From 24112892be163eccd85efd8e9de3d99fd5990043 Mon Sep 17 00:00:00 2001
From: Evangelos Foutras <evangelos@foutrelis.com>
Date: Sun, 1 May 2022 15:57:00 +0300
Subject: [PATCH] hcloud_inventory: use read-only API key for hcloud

---
 hcloud_inventory.py          |  4 ++--
 misc/vaults/vault_hcloud.yml | 10 ++++++++++
 2 files changed, 12 insertions(+), 2 deletions(-)
 create mode 100644 misc/vaults/vault_hcloud.yml

diff --git a/hcloud_inventory.py b/hcloud_inventory.py
index 4de40c5a6..bb25705ed 100755
--- a/hcloud_inventory.py
+++ b/hcloud_inventory.py
@@ -27,8 +27,8 @@ def get_host_details(server):
 
 def main():
     args = parse_args()
-    loaded = load_vault('misc/vaults/vault_hetzner.yml')
-    client = Client(token=loaded["hetzner_cloud_api_key"])
+    loaded = load_vault('misc/vaults/vault_hcloud.yml')
+    client = Client(token=loaded["hcloud_api_key_readonly"])
     servers = client.servers.get_all()
 
     hostvars = {server.name: get_host_details(server) for server in servers}
diff --git a/misc/vaults/vault_hcloud.yml b/misc/vaults/vault_hcloud.yml
new file mode 100644
index 000000000..423601969
--- /dev/null
+++ b/misc/vaults/vault_hcloud.yml
@@ -0,0 +1,10 @@
+$ANSIBLE_VAULT;1.1;AES256
+64363566353835316331303139336231656638643563343264646563613566643265353864643939
+6435346530353063346337333837303736323733663030370a373833373935333961343732656165
+62323136353130643564643862663433366664323132663532663338623864313838353662366632
+3663333932653262380a396634326431333761396562306566643464643463623166616536323666
+38613966333933373235663566373139333330623964383530663962383562643336323933313730
+36646261396139613562616637373139373661313266336230663533333664303363626538396264
+62613537353432616461633033643965386661636533303934336161323136656138333362623836
+63366535333339353365376239393564656631343234313262383437313638613339633937623261
+3665
-- 
GitLab