2929 required : true
3030 type : string
3131
32+ env :
33+ ARM_CLIENT_ID : ${{ secrets.ARM_CLIENT_ID }}
34+ ARM_TENANT_ID : ${{ secrets.ARM_TENANT_ID }}
35+ ARM_SUBSCRIPTION_ID : ${{ secrets.ARM_SUBSCRIPTION_ID }}
36+ PROJECT_ID : ${{ secrets.GCP_PROJECT_ID }}
37+
3238jobs :
3339 test-render-providers :
3440 # Prevents the execution of this test under the following conditions:
@@ -72,32 +78,14 @@ jobs:
7278 with :
7379 python-version : " 3.11"
7480
75- - name : Retrieve secret from Vault
76- uses : hashicorp/vault-action@v3.0.0
77- with :
78- method : jwt
79- url : " https://quansight-vault-public-vault-b2379fa7.d415e30e.z1.hashicorp.cloud:8200"
80- namespace : " admin/quansight"
81- role : " repository-nebari-dev-nebari-role"
82- secrets : |
83- kv/data/repository/nebari-dev/nebari/amazon_web_services/nebari-dev-ci role_name | AWS_ROLE_ARN;
84- kv/data/repository/nebari-dev/nebari/google_cloud_platform/nebari-dev-ci/github-nebari-dev-repo-ci project_id | PROJECT_ID;
85- kv/data/repository/nebari-dev/nebari/google_cloud_platform/nebari-dev-ci/github-nebari-dev-repo-ci workload_identity_provider | GCP_WORKFLOW_PROVIDER;
86- kv/data/repository/nebari-dev/nebari/google_cloud_platform/nebari-dev-ci/github-nebari-dev-repo-ci service_account_name | GCP_SERVICE_ACCOUNT;
87- kv/data/repository/nebari-dev/nebari/azure/nebari-dev-ci/github-nebari-dev-repo-ci client_id | ARM_CLIENT_ID;
88- kv/data/repository/nebari-dev/nebari/azure/nebari-dev-ci/github-nebari-dev-repo-ci tenant_id | ARM_TENANT_ID;
89- kv/data/repository/nebari-dev/nebari/azure/nebari-dev-ci/github-nebari-dev-repo-ci subscription_id | ARM_SUBSCRIPTION_ID;
90- kv/data/repository/nebari-dev/nebari/shared_secrets SPACES_ACCESS_KEY_ID | SPACES_ACCESS_KEY_ID;
91- kv/data/repository/nebari-dev/nebari/shared_secrets SPACES_SECRET_ACCESS_KEY | SPACES_SECRET_ACCESS_KEY;
92-
9381 - name : ' Authenticate to GCP'
9482 if : ${{ matrix.provider == 'gcp' }}
9583 uses : ' google-github-actions/auth@v1'
9684 with :
9785 token_format : access_token
9886 create_credentials_file : ' true'
99- workload_identity_provider : ${{ env .GCP_WORKFLOW_PROVIDER }}
100- service_account : ${{ env .GCP_SERVICE_ACCOUNT }}
87+ workload_identity_provider : ${{ secrets .GCP_WORKFLOW_PROVIDER }}
88+ service_account : ${{ secrets .GCP_SERVICE_ACCOUNT }}
10189
10290 - name : Set required environment variables
10391 if : ${{ matrix.provider == 'gcp' }}
@@ -108,17 +96,17 @@ jobs:
10896 if : ${{ matrix.provider == 'aws' }}
10997 uses : aws-actions/configure-aws-credentials@v1
11098 with :
111- role-to-assume : ${{ env .AWS_ROLE_ARN }}
99+ role-to-assume : ${{ secrets .AWS_ROLE_ARN }}
112100 role-session-name : github-action
113101 aws-region : us-east-1
114102
115103 - name : ' Azure login'
116104 if : ${{ matrix.provider == 'azure' }}
117105 uses : azure/login@v1
118106 with :
119- client-id : ${{ env .ARM_CLIENT_ID }}
120- tenant-id : ${{ env .ARM_TENANT_ID }}
121- subscription-id : ${{ env .ARM_SUBSCRIPTION_ID }}
107+ client-id : ${{ secrets .ARM_CLIENT_ID }}
108+ tenant-id : ${{ secrets .ARM_TENANT_ID }}
109+ subscription-id : ${{ secrets .ARM_SUBSCRIPTION_ID }}
122110
123111 - name : Install Nebari
124112 run : |
0 commit comments