Only "force" Token revoke on cert generation failure

No point in attempting to revoke a Vault Token which was never successfully issued.
andreaso · Nov 18, 2023 · d906165 · d906165
1 parent 4af3dbb
commit d906165
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/action.yaml b/action.yaml
@@ -77,7 +77,7 @@ runs:
         TMPDIR: ${{ runner.temp }}
 
     - name: Revoke Vault token
-      if: success() || failure()
+      if: success() || steps.generator.conclusion == 'failure'
       shell: bash
       run: |
         curl --fail --silent --show-error --header "X-Vault-Token: ${VAULT_TOKEN}" --data "" "${VAULT_SERVER}/v1/auth/token/revoke-self"