mirror of
https://github.com/status-im/consul.git
synced 2025-02-25 20:05:24 +00:00
CI: remove uneeded AWS creds from test-integrations (#17104)
* Update test-integrations.yml * removing permission lies now that vault is not used in this job. --------- Co-authored-by: John Murret <john.murret@hashicorp.com>
This commit is contained in:
parent
d4cacc7232
commit
9ce50aefbb
21
.github/workflows/test-integrations.yml
vendored
21
.github/workflows/test-integrations.yml
vendored
@ -176,9 +176,6 @@ jobs:
|
|||||||
|
|
||||||
envoy-integration-test:
|
envoy-integration-test:
|
||||||
runs-on: ${{ fromJSON(needs.setup.outputs.compute-xl) }}
|
runs-on: ${{ fromJSON(needs.setup.outputs.compute-xl) }}
|
||||||
permissions:
|
|
||||||
id-token: write # NOTE: this permission is explicitly required for Vault auth.
|
|
||||||
contents: read
|
|
||||||
needs:
|
needs:
|
||||||
- setup
|
- setup
|
||||||
- generate-envoy-job-matrices
|
- generate-envoy-job-matrices
|
||||||
@ -194,24 +191,6 @@ jobs:
|
|||||||
XDS_TARGET: ${{ matrix.xds-target }}
|
XDS_TARGET: ${{ matrix.xds-target }}
|
||||||
AWS_LAMBDA_REGION: us-west-2
|
AWS_LAMBDA_REGION: us-west-2
|
||||||
steps:
|
steps:
|
||||||
# NOTE: ENT specific step as we store secrets in Vault.
|
|
||||||
- name: Authenticate to Vault
|
|
||||||
if: ${{ endsWith(github.repository, '-enterprise') }}
|
|
||||||
id: vault-auth
|
|
||||||
run: vault-auth
|
|
||||||
|
|
||||||
# NOTE: ENT specific step as we store secrets in Vault.
|
|
||||||
- name: Fetch Secrets
|
|
||||||
if: ${{ endsWith(github.repository, '-enterprise') }}
|
|
||||||
id: secrets
|
|
||||||
uses: hashicorp/vault-action@v2.5.0
|
|
||||||
with:
|
|
||||||
url: ${{ steps.vault-auth.outputs.addr }}
|
|
||||||
caCertificate: ${{ steps.vault-auth.outputs.ca_certificate }}
|
|
||||||
token: ${{ steps.vault-auth.outputs.token }}
|
|
||||||
secrets: |
|
|
||||||
kv/data/github/${{ github.repository }}/aws arn | AWS_ROLE_ARN ;
|
|
||||||
|
|
||||||
- uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
|
- uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
|
||||||
- uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
|
- uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
|
||||||
with:
|
with:
|
||||||
|
Loading…
x
Reference in New Issue
Block a user