diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 2d353794..e2e26a1b 100755 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -7,6 +7,7 @@ on: permissions: contents: write # required for uploading releases + id-token: write env: DEFAULT_GO_VERSION: ^1.22.0 @@ -26,13 +27,15 @@ jobs: - name: Check out code into the Go module directory uses: actions/checkout@v2 + + - name: Configure aws credentials + uses: aws-actions/configure-aws-credentials@v1.7.0 + with: + role-to-assume: ${{ secrets.ROLE_TO_ASSUME }} + aws-region: ${{ secrets.AWS_REGION }} - name: Release Linux Assets run: make release - env: - AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} - AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} - AWS_SESSION_TOKEN: ${{ secrets.AWS_SESSION_TOKEN }} releaseWindows: name: Release Windows @@ -50,6 +53,12 @@ jobs: - name: Check out code into the Go module directory uses: actions/checkout@v2 + - name: Configure aws credentials + uses: aws-actions/configure-aws-credentials@v1.7.0 + with: + role-to-assume: ${{ secrets.ROLE_TO_ASSUME }} + aws-region: ${{ secrets.AWS_REGION }} + - name: Release Windows Assets run: | $env:ChocolateyInstall = Convert-Path "$((Get-Command choco).Path)\..\.." @@ -57,10 +66,6 @@ jobs: refreshenv choco install make && choco install zip && make release-windows-${{matrix.version}} - env: - AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} - AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} - AWS_SESSION_TOKEN: ${{ secrets.AWS_SESSION_TOKEN }} release: name: Release @@ -74,24 +79,18 @@ jobs: - name: Check out code into the Go module directory uses: actions/checkout@v2 + + - name: Configure aws credentials + uses: aws-actions/configure-aws-credentials@v1.7.0 + with: + role-to-assume: ${{ secrets.ROLE_TO_ASSUME }} + aws-region: ${{ secrets.AWS_REGION }} - name: Sync Helm Chart Catalog information run: make sync-catalog-information-for-helm-chart - env: - AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} - AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} - AWS_SESSION_TOKEN: ${{ secrets.AWS_SESSION_TOKEN }} - name: Sync Helm Chart to ECR Public run: make push-helm-chart - env: - AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} - AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} - AWS_SESSION_TOKEN: ${{ secrets.AWS_SESSION_TOKEN }} - name: Sync Readme to ECR Public run: make sync-readme-to-ecr-public - env: - AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} - AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} - AWS_SESSION_TOKEN: ${{ secrets.AWS_SESSION_TOKEN }} \ No newline at end of file