Fix AWS resources matrix workflow auth configuration
This commit is contained in:
parent
a50fa473b5
commit
c9235aef2b
@ -5,7 +5,7 @@ on:
|
|||||||
paths:
|
paths:
|
||||||
- 'iac-template/terraform-hcl-standard/aws-cloud/component/ec2/**'
|
- 'iac-template/terraform-hcl-standard/aws-cloud/component/ec2/**'
|
||||||
- 'iac-template/terraform-hcl-standard/aws-cloud/component/object/**'
|
- 'iac-template/terraform-hcl-standard/aws-cloud/component/object/**'
|
||||||
- '.github/workflows/terraform-standard-iac-pipeline-resources-matrix.yaml'
|
- '.github/workflows/terraform-standard-iac-pipeline-aws-resources-matrix.yaml'
|
||||||
workflow_dispatch:
|
workflow_dispatch:
|
||||||
inputs:
|
inputs:
|
||||||
dry_run:
|
dry_run:
|
||||||
@ -21,7 +21,7 @@ env:
|
|||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
terraform:
|
terraform:
|
||||||
name: "${{ matrix.env }} :: pipeline (dry_run=${{ inputs.dry_run }})"
|
name: "${{ matrix.component }} :: pipeline (dry_run=${{ inputs.dry_run }})"
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
|
|
||||||
strategy:
|
strategy:
|
||||||
@ -46,9 +46,11 @@ jobs:
|
|||||||
with:
|
with:
|
||||||
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
|
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
|
||||||
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
|
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
|
||||||
|
aws-session-token: ${{ secrets.AWS_SESSION_TOKEN }}
|
||||||
aws-region: ${{ env.AWS_REGION }}
|
aws-region: ${{ env.AWS_REGION }}
|
||||||
role-to-assume: ${{ env.AWS_ROLE_ARN }}
|
role-to-assume: ${{ env.AWS_ROLE_ARN }}
|
||||||
role-session-name: github-actions
|
role-session-name: github-actions
|
||||||
|
role-chaining: true
|
||||||
role-skip-session-tagging: true
|
role-skip-session-tagging: true
|
||||||
|
|
||||||
- name: Init
|
- name: Init
|
||||||
@ -69,6 +71,6 @@ jobs:
|
|||||||
run: echo "Dry run enabled → skip apply step."
|
run: echo "Dry run enabled → skip apply step."
|
||||||
|
|
||||||
- name: Output
|
- name: Output
|
||||||
working-directory: ${{ env.BASE_DIR }}/${{ matrix.compoent }}
|
working-directory: ${{ env.BASE_DIR }}/${{ matrix.component }}
|
||||||
if: ${{ env.DRY_RUN == 'false' }}
|
if: ${{ env.DRY_RUN == 'false' }}
|
||||||
run: terraform output -json
|
run: terraform output -json
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user