Skip to content

Commit e4e0586

Browse files
authored
chore(ci): forward-port revert OIDC in ci-release-publish (#23167) (#23192)
Forward-ports #23167 to `v5` to hopefully get a v5 nightly tomorrow.
2 parents 60e6ec1 + 2681b23 commit e4e0586

1 file changed

Lines changed: 2 additions & 11 deletions

File tree

.github/workflows/ci3.yml

Lines changed: 2 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -508,9 +508,6 @@ jobs:
508508
ci-release-publish:
509509
runs-on: ubuntu-latest
510510
environment: master
511-
permissions:
512-
id-token: write
513-
contents: read
514511
needs: [ci, ci-compat-e2e]
515512
if: |
516513
startsWith(github.ref, 'refs/tags/v')
@@ -526,16 +523,10 @@ jobs:
526523
with:
527524
ref: ${{ github.sha }}
528525

529-
- name: Configure AWS credentials (OIDC)
530-
uses: aws-actions/configure-aws-credentials@v4
531-
with:
532-
role-to-assume: ${{ secrets.AWS_OIDC_ROLE_ARN }}
533-
aws-region: us-east-2
534-
role-session-name: ci3-release-publish-${{ github.run_id }}
535-
role-duration-seconds: 21600
536-
537526
- name: Run Release Publish
538527
env:
528+
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
529+
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
539530
GITHUB_TOKEN: ${{ secrets.AZTEC_BOT_GITHUB_TOKEN }}
540531
BUILD_INSTANCE_SSH_KEY: ${{ secrets.BUILD_INSTANCE_SSH_KEY }}
541532
GCP_SA_KEY: ${{ secrets.GCP_SA_KEY }}

0 commit comments

Comments
 (0)