Skip to content

Commit

Permalink
add PRINCIPAL_ID to GH action service rollout steps
Browse files Browse the repository at this point in the history
the principal_id is required in templatize when the current user is not a real user
but a service principal. this principal id is granted access to the respective clusters
to roll out services.

Signed-off-by: Gerd Oberlechner <[email protected]>
  • Loading branch information
geoberle committed Jan 7, 2025
1 parent a38114a commit a431384
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions .github/workflows/services-cd.yml
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,8 @@
jobs:

deploy_to_service_cluster:
env:
PRINCIPAL_ID: ${{ secrets.GHA_PRINCIPAL_ID }}
permissions:
id-token: 'write'
contents: 'read'
Expand Down Expand Up @@ -106,6 +108,8 @@
./svc-deploy.sh ${DEPLOY_ENV} cluster-service svc deploy-pr-env-deps
deploy_to_management_cluster:
env:
PRINCIPAL_ID: ${{ secrets.GHA_PRINCIPAL_ID }}
permissions:
id-token: 'write'
contents: 'read'
Expand Down

0 comments on commit a431384

Please sign in to comment.