Skip to content

Commit db87bd3

Browse files
himax1991himax1991
committed
unified vex
Signed-off-by: Maksim Khimchenko <maksim.khimchenko@flant.com>
1 parent 0b8e6fe commit db87bd3

9 files changed

Lines changed: 149 additions & 178 deletions

File tree

‎.github/ci_templates/build.yml‎

Lines changed: 7 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,6 @@ steps:
4343
{!{ end }!}
4444

4545
{!{- $secrets := slice -}!}
46-
{!{- $secrets = append ( slice "projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/cosign_key" "access_token" "COSIGN_KEY" ) $secrets -}!}
4746
{!{- $secrets = append ( slice "projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/registry_host" "DECKHOUSE_DEV_REGISTRY_HOST" "DECKHOUSE_DEV_REGISTRY_HOST" ) $secrets -}!}
4847
{!{- $secrets = append ( slice "projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/registry_host" "DECKHOUSE_REGISTRY_STAGE_HOST" "DECKHOUSE_REGISTRY_STAGE_HOST" ) $secrets -}!}
4948
{!{- $secrets = append ( slice "projects/data/101ceaca-97cd-462f-aed5-070d9b9de175/dev-registry/writetoken" "login" "DECKHOUSE_DEV_REGISTRY_USER" ) $secrets -}!}
@@ -118,8 +117,7 @@ steps:
118117
CLOUD_PROVIDERS_SOURCE_REPO: "${{ steps.secrets.outputs.CLOUD_PROVIDERS_SOURCE_REPO }}"
119118
OBSERVABILITY_SOURCE_REPO: "${{ steps.secrets.outputs.OBSERVABILITY_SOURCE_REPO }}"
120119
DECKHOUSE_PRIVATE_REPO: "${{ steps.secrets.outputs.DECKHOUSE_PRIVATE_REPO }}"
121-
COSIGN_KEY: ${{ steps.secrets.outputs.COSIGN_KEY }}
122-
COSIGN_VAULT_ADDRESS: "https://seguro.flant.com"
120+
VAULT_ADDR: "https://seguro.flant.com"
123121
CI_COMMIT_TAG: ${{needs.git_info.outputs.ci_commit_tag}}
124122
CI_COMMIT_BRANCH: ${{needs.git_info.outputs.ci_commit_branch}}
125123
CI_COMMIT_REF_NAME: ${{needs.git_info.outputs.ci_commit_ref_name}}
@@ -129,15 +127,15 @@ steps:
129127
CI_COMMIT_REF_SLUG: ${{needs.git_info.outputs.ci_commit_ref_slug}}
130128
{!{- end }!}
131129
{!{- if or (eq $buildType "dev") (eq $buildType "main") (eq $buildType "pre-release") }!}
132-
COSIGN_VAULT_KEY: "dh-2025-aug-dev"
133-
COSIGN_TRANSIT_SECRET_ENGINE_PATH: "dh-signer-dev"
134-
COSIGN_AUTH_ROLE: "dh-signer-dev_dh-signer-dev"
130+
VAULT_KEY: "dh-2025-aug-dev"
131+
TRANSIT_SECRET_ENGINE_PATH: "dh-signer-dev"
132+
VAULT_ROLE: "dh-signer-dev_dh-signer-dev"
135133
REGISTRY_USER: ${{ steps.secrets.outputs.DECKHOUSE_DEV_REGISTRY_USER }}
136134
REGISTRY_PASSWORD: ${{ steps.secrets.outputs.DECKHOUSE_DEV_REGISTRY_PASSWORD }}
137135
{!{- else }!}
138-
COSIGN_VAULT_KEY: "dh-2025-aug-ec"
139-
COSIGN_TRANSIT_SECRET_ENGINE_PATH: "dh-signer"
140-
