Skip to content

Commit f6a9d05

Browse files
committed
feat(terraform): add Aliyun credentials configuration for Terraform workflow
1 parent 74bf3d5 commit f6a9d05

1 file changed

Lines changed: 10 additions & 0 deletions

File tree

.github/workflows/terraform.yaml

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,12 +26,22 @@ jobs:
2626
name: "Terraform"
2727
runs-on: ubuntu-latest
2828
permissions:
29+
id-token: write
2930
contents: read
3031
pull-requests: write
3132

3233
steps:
3334
- name: Checkout
3435
uses: actions/checkout@v3
36+
37+
- uses: aliyun/configure-aliyun-credentials-action@v1
38+
with:
39+
role-to-assume: "acs:ram::5621254376179407:role/terraform"
40+
oidc-provider-arn: "acs:ram::5621254376179407:oidc-provider/github"
41+
role-session-name: "github-action-session"
42+
role-session-expiration: 1800
43+
audience: "sts.aliyuncs.com"
44+
3545
- uses: hashicorp/setup-terraform@v2
3646

3747
- name: Init

0 commit comments

Comments
 (0)