use assume role

Signed-off-by: Tao Liu <[email protected]>
opensearch-project · Oct 30, 2024 · 6d18658 · 6d18658
1 parent 3dfb0c6
commit 6d18658
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/.github/workflows/deployment-template.yml b/.github/workflows/deployment-template.yml
@@ -44,6 +44,8 @@ on:
         required: false
       root_ca_cert:
         required: false
+      aws_account_id:
+        required: false
 jobs:
 
   OS-OSD-Deployment:
@@ -131,7 +133,7 @@ jobs:
       - name: Step 6 - Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@v4
         with:
-          role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID_PREVIEW }}:role/ekspreviewadminrole-github
+          role-to-assume: arn:aws:iam::${{ secrets.aws_account_id }}:role/eks${{inputs.deploy-env}}adminrole-github
           aws-region: ${{ secrets.region }}
 
       - name: Step 7 - Delete Logstash

diff --git a/.github/workflows/os-osd-deployment-scheduled.yml b/.github/workflows/os-osd-deployment-scheduled.yml
@@ -35,6 +35,7 @@ jobs:
       esnode_cert: ${{ secrets.ESNODE_CERT }}
       esnode_key_cert: ${{ secrets.ESNODE_KEY_CERT }}
       root_ca_cert: ${{ secrets.ROOT_CA_CERT }}
+      aws_account_id: ${{ secrets.AWS_ACCOUNT_ID_PREVIEW }}
 
   OSD-Functional-Test-Preview:
     needs: OS-OSD-Preview-Scheduled-Deployment