COSIGN_AUTH_ROLE: "dh-signer_dh-signer"
136+
VAULT_KEY: "dh-2025-aug-ec"
137+
TRANSIT_SECRET_ENGINE_PATH: "dh-signer"
138+
VAULT_ROLE: "dh-signer_dh-signer"
141139
REGISTRY_USER: ${{ steps.secrets.outputs.DECKHOUSE_REGISTRY_STAGE_USER }}
142140
REGISTRY_PASSWORD: ${{ steps.secrets.outputs.DECKHOUSE_REGISTRY_STAGE_PASSWORD }}
143141
{!{- end }!}

‎.github/workflows/build-and-test_dev.yml‎

Lines changed: 28 additions & 42 deletions
Original file line numberDiff line numberDiff line change
@@ -405,7 +405,6 @@ jobs:
405405
method: jwt
406406
jwtGithubAudience: github-access-aud
407407
secrets: |
408-
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/cosign_key access_token | COSIGN_KEY ;
409408
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/registry_host DECKHOUSE_DEV_REGISTRY_HOST | DECKHOUSE_DEV_REGISTRY_HOST ;
410409
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/registry_host DECKHOUSE_REGISTRY_STAGE_HOST | DECKHOUSE_REGISTRY_STAGE_HOST ;
411410
projects/data/101ceaca-97cd-462f-aed5-070d9b9de175/dev-registry/writetoken login | DECKHOUSE_DEV_REGISTRY_USER ;
@@ -525,15 +524,14 @@ jobs:
525524
CLOUD_PROVIDERS_SOURCE_REPO: "${{ steps.secrets.outputs.CLOUD_PROVIDERS_SOURCE_REPO }}"
526525
OBSERVABILITY_SOURCE_REPO: "${{ steps.secrets.outputs.OBSERVABILITY_SOURCE_REPO }}"
527526
DECKHOUSE_PRIVATE_REPO: "${{ steps.secrets.outputs.DECKHOUSE_PRIVATE_REPO }}"
528-
COSIGN_KEY: ${{ steps.secrets.outputs.COSIGN_KEY }}
529-
COSIGN_VAULT_ADDRESS: "https://seguro.flant.com"
527+
VAULT_ADDR: "https://seguro.flant.com"
530528
CI_COMMIT_TAG: ${{needs.git_info.outputs.ci_commit_tag}}
531529
CI_COMMIT_BRANCH: ${{needs.git_info.outputs.ci_commit_branch}}
532530
CI_COMMIT_REF_NAME: ${{needs.git_info.outputs.ci_commit_ref_name}}
533531
CI_COMMIT_REF_SLUG: ${{needs.pull_request_info.outputs.ref_slug}}
534-
COSIGN_VAULT_KEY: "dh-2025-aug-dev"
535-
COSIGN_TRANSIT_SECRET_ENGINE_PATH: "dh-signer-dev"
536-
COSIGN_AUTH_ROLE: "dh-signer-dev_dh-signer-dev"
532+
VAULT_KEY: "dh-2025-aug-dev"
533+
TRANSIT_SECRET_ENGINE_PATH: "dh-signer-dev"
534+
VAULT_ROLE: "dh-signer-dev_dh-signer-dev"
537535
REGISTRY_USER: ${{ steps.secrets.outputs.DECKHOUSE_DEV_REGISTRY_USER }}
538536
REGISTRY_PASSWORD: ${{ steps.secrets.outputs.DECKHOUSE_DEV_REGISTRY_PASSWORD }}
539537
SVACE_ANALYZE_HOST: "${{ secrets.SVACE_ANALYZE_HOST }}"
@@ -982,7 +980,6 @@ jobs:
982980
method: jwt
983981
jwtGithubAudience: github-access-aud
984982
secrets: |
985-
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/cosign_key access_token | COSIGN_KEY ;
986983
