From c2b90326862cb69e5cc4a53eee07183639fce04a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ullrich=20Sch=C3=A4fer?= Date: Sun, 29 Mar 2026 19:59:17 +0200 Subject: [PATCH] Fix deploy annotation reading token from wrong env file GRAFANA_SERVICE_TOKEN is in secrets.infra.env, which the infra workflow merges into .env on the server. The apps workflow was reading from app.env (which only has app secrets). Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/workflows/cd-apps.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/cd-apps.yml b/.github/workflows/cd-apps.yml index 133700a..9fb0fa6 100644 --- a/.github/workflows/cd-apps.yml +++ b/.github/workflows/cd-apps.yml @@ -112,7 +112,7 @@ jobs: docker compose ps # Annotate deploy in Grafana - GRAFANA_TOKEN=$(grep GRAFANA_SERVICE_TOKEN app.env | cut -d= -f2-) + GRAFANA_TOKEN=$(grep GRAFANA_SERVICE_TOKEN .env | cut -d= -f2- 2>/dev/null) if [ -n "$GRAFANA_TOKEN" ]; then docker compose exec -T grafana wget -q -O /dev/null \ --header="Authorization: Bearer $GRAFANA_TOKEN" \