Skip to content

Commit 0f3493c

Browse files
committed
Revert "refactor: bring back OIDC"
This reverts commit d0243d5.
1 parent 1fb4c78 commit 0f3493c

File tree

1 file changed

+18
-6
lines changed

1 file changed

+18
-6
lines changed

.github/workflows/integration-test-deployment.yml

Lines changed: 18 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -39,12 +39,24 @@ jobs:
3939
ref: ${{ github.event.pull_request.head.sha }}
4040
fetch-depth: 0
4141

42-
- name: Configure AWS credentials
43-
uses: aws-actions/configure-aws-credentials@v5
44-
with:
45-
role-to-assume: ${{ vars.CDK_ATMOSPHERE_OIDC_ROLE }}
46-
role-session-name: run-tests@aws-cdk-deployment-integ
47-
aws-region: us-east-1
42+
- name: Assume Atmosphere Role
43+
id: creds
44+
run: |
45+
# Assume role and capture the JSON output
46+
CREDS=$(aws sts assume-role \
47+
--role-arn ${{ vars.CDK_ATMOSPHERE_OIDC_ROLE }} \
48+
--role-session-name run-tests@aws-cdk-deployment-integ)
49+
# Parse the JSON output and set environment variables
50+
AWS_ACCESS_KEY_ID=$(echo $CREDS | jq -r '.Credentials.AccessKeyId')
51+
AWS_SECRET_ACCESS_KEY=$(echo $CREDS | jq -r '.Credentials.SecretAccessKey')
52+
AWS_SESSION_TOKEN=$(echo $CREDS | jq -r '.Credentials.SessionToken')
53+
echo "::add-mask::$AWS_ACCESS_KEY_ID"
54+
echo "::add-mask::$AWS_SECRET_ACCESS_KEY"
55+
echo "::add-mask::$AWS_SESSION_TOKEN"
56+
57+
echo "AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID" >> $GITHUB_ENV
58+
echo "AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY" >> $GITHUB_ENV
59+
echo "AWS_SESSION_TOKEN=$AWS_SESSION_TOKEN" >> $GITHUB_ENV
4860
4961
- name: Setup Node.js
5062
uses: actions/setup-node@v5

0 commit comments

Comments
 (0)