From 26ae5eb04061b36afdf6b79a8aa611a039d08008 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Patryk=20Ma=C5=82ek?= <patryk.malek@konghq.com>
Date: Wed, 27 Nov 2024 16:03:11 +0100
Subject: [PATCH] chore(ci): use Konnect PAT directly from 1password vault

---
 .github/workflows/tests.yaml | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index f4988d97..8c45a35d 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -281,6 +281,17 @@ jobs:
       with:
         install: false
 
+    - uses: 1password/load-secrets-action@v2
+      id: konnect-pat
+      with:
+        export-env: false
+      env:
+        OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
+        PAT: 'op://team-k8s/Team K8S Konnect testing account - KGO tests token/password'
+
+    - if: ${{ steps.konnect-pat.outputs.PAT == '' }}
+      run: exit 1
+
     - name: run integration tests
       run: make test.integration
       env:
@@ -290,7 +301,7 @@ jobs:
         KONG_CONTROLLER_OUT: stdout
         GOTESTSUM_JUNITFILE: integration-tests-webhook-enabled-${{ matrix.webhook-enabled }}.xml
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        KONG_TEST_KONNECT_ACCESS_TOKEN: ${{ secrets.KONG_TEST_KONNECT_ACCESS_TOKEN }}
+        KONG_TEST_KONNECT_ACCESS_TOKEN: ${{ steps.konnect-pat.outputs.PAT }}
         KONG_TEST_KONNECT_SERVER_URL: us.api.konghq.tech
 
     - name: upload diagnostics