File tree Expand file tree Collapse file tree 1 file changed +7
-3
lines changed
Expand file tree Collapse file tree 1 file changed +7
-3
lines changed Original file line number Diff line number Diff line change @@ -38,13 +38,17 @@ jobs:
3838 - name : Install sops
3939 uses : mdgreenwald/mozilla-sops-action@v1.6.0
4040
41+ # Authenticate with the correct KMS key that sops will use.
42+ - name : Setup sops credentials to decrypt repo secrets
43+ uses : google-github-actions/auth@v3
44+ with :
45+ credentials_json : ${{ secrets.GCP_KMS_DECRYPTOR_KEY }}
46+
4147 - name : ensure uptime checks are set up
4248 run : |
4349 cd terraform/uptime-checks
4450 # Decrypt the GCP ServiceAccount key with permissions to run terraform
45- sops -d \
46- --gcp-kms-service-account ${{ secrets.GCP_KMS_DECRYPTOR_KEY }} \
47- secret/enc-service-account-key.secret.json > service-account-key.json
51+ sops -d secret/enc-service-account-key.secret.json > service-account-key.json
4852 export GOOGLE_APPLICATION_CREDENTIALS=service-account-key.json
4953 # Setup Terraform
5054 terraform init
You can’t perform that action at this time.
0 commit comments