Merge pull request #114 from spacemeshos/workload-identity

Update auth method to workload identity
spacemeshos · Nov 5, 2024 · a4715dc · a4715dc
2 parents 8317257 + 5cd9349
commit a4715dc
Showing 1 changed file with 13 additions and 4 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -11,10 +11,19 @@ jobs:
     steps:
       - uses: actions/checkout@v2
 
-      - name: Init gcloud
-        run: |
-          echo "${{ secrets.GCLOUD_KEY }}" | base64 -d > key.json
-          gcloud auth activate-service-account --key-file=key.json
+      - name: Setup gcloud authentication
+        uses: google-github-actions/auth@v2
+        id: 'auth'
+        with:
+          project_id: ${{ secrets.GCP_PROJECT_ID }}
+          workload_identity_provider: ${{ secrets.GCP_WIP }}
+          service_account: ${{ secrets.GCP_SERVICE_ACCOUNT }}
+          token_format: access_token
+
+      - name: Set up Cloud SDK
+        uses: google-github-actions/setup-gcloud@v2
+        with:
+          version: "469.0.0"
 
       - name: Build to Mainnet Dashboard
         env: