search

jpoehnelt / secrets-sync-action

A Github Action that can sync secrets from one repository to many others.
https://github.com/marketplace/actions/secrets-sync-action
Apache License 2.0
314 stars 93 forks source link

Usage of this action behind a corporate proxy #68

Open jensbaitingerbosch opened 2 years ago

jensbaitingerbosch commented 2 years ago

Hi,

we have a runner in our corporate network and we want to use this action to push secrets into our Github Enterprise (in the Internet). To reach our Github Enterprise server we need to go through a proxy. The proxy is configured in the environment variables "HTTPS_PROXY" as well "https_proxy", still we get an error that looks like no proxy is used.

Here is the log with debug enabled (removing all our secret names etc)


##[debug]Starting: Set up job
Current runner version: '2.286.1'
Runner name: '7342292feada'
Runner group name: 'Default'
Machine name: '7342292feada'
GITHUB_TOKEN Permissions
##[debug]Primary repository: XX/xxx-github-secret-sync
Runner is running behind proxy server 'http://172.17.0.1:3128/' for all HTTP requests.
Runner is running behind proxy server 'http://172.17.0.1:3128/' for all HTTPS requests.
Prepare workflow directory
##[debug]Update context data
##[debug]Evaluating job-level environment variables
##[debug]Evaluating job container
##[debug]Evaluating job service containers
##[debug]Evaluating job defaults
Prepare all required actions
Getting action download info
Download action repository 'hashicorp/vault-action@v2.3.1' (SHA:d5a69ceca1c3867700c32135c0da4788efdd2c0e)
##[debug]Download 'https://api.github.com/repos/hashicorp/vault-action/tarball/d5a69ceca1c3867700c32135c0da4788efdd2c0e' to '/home/docker/actions-runner/_work/_actions/_temp_4be30490-3054-48ca-9e49-71763f92292c/c66689af-de0a-4234-9608-ac91264f95e7.tar.gz'
##[debug]Unwrap 'hashicorp-vault-action-d5a69ce' to '/home/docker/actions-runner/_work/_actions/hashicorp/vault-action/v2.3.1'
##[debug]Archive '/home/docker/actions-runner/_work/_actions/_temp_4be30490-3054-48ca-9e49-71763f92292c/c66689af-de0a-4234-9608-ac91264f95e7.tar.gz' has been unzipped into '/home/docker/actions-runner/_work/_actions/hashicorp/vault-action/v2.3.1'.
Download action repository 'google/secrets-sync-action@v1.6.0' (SHA:e6f0df4615d7c34914b555f545cf63857001fef9)
##[debug]Download 'https://api.github.com/repos/google/secrets-sync-action/tarball/e6f0df4615d7c34914b555f545cf63857001fef9' to '/home/docker/actions-runner/_work/_actions/_temp_3c12f94f-ffef-4ac7-8127-958aeffa4a7c/3b37aff8-12aa-4040-bbc0-dd1b1eacb830.tar.gz'
##[debug]Unwrap 'google-secrets-sync-action-e6f0df4' to '/home/docker/actions-runner/_work/_actions/google/secrets-sync-action/v1.6.0'
##[debug]Archive '/home/docker/actions-runner/_work/_actions/_temp_3c12f94f-ffef-4ac7-8127-958aeffa4a7c/3b37aff8-12aa-4040-bbc0-dd1b1eacb830.tar.gz' has been unzipped into '/home/docker/actions-runner/_work/_actions/google/secrets-sync-action/v1.6.0'.
##[debug]action.yml for action: '/home/docker/actions-runner/_work/_actions/hashicorp/vault-action/v2.3.1/action.yml'.
##[debug]action.yml for action: '/home/docker/actions-runner/_work/_actions/google/secrets-sync-action/v1.6.0/action.yml'.
##[debug]Set step 'hashicorpvault-action' display name to: 'Import Secrets from Vault'
##[debug]Set step 'googlesecrets-sync-action' display name to: 'Sync quasar secrets'
##[debug]Collect running processes for tracking orphan processes.
##[debug]Finishing: Set up job

... (Pulling the secrets out of hashicorp vault)

Run google/secrets-sync-action@v1.6.0
  with:
    SECRETS: ^xxx
  ^xxx
 [...]
    REPOSITORIES: ^xx/xxxxxxxxx
  ^xx/xxxxxxxxx
  ^xx/xxxxxxxxx
  ^xx/xxxxxxxxx
  ^xx/xxxxxxxxx
  ^xx/xxxxxxxxx
  ^xx/xxxxxxxxx

    DRY_RUN: false
    GITHUB_TOKEN: ***
    CONCURRENCY: 1
    repositories_list_regex: true
    retries: 3
    delete: false
  env:
    [...]

Available env keys: ["SHLVL","HOME","REQUESTS_CA_BUNDLE","ORGANIZATION","HTTP_PROXY","DOTNET_SYSTEM_GLOBALIZATION_INVARIANT","requests_ca_bundle","HOSTNAME","http_proxy","PWD","https_proxy","ACTIONS_ALLOW_UNSECURE_COMMANDS","RUNNER_TRACKING_ID","GITHUB_ACTIONS","TOKEN","REPOSITORY","PATH","OLDPWD","_","HTTPS_PROXY","CI","RUNNER_LABELS","no_proxy","NO_PROXY",[... (secrets we pulled out of vault) ],"INPUT_SECRETS","INPUT_REPOSITORIES","INPUT_DRY_RUN","INPUT_GITHUB_TOKEN","INPUT_CONCURRENCY","INPUT_GITHUB_API_URL","INPUT_REPOSITORIES_LIST_REGEX","INPUT_RETRIES","INPUT_DELETE","GITHUB_JOB","GITHUB_REF","GITHUB_SHA","GITHUB_REPOSITORY","GITHUB_REPOSITORY_OWNER","GITHUB_RUN_ID","GITHUB_RUN_NUMBER","GITHUB_RETENTION_DAYS","GITHUB_ACTOR","GITHUB_WORKFLOW","GITHUB_HEAD_REF","GITHUB_BASE_REF","GITHUB_EVENT_NAME","GITHUB_SERVER_URL","GITHUB_API_URL","GITHUB_GRAPHQL_URL","GITHUB_WORKSPACE","GITHUB_ACTION","GITHUB_EVENT_PATH","GITHUB_ACTION_REPOSITORY","GITHUB_ACTION_REF","GITHUB_PATH","GITHUB_ENV","RUNNER_DEBUG","RUNNER_OS","RUNNER_ARCH","RUNNER_NAME","RUNNER_TOOL_CACHE","RUNNER_TEMP","RUNNER_WORKSPACE","ACTIONS_RUNTIME_URL","ACTIONS_RUNTIME_TOKEN"]
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
::add-mask::***
##[debug]Enhanced Annotations not enabled on the server. The 'title', 'end_line', and 'end_column' fields are unsupported.
Error: HttpError: request to https://github.xxxxxxxxx.com/api/v3/user/repos?affiliation=owner%2Ccollaborator%2Corganization_member&page=1&pageSize=30 failed, reason: getaddrinfo ENOTFOUND github.xxxxxxxxx.com
##[debug]Enhanced Annotations not enabled on the server. The 'title', 'end_line', and 'end_column' fields are unsupported.
Error: request to https://github.xxxxxxxxx.com/api/v3/user/repos?affiliation=owner%2Ccollaborator%2Corganization_member&page=1&pageSize=30 failed, reason: getaddrinfo ENOTFOUND github.xxxxxxxxx.com
##[debug]Node Action run completed with exit code 1
##[debug]Finishing: Sync xxxxxxxxx secrets