openhomefoundation/Nomad set image
Roll a new container image out to a running Nomad job over Tailscale. Fetches the live job spec, swaps only the target task's image on every task group that has it, and resubmits. Everything else in the spec is round-tripped untouched, so config owned elsewhere (e.g. secret env vars injected by infrastructure-ansible) is preserved.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| image | Fully-qualified image reference to deploy (registry/name:tag). Deploy by ":tag" rather than digest if anything reads the tag back from the scheduled job (infrastructure-ansible does). | yes | — |
| job | Name of the Nomad job to update. | yes | — |
| task | Name of the task whose image is swapped, on every task group that contains it. | no | server |
| nomad-addr | Nomad HTTP API address, reached over the tailnet. | yes | — |
| nomad-token | Nomad ACL token allowed to submit the job. | yes | — |
| nomad-version | Nomad CLI version to install. | no | 2.0.4 |
| tailscale-oauth-client-id | Tailscale OAuth client ID used to join the tailnet. | yes | — |
| tailscale-oauth-secret | Tailscale OAuth client secret. | yes | — |
| tailscale-tags | Comma-separated Tailscale ACL tags for the ephemeral runner node. The tailnet ACLs must allow the OAuth client to assume these tags and the tagged node to reach the Nomad API address. | yes | — |
Outputs
no outputs