasks as ok not changed

🤖 Generated with Claude Code

## Summary - Replace `changed_when: true` with `register` + output inspection on the two 1Password secret tasks in `ringtail.yml` - Tasks now correctly report `ok` when the secret content hasn't changed, and `changed` only when `kubectl apply` outputs `configured` or `created` ## Test plan - [ ] Run `mise run provision-ringtail` twice — second run should show both tasks as `ok` not `changed` 🤖 Generated with [Claude Code](https://claude.com/claude-code)

eblume added 1 commit

2026-02-19 07:25:07 -08:00

Fix 1Password secret tasks always reporting changed in ringtail playbook ede8255be2

Replace `changed_when: true` with output inspection so the tasks correctly
report unchanged when the secret content hasn't changed.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>