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/registry_host DECKHOUSE_DEV_REGISTRY_HOST | DECKHOUSE_DEV_REGISTRY_HOST ;
987984
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/registry_host DECKHOUSE_REGISTRY_STAGE_HOST | DECKHOUSE_REGISTRY_STAGE_HOST ;
988985
projects/data/101ceaca-97cd-462f-aed5-070d9b9de175/dev-registry/writetoken login | DECKHOUSE_DEV_REGISTRY_USER ;
@@ -1102,15 +1099,14 @@ jobs:
11021099
CLOUD_PROVIDERS_SOURCE_REPO: "${{ steps.secrets.outputs.CLOUD_PROVIDERS_SOURCE_REPO }}"
11031100
OBSERVABILITY_SOURCE_REPO: "${{ steps.secrets.outputs.OBSERVABILITY_SOURCE_REPO }}"
11041101
DECKHOUSE_PRIVATE_REPO: "${{ steps.secrets.outputs.DECKHOUSE_PRIVATE_REPO }}"
1105-
COSIGN_KEY: ${{ steps.secrets.outputs.COSIGN_KEY }}
1106-
COSIGN_VAULT_ADDRESS: "https://seguro.flant.com"
1102+
VAULT_ADDR: "https://seguro.flant.com"
11071103
CI_COMMIT_TAG: ${{needs.git_info.outputs.ci_commit_tag}}
11081104
CI_COMMIT_BRANCH: ${{needs.git_info.outputs.ci_commit_branch}}
11091105
CI_COMMIT_REF_NAME: ${{needs.git_info.outputs.ci_commit_ref_name}}
11101106
CI_COMMIT_REF_SLUG: ${{needs.pull_request_info.outputs.ref_slug}}
1111-
COSIGN_VAULT_KEY: "dh-2025-aug-dev"
1112-
COSIGN_TRANSIT_SECRET_ENGINE_PATH: "dh-signer-dev"
1113-
COSIGN_AUTH_ROLE: "dh-signer-dev_dh-signer-dev"
1107+
VAULT_KEY: "dh-2025-aug-dev"
1108+
TRANSIT_SECRET_ENGINE_PATH: "dh-signer-dev"
1109+
VAULT_ROLE: "dh-signer-dev_dh-signer-dev"
11141110
REGISTRY_USER: ${{ steps.secrets.outputs.DECKHOUSE_DEV_REGISTRY_USER }}
11151111
REGISTRY_PASSWORD: ${{ steps.secrets.outputs.DECKHOUSE_DEV_REGISTRY_PASSWORD }}
11161112
SVACE_ANALYZE_HOST: "${{ secrets.SVACE_ANALYZE_HOST }}"
@@ -1276,7 +1272,6 @@ jobs:
12761272
method: jwt
12771273
jwtGithubAudience: github-access-aud
12781274
secrets: |
1279-
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/cosign_key access_token | COSIGN_KEY ;
12801275
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/registry_host DECKHOUSE_DEV_REGISTRY_HOST | DECKHOUSE_DEV_REGISTRY_HOST ;
12811276
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/registry_host DECKHOUSE_REGISTRY_STAGE_HOST | DECKHOUSE_REGISTRY_STAGE_HOST ;
12821277
projects/data/101ceaca-97cd-462f-aed5-070d9b9de175/dev-registry/writetoken login | DECKHOUSE_DEV_REGISTRY_USER ;
@@ -1396,15 +1391,14 @@ jobs:
13961391
CLOUD_PROVIDERS_SOURCE_REPO: "${{ steps.secrets.outputs.CLOUD_PROVIDERS_SOURCE_REPO }}"
13971392
OBSERVABILITY_SOURCE_REPO: "${{ steps.secrets.outputs.OBSERVABILITY_SOURCE_REPO }}"
13981393
DECKHOUSE_PRIVATE_REPO: "${{ steps.secrets.outputs.DECKHOUSE_PRIVATE_REPO }}"
1399-
COSIGN_KEY: ${{ steps.secrets.outputs.COSIGN_KEY }}
