-
Notifications
You must be signed in to change notification settings - Fork 485
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
ci: import sentry secrets from vault
Closes #4413
- Loading branch information
Showing
2 changed files
with
53 additions
and
35 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -32,6 +32,21 @@ jobs: | |
| cache: 'npm' | ||
| - name: Install dependencies | ||
| run: npm ci | ||
| - name: Import Secrets | ||
| id: secrets | ||
| uses: hashicorp/[email protected] | ||
| with: | ||
| url: ${{ secrets.VAULT_ADDR }} | ||
| method: approle | ||
| roleId: ${{ secrets.VAULT_ROLE_ID }} | ||
| secretId: ${{ secrets.VAULT_SECRET_ID }} | ||
| exportEnv: false | ||
| secrets: | | ||
| secret/data/products/desktop-modeler/ci/sentry SENTRY_AUTH_TOKEN; | ||
| secret/data/products/desktop-modeler/ci/sentry SENTRY_DSN; | ||
| secret/data/products/desktop-modeler/ci/sentry SENTRY_ORG; | ||
| secret/data/products/desktop-modeler/ci/sentry SENTRY_PROJECT; | ||
| secret/data/common/jenkins/downloads-camunda-cloud_google_sa_key DOWNLOAD_CENTER_GCLOUD_KEY_BYTES | GCP_CREDENTIALS_NAME; | ||
| - name: Build nightly (Linux) | ||
| if: ${{ runner.os == 'Linux' }} | ||
|
|
@@ -41,10 +56,10 @@ jobs: | |
| MIXPANEL_TOKEN: "${{ secrets.MIXPANEL_PROJECT_TOKEN }}" | ||
| MIXPANEL_STAGE: "int" | ||
| NIGHTLY: 1 | ||
| SENTRY_AUTH_TOKEN: "${{ secrets.SENTRY_AUTH_TOKEN }}" | ||
| SENTRY_DSN: "${{ secrets.SENTRY_DSN }}" | ||
| SENTRY_ORG: "${{ secrets.SENTRY_ORG }}" | ||
| SENTRY_PROJECT: "${{ secrets.SENTRY_PROJECT }}" | ||
| SENTRY_AUTH_TOKEN: "${{ steps.secrets.outputs.SENTRY_AUTH_TOKEN }}" | ||
| SENTRY_DSN: "${{ steps.secrets.outputs.SENTRY_DSN }}" | ||
| SENTRY_ORG: "${{ steps.secrets.outputs.SENTRY_ORG }}" | ||
| SENTRY_PROJECT: "${{ steps.secrets.outputs.SENTRY_PROJECT }}" | ||
| UPDATES_SERVER_PRODUCT_NAME: "${{ secrets.UPDATES_SERVER_PRODUCT_NAME }}" | ||
| run: npm run build -- --linux | ||
|
|
||
|
|
@@ -59,10 +74,10 @@ jobs: | |
| MIXPANEL_TOKEN: "${{ secrets.MIXPANEL_PROJECT_TOKEN }}" | ||
| MIXPANEL_STAGE: "int" | ||
| NIGHTLY: 1 | ||
| SENTRY_AUTH_TOKEN: "${{ secrets.SENTRY_AUTH_TOKEN }}" | ||
| SENTRY_DSN: "${{ secrets.SENTRY_DSN }}" | ||
| SENTRY_ORG: "${{ secrets.SENTRY_ORG }}" | ||
| SENTRY_PROJECT: "${{ secrets.SENTRY_PROJECT }}" | ||
| SENTRY_AUTH_TOKEN: "${{ steps.secrets.outputs.SENTRY_AUTH_TOKEN }}" | ||
| SENTRY_DSN: "${{ steps.secrets.outputs.SENTRY_DSN }}" | ||
