Merge pull request #954 from navikt/nais-deploy-v2-uten-apikey

Nøkkelfri deploy fra Github
navikt · Jan 19, 2024 · 3a31e0d · 3a31e0d
2 parents 31e79b5 + 3ad208e
commit 3a31e0d
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 5 deletions.
diff --git a/.github/workflows/alert-deploy.yaml b/.github/workflows/alert-deploy.yaml
@@ -14,27 +14,29 @@ jobs:
   preprod-deploy:
     name: Deploy to preprod
     runs-on: ubuntu-latest
+    permissions:
+      id-token: 'write'
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
       - name: Deploy to preprod
         uses: nais/deploy/actions/deploy@v2
         env:
-          APIKEY: ${{ secrets.NAIS_DEPLOY_APIKEY }}
           CLUSTER: dev-gcp
           RESOURCE: './.nais/bygger/alerts.yaml'
           VARS: './.nais/bygger/preprod.yaml'
 
   prod-deploy:
     name: Deploy to prod
     runs-on: ubuntu-latest
+    permissions:
+      id-token: 'write'
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
       - name: Deploy to prod
         uses: nais/deploy/actions/deploy@v2
         env:
-          APIKEY: ${{ secrets.NAIS_DEPLOY_APIKEY }}
           CLUSTER: prod-gcp
           RESOURCE: './.nais/bygger/alerts.yaml'
           VARS: './.nais/bygger/prod.yaml'
diff --git a/.github/workflows/build-and-test.yaml b/.github/workflows/build-and-test.yaml
@@ -129,12 +129,13 @@ jobs:
     if: github.ref == 'refs/heads/master'
     needs: [build-and-test, package-and-push-bygger, package-and-push-fyllut-base]
     runs-on: ubuntu-latest
+    permissions:
+      id-token: 'write'
     steps:
       - uses: 'actions/checkout@v4'
       - name: 'Deploy to PROD'
         uses: 'nais/deploy/actions/deploy@v2'
         env:
-          APIKEY: '${{ secrets.NAIS_DEPLOY_APIKEY }}'
           CLUSTER: 'prod-gcp'
           RESOURCE: './.nais/bygger/nais.yaml'
           VARS: './.nais/bygger/prod.yaml'

diff --git a/.github/workflows/manual-deploy.yaml b/.github/workflows/manual-deploy.yaml
@@ -58,12 +58,13 @@ jobs:
     needs: [package-and-push-bygger]
     if: ${{ !failure() && !cancelled() }}
     runs-on: ubuntu-latest
+    permissions:
+      id-token: 'write'
     steps:
       - uses: 'actions/checkout@v4'
       - name: 'Deploy to preprod'
         uses: 'nais/deploy/actions/deploy@v2'
         env:
-          APIKEY: '${{ secrets.NAIS_DEPLOY_APIKEY }}'
           CLUSTER: 'dev-gcp'
           RESOURCE: './.nais/bygger/nais.yaml'
           VARS: './.nais/bygger/${{ github.event.inputs.environment }}.yaml'
@@ -112,12 +113,13 @@ jobs:
     needs: [package-and-push-fyllut]
     if: ${{ !failure() && !cancelled() }}
     runs-on: ubuntu-latest
+    permissions:
+      id-token: 'write'
     steps:
       - uses: 'actions/checkout@v4'
       - name: 'Deploy to preprod'
         uses: 'nais/deploy/actions/deploy@v2'
         env:
-          APIKEY: '${{ secrets.NAIS_DEPLOY_APIKEY }}'
           CLUSTER: 'dev-gcp'
           RESOURCE: './.nais/fyllut/config.yaml'
           VARS: './.nais/fyllut/${{ github.event.inputs.environment }}.yaml'