1400-
COSIGN_VAULT_ADDRESS: "https://seguro.flant.com"
1394+
VAULT_ADDR: "https://seguro.flant.com"
14011395
CI_COMMIT_TAG: ${{needs.git_info.outputs.ci_commit_tag}}
14021396
CI_COMMIT_BRANCH: ${{needs.git_info.outputs.ci_commit_branch}}
14031397
CI_COMMIT_REF_NAME: ${{needs.git_info.outputs.ci_commit_ref_name}}
14041398
CI_COMMIT_REF_SLUG: ${{needs.pull_request_info.outputs.ref_slug}}
1405-
COSIGN_VAULT_KEY: "dh-2025-aug-dev"
1406-
COSIGN_TRANSIT_SECRET_ENGINE_PATH: "dh-signer-dev"
1407-
COSIGN_AUTH_ROLE: "dh-signer-dev_dh-signer-dev"
1399+
VAULT_KEY: "dh-2025-aug-dev"
1400+
TRANSIT_SECRET_ENGINE_PATH: "dh-signer-dev"
1401+
VAULT_ROLE: "dh-signer-dev_dh-signer-dev"
14081402
REGISTRY_USER: ${{ steps.secrets.outputs.DECKHOUSE_DEV_REGISTRY_USER }}
14091403
REGISTRY_PASSWORD: ${{ steps.secrets.outputs.DECKHOUSE_DEV_REGISTRY_PASSWORD }}
14101404
SVACE_ANALYZE_HOST: "${{ secrets.SVACE_ANALYZE_HOST }}"
@@ -1570,7 +1564,6 @@ jobs:
15701564
method: jwt
15711565
jwtGithubAudience: github-access-aud
15721566
secrets: |
1573-
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/cosign_key access_token | COSIGN_KEY ;
15741567
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/registry_host DECKHOUSE_DEV_REGISTRY_HOST | DECKHOUSE_DEV_REGISTRY_HOST ;
15751568
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/registry_host DECKHOUSE_REGISTRY_STAGE_HOST | DECKHOUSE_REGISTRY_STAGE_HOST ;
15761569
projects/data/101ceaca-97cd-462f-aed5-070d9b9de175/dev-registry/writetoken login | DECKHOUSE_DEV_REGISTRY_USER ;
@@ -1690,15 +1683,14 @@ jobs:
16901683
CLOUD_PROVIDERS_SOURCE_REPO: "${{ steps.secrets.outputs.CLOUD_PROVIDERS_SOURCE_REPO }}"
16911684
OBSERVABILITY_SOURCE_REPO: "${{ steps.secrets.outputs.OBSERVABILITY_SOURCE_REPO }}"
16921685
DECKHOUSE_PRIVATE_REPO: "${{ steps.secrets.outputs.DECKHOUSE_PRIVATE_REPO }}"
1693-
COSIGN_KEY: ${{ steps.secrets.outputs.COSIGN_KEY }}
1694-
COSIGN_VAULT_ADDRESS: "https://seguro.flant.com"
1686+
VAULT_ADDR: "https://seguro.flant.com"
16951687
CI_COMMIT_TAG: ${{needs.git_info.outputs.ci_commit_tag}}
16961688
CI_COMMIT_BRANCH: ${{needs.git_info.outputs.ci_commit_branch}}
16971689
CI_COMMIT_REF_NAME: ${{needs.git_info.outputs.ci_commit_ref_name}}
16981690
CI_COMMIT_REF_SLUG: ${{needs.pull_request_info.outputs.ref_slug}}
1699-
COSIGN_VAULT_KEY: "dh-2025-aug-dev"
1700-
COSIGN_TRANSIT_SECRET_ENGINE_PATH: "dh-signer-dev"
1701-
COSIGN_AUTH_ROLE: "dh-signer-dev_dh-signer-dev"
1691+
VAULT_KEY: "dh-2025-aug-dev"
1692+
TRANSIT_SECRET_ENGINE_PATH: "dh-signer-dev"
1693+
VAULT_ROLE: "dh-signer-dev_dh-signer-dev"
17021694
