From dea66771e0b928e94bf106ab9665cde6a653f346 Mon Sep 17 00:00:00 2001
From: June <june@jsts.xyz>
Date: Wed, 15 Oct 2025 02:33:42 +0200
Subject: [PATCH] ansible_pull(role): ensure SOPS is installed

Also add the SOPS community collection as a requirement for this repo.
---
 requirements.yml                   |  3 +++
 roles/ansible_pull/tasks/main.yaml | 14 ++++++++++----
 2 files changed, 13 insertions(+), 4 deletions(-)

diff --git a/requirements.yml b/requirements.yml
index d5ebdfc..e5538cc 100644
--- a/requirements.yml
+++ b/requirements.yml
@@ -3,3 +3,6 @@ collections:
   - name: debops.debops
     version: ">=3.1.0"
     source: https://galaxy.ansible.com
+  - name: community.sops
+    version: ">=2.2.4"
+    source: https://galaxy.ansible.com
diff --git a/roles/ansible_pull/tasks/main.yaml b/roles/ansible_pull/tasks/main.yaml
index eff8cb0..e77bfc4 100644
--- a/roles/ansible_pull/tasks/main.yaml
+++ b/roles/ansible_pull/tasks/main.yaml
@@ -1,8 +1,14 @@
 - name: ensure dependencies are installed
-  ansible.builtin.apt:
-    name: virtualenv
-    state: present
-  become: true
+  block:
+    - name: ensure apt dependencies are installed
+      ansible.builtin.apt:
+        name: virtualenv
+        state: present
+      become: true
+
+    - name: ensure SOPS is installed
+      ansible.builtin.include_role:
+        name: community.sops.install
 
 # https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html#installing-and-upgrading-ansible-with-pip
 # https://www.redhat.com/en/blog/python-venv-ansible