| SENTRY_ORG: "${{ steps.secrets.outputs.SENTRY_ORG }}" | ||
| SENTRY_PROJECT: "${{ steps.secrets.outputs.SENTRY_PROJECT }}" | ||
| UPDATES_SERVER_PRODUCT_NAME: "${{ secrets.UPDATES_SERVER_PRODUCT_NAME }}" | ||
| run: npm run build -- --mac | ||
|
|
||
|
|
@@ -72,24 +87,13 @@ jobs: | |
| MIXPANEL_TOKEN: "${{ secrets.MIXPANEL_PROJECT_TOKEN }}" | ||
| MIXPANEL_STAGE: "int" | ||
| NIGHTLY: 1 | ||
| SENTRY_AUTH_TOKEN: "${{ secrets.SENTRY_AUTH_TOKEN }}" | ||
| SENTRY_DSN: "${{ secrets.SENTRY_DSN }}" | ||
| SENTRY_ORG: "${{ secrets.SENTRY_ORG }}" | ||
| SENTRY_PROJECT: "${{ secrets.SENTRY_PROJECT }}" | ||
| SENTRY_AUTH_TOKEN: "${{ steps.secrets.outputs.SENTRY_AUTH_TOKEN }}" | ||
| SENTRY_DSN: "${{ steps.secrets.outputs.SENTRY_DSN }}" | ||
| SENTRY_ORG: "${{ steps.secrets.outputs.SENTRY_ORG }}" | ||
| SENTRY_PROJECT: "${{ steps.secrets.outputs.SENTRY_PROJECT }}" | ||
| UPDATES_SERVER_PRODUCT_NAME: "${{ secrets.UPDATES_SERVER_PRODUCT_NAME }}" | ||
| run: npm run build -- --win | ||
|
|
||
| - name: Import Secrets | ||
| id: secrets | ||
| uses: hashicorp/[email protected] | ||
| with: | ||
| url: ${{ secrets.VAULT_ADDR }} | ||
| method: approle | ||
| roleId: ${{ secrets.VAULT_ROLE_ID }} | ||
| secretId: ${{ secrets.VAULT_SECRET_ID }} | ||
| exportEnv: false | ||
| secrets: | | ||
| secret/data/common/jenkins/downloads-camunda-cloud_google_sa_key DOWNLOAD_CENTER_GCLOUD_KEY_BYTES | GCP_CREDENTIALS_NAME; | ||
| - name: Upload artifact to Camunda Download Center | ||
| uses: camunda/infra-global-github-actions/download-center-upload@40a4ed3a870fa58eb5e994737c79ef690e949ea7 | ||
| with: | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -40,6 +40,20 @@ jobs: | |
| cache: 'npm' | ||
| - name: Install dependencies | ||
| run: npm ci | ||
| - name: Import Secrets | ||
| id: secrets | ||
| uses: hashicorp/[email protected] | ||
| with: | ||
| url: ${{ secrets.VAULT_ADDR }} | ||
| method: approle | ||
| roleId: ${{ secrets.VAULT_ROLE_ID }} | ||
| secretId: ${{ secrets.VAULT_SECRET_ID }} | ||
| exportEnv: false | ||
| secrets: | | ||
| secret/data/products/desktop-modeler/ci/sentry SENTRY_AUTH_TOKEN; | ||
| secret/data/products/desktop-modeler/ci/sentry SENTRY_DSN; | ||
| secret/data/products/desktop-modeler/ci/sentry SENTRY_ORG; | ||
| secret/data/products/desktop-modeler/ci/sentry SENTRY_PROJECT; | ||
| - name: Build release (Linux) | ||
| if: ${{ runner.OS == 'Linux' }} | ||
|
|
@@ -48,10 +62,10 @@ jobs: | |