REGISTRY_USER: ${{ steps.secrets.outputs.DECKHOUSE_DEV_REGISTRY_USER }}
17031695
REGISTRY_PASSWORD: ${{ steps.secrets.outputs.DECKHOUSE_DEV_REGISTRY_PASSWORD }}
17041696
SVACE_ANALYZE_HOST: "${{ secrets.SVACE_ANALYZE_HOST }}"
@@ -1864,7 +1856,6 @@ jobs:
18641856
method: jwt
18651857
jwtGithubAudience: github-access-aud
18661858
secrets: |
1867-
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/cosign_key access_token | COSIGN_KEY ;
18681859
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/registry_host DECKHOUSE_DEV_REGISTRY_HOST | DECKHOUSE_DEV_REGISTRY_HOST ;
18691860
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/registry_host DECKHOUSE_REGISTRY_STAGE_HOST | DECKHOUSE_REGISTRY_STAGE_HOST ;
18701861
projects/data/101ceaca-97cd-462f-aed5-070d9b9de175/dev-registry/writetoken login | DECKHOUSE_DEV_REGISTRY_USER ;
@@ -1984,15 +1975,14 @@ jobs:
19841975
CLOUD_PROVIDERS_SOURCE_REPO: "${{ steps.secrets.outputs.CLOUD_PROVIDERS_SOURCE_REPO }}"
19851976
OBSERVABILITY_SOURCE_REPO: "${{ steps.secrets.outputs.OBSERVABILITY_SOURCE_REPO }}"
19861977
DECKHOUSE_PRIVATE_REPO: "${{ steps.secrets.outputs.DECKHOUSE_PRIVATE_REPO }}"
1987-
COSIGN_KEY: ${{ steps.secrets.outputs.COSIGN_KEY }}
1988-
COSIGN_VAULT_ADDRESS: "https://seguro.flant.com"
1978+
VAULT_ADDR: "https://seguro.flant.com"
19891979
CI_COMMIT_TAG: ${{needs.git_info.outputs.ci_commit_tag}}
19901980
CI_COMMIT_BRANCH: ${{needs.git_info.outputs.ci_commit_branch}}
19911981
CI_COMMIT_REF_NAME: ${{needs.git_info.outputs.ci_commit_ref_name}}
19921982
CI_COMMIT_REF_SLUG: ${{needs.pull_request_info.outputs.ref_slug}}
1993-
COSIGN_VAULT_KEY: "dh-2025-aug-dev"
1994-
COSIGN_TRANSIT_SECRET_ENGINE_PATH: "dh-signer-dev"
1995-
COSIGN_AUTH_ROLE: "dh-signer-dev_dh-signer-dev"
1983+
VAULT_KEY: "dh-2025-aug-dev"
1984+
TRANSIT_SECRET_ENGINE_PATH: "dh-signer-dev"
1985+
VAULT_ROLE: "dh-signer-dev_dh-signer-dev"
19961986
REGISTRY_USER: ${{ steps.secrets.outputs.DECKHOUSE_DEV_REGISTRY_USER }}
19971987
REGISTRY_PASSWORD: ${{ steps.secrets.outputs.DECKHOUSE_DEV_REGISTRY_PASSWORD }}
19981988
SVACE_ANALYZE_HOST: "${{ secrets.SVACE_ANALYZE_HOST }}"
@@ -2158,7 +2148,6 @@ jobs:
21582148
method: jwt
21592149
jwtGithubAudience: github-access-aud
21602150
secrets: |
2161-
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/cosign_key access_token | COSIGN_KEY ;
21622151
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/registry_host DECKHOUSE_DEV_REGISTRY_HOST | DECKHOUSE_DEV_REGISTRY_HOST ;
21632152
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/registry_host DECKHOUSE_REGISTRY_STAGE_HOST | DECKHOUSE_REGISTRY_STAGE_HOST ;
