build: update to use iam roles (oidc), no longer access keys (#146)

rsksmart · May 6, 2024 · cd2b4b6 · cd2b4b6
1 parent 07eb9ae
commit cd2b4b6
Show file tree

Hide file tree

Showing 5 changed files with 10 additions and 15 deletions.
diff --git a/.github/workflows/deploy.boltz.testnet.yml b/.github/workflows/deploy.boltz.testnet.yml
@@ -20,10 +20,9 @@ jobs:
                   fetch-depth: 0
 
             - name: Configure AWS credentials
-              uses: aws-actions/configure-aws-credentials@v1
+              uses: aws-actions/configure-aws-credentials@v4
               with:
-                  aws-access-key-id: ${{ secrets.BOLTZ_TESTNET_AWS_ACCESS_KEY_ID }}
-                  aws-secret-access-key: ${{ secrets.BOLTZ_TESTNET_AWS_SECRET_ACCESS_KEY }}
+                  role-to-assume: ${{ secrets.BOLTZ_TESTNET_ROLE_ARN }}
                   aws-region: "${{ secrets.BOLTZ_TESTNET_AWS_REGION }}"
 
             - name: Deploy rif-relay-server on Boltz Testnet

diff --git a/.github/workflows/deploy.qa.yml b/.github/workflows/deploy.qa.yml
@@ -18,10 +18,9 @@ jobs:
                   fetch-depth: 0
 
             - name: Configure AWS credentials
-              uses: aws-actions/configure-aws-credentials@v1
+              uses: aws-actions/configure-aws-credentials@v4
               with:
-                  aws-access-key-id: ${{ secrets.QA_AWS_ACCESS_KEY_ID }}
-                  aws-secret-access-key: ${{ secrets.QA_AWS_SECRET_ACCESS_KEY }}
+                  role-to-assume: ${{ secrets.QA_ROLE_ARN }}
                   aws-region: ${{ secrets.QA_AWS_REGION }}
 
             - name: Deploy rif-relay-server on QA

diff --git a/.github/workflows/deploy.rwm.yml b/.github/workflows/deploy.rwm.yml
@@ -19,10 +19,9 @@ jobs:
                   fetch-depth: 0
 
             - name: Configure AWS credentials
-              uses: aws-actions/configure-aws-credentials@v1
+              uses: aws-actions/configure-aws-credentials@v4
               with:
-                  aws-access-key-id: ${{ secrets.RWM_AWS_ACCESS_KEY_ID }}
-                  aws-secret-access-key: ${{ secrets.RWM_AWS_SECRET_ACCESS_KEY }}
+                  role-to-assume: ${{ secrets.RWM_ROLE_ARN }}
                   aws-region: ${{ secrets.RWM_AWS_REGION }}
 
             - name: Deploy rif-relay-server on RIF-Wallet Mainnet

diff --git a/.github/workflows/deploy.rwt.yml b/.github/workflows/deploy.rwt.yml
@@ -19,10 +19,9 @@ jobs:
                   fetch-depth: 0
 
             - name: Configure AWS credentials
-              uses: aws-actions/configure-aws-credentials@v1
+              uses: aws-actions/configure-aws-credentials@v4
               with:
-                  aws-access-key-id: ${{ secrets.RWT_AWS_ACCESS_KEY_ID }}
-                  aws-secret-access-key: ${{ secrets.RWT_AWS_SECRET_ACCESS_KEY }}
+                  role-to-assume: ${{ secrets.RWT_ROLE_ARN }}
                   aws-region: ${{ secrets.RWT_AWS_REGION }}
 
             - name: Deploy rif-relay-server on RWT

diff --git a/.github/workflows/deploy.testnet.yml b/.github/workflows/deploy.testnet.yml
@@ -19,10 +19,9 @@ jobs:
                   fetch-depth: 0
 
             - name: Configure AWS credentials
-              uses: aws-actions/configure-aws-credentials@v1
+              uses: aws-actions/configure-aws-credentials@v4
               with:
-                  aws-access-key-id: ${{ secrets.TESTNET_AWS_ACCESS_KEY_ID }}
-                  aws-secret-access-key: ${{ secrets.TESTNET_AWS_SECRET_ACCESS_KEY }}
+                  role-to-assume: ${{ secrets.TESTNET_ROLE_ARN }}
                   aws-region: ${{ secrets.TESTNET_AWS_REGION }}
 
             - name: Deploy rif-relay-server on TESTNET