| CSC_KEY_PASSWORD: "${{ secrets.CSC_KEY_PASSWORD }}" | ||
| MIXPANEL_TOKEN: "${{ secrets.MIXPANEL_PROJECT_TOKEN }}" | ||
| MIXPANEL_STAGE: "prod" | ||
| SENTRY_AUTH_TOKEN: "${{ secrets.SENTRY_AUTH_TOKEN }}" | ||
| SENTRY_DSN: "${{ secrets.SENTRY_DSN }}" | ||
| SENTRY_ORG: "${{ secrets.SENTRY_ORG }}" | ||
| SENTRY_PROJECT: "${{ secrets.SENTRY_PROJECT }}" | ||
| SENTRY_AUTH_TOKEN: "${{ steps.secrets.outputs.SENTRY_AUTH_TOKEN }}" | ||
| SENTRY_DSN: "${{ steps.secrets.outputs.SENTRY_DSN }}" | ||
| SENTRY_ORG: "${{ steps.secrets.outputs.SENTRY_ORG }}" | ||
| SENTRY_PROJECT: "${{ steps.secrets.outputs.SENTRY_PROJECT }}" | ||
| UPDATES_SERVER_PRODUCT_NAME: "${{ secrets.UPDATES_SERVER_PRODUCT_NAME }}" | ||
| GH_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | ||
| NODE_ENV: "production" | ||
|
|
@@ -66,10 +80,10 @@ jobs: | |
| CSC_KEY_PASSWORD: "${{ secrets.CSC_KEY_PASSWORD }}" | ||
| MIXPANEL_TOKEN: "${{ secrets.MIXPANEL_PROJECT_TOKEN }}" | ||
| MIXPANEL_STAGE: "prod" | ||
| SENTRY_AUTH_TOKEN: "${{ secrets.SENTRY_AUTH_TOKEN }}" | ||
| SENTRY_DSN: "${{ secrets.SENTRY_DSN }}" | ||
| SENTRY_ORG: "${{ secrets.SENTRY_ORG }}" | ||
| SENTRY_PROJECT: "${{ secrets.SENTRY_PROJECT }}" | ||
| SENTRY_AUTH_TOKEN: "${{ steps.secrets.outputs.SENTRY_AUTH_TOKEN }}" | ||
| SENTRY_DSN: "${{ steps.secrets.outputs.SENTRY_DSN }}" | ||
| SENTRY_ORG: "${{ steps.secrets.outputs.SENTRY_ORG }}" | ||
| SENTRY_PROJECT: "${{ steps.secrets.outputs.SENTRY_PROJECT }}" | ||
| UPDATES_SERVER_PRODUCT_NAME: "${{ secrets.UPDATES_SERVER_PRODUCT_NAME }}" | ||
| GH_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | ||
| NODE_ENV: "production" | ||
|
|
@@ -79,10 +93,10 @@ jobs: | |
| env: | ||
| MIXPANEL_TOKEN: "${{ secrets.MIXPANEL_PROJECT_TOKEN }}" | ||
| MIXPANEL_STAGE: "prod" | ||
| SENTRY_AUTH_TOKEN: "${{ secrets.SENTRY_AUTH_TOKEN }}" | ||
| SENTRY_DSN: "${{ secrets.SENTRY_DSN }}" | ||
| SENTRY_ORG: "${{ secrets.SENTRY_ORG }}" | ||
| SENTRY_PROJECT: "${{ secrets.SENTRY_PROJECT }}" | ||
| SENTRY_AUTH_TOKEN: "${{ steps.secrets.outputs.SENTRY_AUTH_TOKEN }}" | ||
| SENTRY_DSN: "${{ steps.secrets.outputs.SENTRY_DSN }}" | ||
| SENTRY_ORG: "${{ steps.secrets.outputs.SENTRY_ORG }}" | ||
| SENTRY_PROJECT: "${{ steps.secrets.outputs.SENTRY_PROJECT }}" | ||
| UPDATES_SERVER_PRODUCT_NAME: "${{ secrets.UPDATES_SERVER_PRODUCT_NAME }}" | ||
| GH_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | ||
| NODE_ENV: "production" | ||
|
|
||