/.github/workflows: add id-token perms #3

	on:
	push:
	branches:
	- "db/fix-ci"

	permissions:
	id-token: write # This is required for requesting the JWT
	contents: read # This is required for actions/checkout

	jobs:
	test:
	runs-on: ubuntu-22.04
	name: Test AWS/K8s Auth
	steps:
	- name: Checkout
	uses: actions/checkout@v3
	- uses: azure/[email protected]
	with:
	version: 'v1.23.6'
	- name: Install aws-iam-authenticator
	run: \|
	curl -o aws-iam-authenticator https://amazon-eks.s3.us-west-2.amazonaws.com/1.18.8/2020-09-18/bin/linux/amd64/aws-iam-authenticator && \
	chmod +x ./aws-iam-authenticator && \
	sudo cp ./aws-iam-authenticator /usr/local/bin/aws-iam-authenticator
	aws-iam-authenticator version
	- name: Configure AWS Credentials
	uses: aws-actions/configure-aws-credentials@v4
	with:
	role-session-name: GitHub_to_AWS_via_FederatedOIDC
	role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME_CORP }}
	aws-region: us-west-2
	- name: Create and Auth kubeconfig
	run: \|
	echo "$CONFIG" > kubeconfig
	KUBECONFIG=kubeconfig kubectl config set-credentials github-actions-doltgresql --exec-api-version=client.authentication.k8s.io/v1alpha1 --exec-command=aws-iam-authenticator --exec-arg=token --exec-arg=-i --exec-arg=eks-cluster-1
	KUBECONFIG=kubeconfig kubectl config set-context github-actions-doltgresql-context --cluster=eks-cluster-1 --user=github-actions-doltgresql --namespace=performance-benchmarking
	KUBECONFIG=kubeconfig kubectl config use-context github-actions-doltgresql-context
	env:
	CONFIG: ${{ secrets.CORP_KUBECONFIG }}

Provide feedback