Add service account auth to other workflows; Make service account and…

… provider secret vars
viam-modules · Aug 28, 2024 · f1678db · f1678db
1 parent 499f412
commit f1678db
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 8 deletions.
diff --git a/.github/workflows/appimage-tag.yml b/.github/workflows/appimage-tag.yml
@@ -51,10 +51,13 @@ jobs:
           key-id: ${{ secrets.viam_key_id }}
           key-value: ${{ secrets.viam_key_value }}
 
-      - name: Authorize GCP Upload
-        uses: google-github-actions/auth@v1
+      - id: 'auth'
+        name: 'Authenticate to Google Cloud'
+        uses: 'google-github-actions/auth@v1'
         with:
-          credentials_json: '${{ secrets.GCP_CREDENTIALS }}'
+          create_credentials_file: true
+          workload_identity_provider: ${{ secrets.GCP_WORKFLOW_IDENTITY_PROVIDER }}
+          service_account: ${{ secrets.GCP_SERVICE_ACCOUNT }}
 
       - name: Upload Files
         uses: google-github-actions/upload-cloud-storage@v0.10.4

diff --git a/.github/workflows/appimage.yml b/.github/workflows/appimage.yml
@@ -40,10 +40,13 @@ jobs:
       - name: Build
         run: make ${{ matrix.make_target }}
 
-      - name: Authorize GCP Upload
-        uses: google-github-actions/auth@v1
+      - id: 'auth'
+        name: 'Authenticate to Google Cloud'
+        uses: 'google-github-actions/auth@v1'
         with:
-          credentials_json: '${{ secrets.GCP_CREDENTIALS }}'
+          create_credentials_file: true
+          workload_identity_provider: ${{ secrets.GCP_WORKFLOW_IDENTITY_PROVIDER }}
+          service_account: ${{ secrets.GCP_SERVICE_ACCOUNT }}
 
       - name: Upload Files
         uses: google-github-actions/upload-cloud-storage@v0.10.4

diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
@@ -45,8 +45,8 @@ jobs:
       uses: 'google-github-actions/auth@v1'
       with:
         create_credentials_file: true
-        workload_identity_provider: 'projects/385154741571/locations/global/workloadIdentityPools/viam-app-id/providers/github-provider-app'
-        service_account: 'static-file-server@web-app-304613.iam.gserviceaccount.com'
+        workload_identity_provider: ${{ secrets.GCP_WORKFLOW_IDENTITY_PROVIDER }}
+        service_account: ${{ secrets.GCP_SERVICE_ACCOUNT }}
 
     - name: Upload Files
       uses: google-github-actions/upload-cloud-storage@v0.10.4