From ca174c79dc9e88b17503d871b8818dd648df2561 Mon Sep 17 00:00:00 2001 From: Vasily Nemkov Date: Tue, 28 Feb 2023 17:19:07 +0100 Subject: [PATCH 1/2] Using secrets for managing AWS access --- .github/workflows/release_branches.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/release_branches.yml b/.github/workflows/release_branches.yml index d210c8ac7103..2f89e33b6d2d 100644 --- a/.github/workflows/release_branches.yml +++ b/.github/workflows/release_branches.yml @@ -21,6 +21,11 @@ on: # yamllint disable-line rule:truthy branches: - 'releases/22.8**' +env: + AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} + AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }} + AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} + jobs: # DockerHubPushAarch64: # runs-on: [self-hosted, style-checker-aarch64] From df30db829ff57a2362d36e8681fe94623af42a69 Mon Sep 17 00:00:00 2001 From: Vasily Nemkov Date: Tue, 28 Feb 2023 17:29:52 +0100 Subject: [PATCH 2/2] Update release_branches.yml --- .github/workflows/release_branches.yml | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/.github/workflows/release_branches.yml b/.github/workflows/release_branches.yml index 2f89e33b6d2d..a06264449dfc 100644 --- a/.github/workflows/release_branches.yml +++ b/.github/workflows/release_branches.yml @@ -3,6 +3,10 @@ name: ReleaseBranchCI env: # Force the stdout and stderr streams to be unbuffered PYTHONUNBUFFERED: 1 + AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} + AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }} + AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} + on: # yamllint disable-line rule:truthy pull_request: @@ -21,11 +25,6 @@ on: # yamllint disable-line rule:truthy branches: - 'releases/22.8**' -env: - AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} - AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }} - AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} - jobs: # DockerHubPushAarch64: # runs-on: [self-hosted, style-checker-aarch64]