21642153
projects/data/101ceaca-97cd-462f-aed5-070d9b9de175/dev-registry/writetoken login | DECKHOUSE_DEV_REGISTRY_USER ;
@@ -2278,15 +2267,14 @@ jobs:
22782267
CLOUD_PROVIDERS_SOURCE_REPO: "${{ steps.secrets.outputs.CLOUD_PROVIDERS_SOURCE_REPO }}"
22792268
OBSERVABILITY_SOURCE_REPO: "${{ steps.secrets.outputs.OBSERVABILITY_SOURCE_REPO }}"
22802269
DECKHOUSE_PRIVATE_REPO: "${{ steps.secrets.outputs.DECKHOUSE_PRIVATE_REPO }}"
2281-
COSIGN_KEY: ${{ steps.secrets.outputs.COSIGN_KEY }}
2282-
COSIGN_VAULT_ADDRESS: "https://seguro.flant.com"
2270+
VAULT_ADDR: "https://seguro.flant.com"
22832271
CI_COMMIT_TAG: ${{needs.git_info.outputs.ci_commit_tag}}
22842272
CI_COMMIT_BRANCH: ${{needs.git_info.outputs.ci_commit_branch}}
22852273
CI_COMMIT_REF_NAME: ${{needs.git_info.outputs.ci_commit_ref_name}}
22862274
CI_COMMIT_REF_SLUG: ${{needs.pull_request_info.outputs.ref_slug}}
2287-
COSIGN_VAULT_KEY: "dh-2025-aug-dev"
2288-
COSIGN_TRANSIT_SECRET_ENGINE_PATH: "dh-signer-dev"
2289-
COSIGN_AUTH_ROLE: "dh-signer-dev_dh-signer-dev"
2275+
VAULT_KEY: "dh-2025-aug-dev"
2276+
TRANSIT_SECRET_ENGINE_PATH: "dh-signer-dev"
2277+
VAULT_ROLE: "dh-signer-dev_dh-signer-dev"
22902278
REGISTRY_USER: ${{ steps.secrets.outputs.DECKHOUSE_DEV_REGISTRY_USER }}
22912279
REGISTRY_PASSWORD: ${{ steps.secrets.outputs.DECKHOUSE_DEV_REGISTRY_PASSWORD }}
22922280
SVACE_ANALYZE_HOST: "${{ secrets.SVACE_ANALYZE_HOST }}"
@@ -2452,7 +2440,6 @@ jobs:
24522440
method: jwt
24532441
jwtGithubAudience: github-access-aud
24542442
secrets: |
2455-
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/cosign_key access_token | COSIGN_KEY ;
24562443
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/registry_host DECKHOUSE_DEV_REGISTRY_HOST | DECKHOUSE_DEV_REGISTRY_HOST ;
24572444
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/registry_host DECKHOUSE_REGISTRY_STAGE_HOST | DECKHOUSE_REGISTRY_STAGE_HOST ;
24582445
projects/data/101ceaca-97cd-462f-aed5-070d9b9de175/dev-registry/writetoken login | DECKHOUSE_DEV_REGISTRY_USER ;
@@ -2572,15 +2559,14 @@ jobs:
25722559
CLOUD_PROVIDERS_SOURCE_REPO: "${{ steps.secrets.outputs.CLOUD_PROVIDERS_SOURCE_REPO }}"
25732560
OBSERVABILITY_SOURCE_REPO: "${{ steps.secrets.outputs.OBSERVABILITY_SOURCE_REPO }}"
25742561
DECKHOUSE_PRIVATE_REPO: "${{ steps.secrets.outputs.DECKHOUSE_PRIVATE_REPO }}"
2575-
COSIGN_KEY: ${{ steps.secrets.outputs.COSIGN_KEY }}
2576-
COSIGN_VAULT_ADDRESS: "https://seguro.flant.com"
2562+
VAULT_ADDR: "https://seguro.flant.com"
25772563
CI_COMMIT_TAG: ${{needs.git_info.outputs.ci_commit_tag}}
25782564
