eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions
blumeops/docs/changelog.d/fix-ringtail-1password-secrets-idempotent.bugfix.md
Erich Blume b475a1fcd7 Fix 1Password secret tasks always reporting changed in ringtail playbook (#213) 
## Summary
- Replace `changed_when: true` with `register` + output inspection on the two 1Password secret tasks in `ringtail.yml`
- Tasks now correctly report `ok` when the secret content hasn't changed, and `changed` only when `kubectl apply` outputs `configured` or `created`

## Test plan
- [ ] Run `mise run provision-ringtail` twice — second run should show both tasks as `ok` not `changed`

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/213
2026-02-19 07:25:24 -08:00

130 B
Raw Blame History

Make 1Password secret tasks in ringtail playbook idempotent by checking kubectl apply output instead of always reporting changed.