Skip to content

Commit

Permalink
feat: use new multi-repo aware vault role
Browse files Browse the repository at this point in the history
re [OPS-2643]
  • Loading branch information
scheying committed Sep 28, 2023
1 parent aba1795 commit 27dd805
Showing 1 changed file with 6 additions and 1 deletion.
7 changes: 6 additions & 1 deletion action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -188,6 +188,11 @@ runs:
username: oauth2accesstoken
password: ${{ steps.auth.outputs.access_token }}

- id: repo_without_slash
if: inputs.vault_export_token == 'true'
shell: bash
run: echo "result=${{ github.repository }}" | tr -s / - >> $GITHUB_OUTPUT

- name: Export a Vault token
id: vault-export-token
if: inputs.vault_export_token == 'true'
Expand All @@ -196,7 +201,7 @@ runs:
url: https://vault.ops.zeit.de
method: jwt
path: github-actions
role: ${{ steps.baseproject-config.outputs.gha_vault_role }}
role: ${{ steps.baseproject-config.outputs.gha_vault_role }}-${{ steps.repo_without_slash.outputs.result }}
exportToken: true
secrets: sys/auth "token/" # Because the action needs to read something and Token auth is always there

Expand Down

0 comments on commit 27dd805

Please sign in to comment.