ci: pass secret from workflow file

newrelic · Dec 12, 2023 · ad1cfba · ad1cfba
1 parent 0b8e734
commit ad1cfba
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 4 deletions.
diff --git a/.github/workflows/component_canaries.yml b/.github/workflows/component_canaries.yml
@@ -5,6 +5,10 @@ on:
     secrets:
       AWS_VPC_SUBNET:
         required: true
+      CROWDSTRIKE_CLIENT_ID:
+        required: true
+      CROWDSTRIKE_CLIENT_SECRET:
+        required: true
 
     inputs:
       TAG:
@@ -43,12 +47,9 @@ jobs:
 
       - name: Provision canaries
         uses: newrelic/fargate-runner-action@main
-        env:
-          CROWDSRIKE_CLIENT_ID: "${{ secrets.CROWDSTIKRE_CLIENT_ID }}"
-          CROWDSRIKE_CLIENT_SECRET: "${{ secrets.CROWDSTRIKE_CLIENT_SECRET }}"
         with:
           aws_region: us-east-2
-          container_make_target: "canaries PLATFORM=${{ inputs.PLATFORM }} ANSIBLE_FORKS=${{ env.ANSIBLE_FORKS }} VERSION=${{ inputs.TAG }} CROWDSTRIKE_CLIENT_ID=${{ env.CROWDSTRIKE_CLIENT_ID }} CROWDSTRIKE_CLIENT_SECRET=${{ env.CROWDSTRIKE_CLIENT_SECRET }}"
+          container_make_target: "canaries PLATFORM=${{ inputs.PLATFORM }} ANSIBLE_FORKS=${{ env.ANSIBLE_FORKS }} VERSION=${{ inputs.TAG }} CROWDSTRIKE_CLIENT_ID=${{ secrets.CROWDSTRIKE_CLIENT_ID }} CROWDSTRIKE_CLIENT_SECRET=${{ secrets.CROWDSTRIKE_CLIENT_SECRET }}"
           ecs_cluster_name: caos_infra_agent
           task_definition_name: infra-agent-td
           cloud_watch_logs_group_name: /ecs/test-prerelease-infra-agent

diff --git a/.github/workflows/prerelease_canaries.yml b/.github/workflows/prerelease_canaries.yml
@@ -44,6 +44,8 @@ jobs:
       TAG: ${{ github.event.inputs.tag }}
     secrets:
       AWS_VPC_SUBNET: ${{secrets.AWS_VPC_SUBNET}}
+      CROWDSTRIKE_CLIENT_ID: ${{secrets.CROWDSTIKRE_CLIENT_ID}}
+      CROWDSTRIKE_CLIENT_SECRET: ${{secrets.CROWDSTRIKE_CLIENT_SECRET}}
 
   canaries-linux:
     if: ${{ github.event.inputs.linux == 'true' }}
@@ -53,6 +55,8 @@ jobs:
       TAG: ${{ github.event.inputs.tag }}
     secrets:
       AWS_VPC_SUBNET: ${{secrets.AWS_VPC_SUBNET}}
+      CROWDSTRIKE_CLIENT_ID: ${{secrets.CROWDSTIKRE_CLIENT_ID}}
+      CROWDSTRIKE_CLIENT_SECRET: ${{secrets.CROWDSTRIKE_CLIENT_SECRET}}
 
   canaries-macos:
     if: ${{ github.event.inputs.macos == 'true' }}
@@ -62,6 +66,8 @@ jobs:
       TAG: ${{ github.event.inputs.tag }}
     secrets:
       AWS_VPC_SUBNET: ${{secrets.AWS_VPC_SUBNET}}
+      CROWDSTRIKE_CLIENT_ID: ${{secrets.CROWDSTIKRE_CLIENT_ID}}
+      CROWDSTRIKE_CLIENT_SECRET: ${{secrets.CROWDSTRIKE_CLIENT_SECRET}}
 
   prune-previous-canaries-linux:
     if: ${{ github.event.inputs.prune == 'true' && github.event.inputs.linux == 'true' }}