CI_COMMIT_BRANCH: ${{needs.git_info.outputs.ci_commit_branch}}
25792565
CI_COMMIT_REF_NAME: ${{needs.git_info.outputs.ci_commit_ref_name}}
25802566
CI_COMMIT_REF_SLUG: ${{needs.pull_request_info.outputs.ref_slug}}
2581-
COSIGN_VAULT_KEY: "dh-2025-aug-dev"
2582-
COSIGN_TRANSIT_SECRET_ENGINE_PATH: "dh-signer-dev"
2583-
COSIGN_AUTH_ROLE: "dh-signer-dev_dh-signer-dev"
2567+
VAULT_KEY: "dh-2025-aug-dev"
2568+
TRANSIT_SECRET_ENGINE_PATH: "dh-signer-dev"
2569+
VAULT_ROLE: "dh-signer-dev_dh-signer-dev"
25842570
REGISTRY_USER: ${{ steps.secrets.outputs.DECKHOUSE_DEV_REGISTRY_USER }}
25852571
REGISTRY_PASSWORD: ${{ steps.secrets.outputs.DECKHOUSE_DEV_REGISTRY_PASSWORD }}
25862572
SVACE_ANALYZE_HOST: "${{ secrets.SVACE_ANALYZE_HOST }}"

‎.github/workflows/build-and-test_main.yml‎

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -175,7 +175,6 @@ jobs:
175175
method: jwt
176176
jwtGithubAudience: github-access-aud
177177
secrets: |
178-
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/cosign_key access_token | COSIGN_KEY ;
179178
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/registry_host DECKHOUSE_DEV_REGISTRY_HOST | DECKHOUSE_DEV_REGISTRY_HOST ;
180179
projects/data/6db2f1ee-9b6f-4f4f-8381-2fb43060478a/github/registry_host DECKHOUSE_REGISTRY_STAGE_HOST | DECKHOUSE_REGISTRY_STAGE_HOST ;
181180
projects/data/101ceaca-97cd-462f-aed5-070d9b9de175/dev-registry/writetoken login | DECKHOUSE_DEV_REGISTRY_USER ;
@@ -293,15 +292,14 @@ jobs:
293292
CLOUD_PROVIDERS_SOURCE_REPO: "${{ steps.secrets.outputs.CLOUD_PROVIDERS_SOURCE_REPO }}"
294293
OBSERVABILITY_SOURCE_REPO: "${{ steps.secrets.outputs.OBSERVABILITY_SOURCE_REPO }}"
295294
DECKHOUSE_PRIVATE_REPO: "${{ steps.secrets.outputs.DECKHOUSE_PRIVATE_REPO }}"
296-
COSIGN_KEY: ${{ steps.secrets.outputs.COSIGN_KEY }}
297-
COSIGN_VAULT_ADDRESS: "https://seguro.flant.com"
295+
VAULT_ADDR: "https://seguro.flant.com"
298296
CI_COMMIT_TAG: ${{needs.git_info.outputs.ci_commit_tag}}
299297
CI_COMMIT_BRANCH: ${{needs.git_info.outputs.ci_commit_branch}}
300298
CI_COMMIT_REF_NAME: ${{needs.git_info.outputs.ci_commit_ref_name}}
301299
CI_COMMIT_REF_SLUG: ${{needs.git_info.outputs.ci_commit_ref_slug}}
302-
COSIGN_VAULT_KEY: "dh-2025-aug-dev"
303-
COSIGN_TRANSIT_SECRET_ENGINE_PATH: "dh-signer-dev"
304-
COSIGN_AUTH_ROLE: "dh-signer-dev_dh-signer-dev"
300+
VAULT_KEY: "dh-2025-aug-dev"
301+
TRANSIT_SECRET_ENGINE_PATH: "dh-signer-dev"
302+
VAULT_ROLE: "dh-signer-dev_dh-signer-dev"
305303
REGISTRY_USER: ${{ steps.secrets.outputs.DECKHOUSE_DEV_REGISTRY_USER }}
306304
REGISTRY_PASSWORD: ${{ steps.secrets.outputs.DECKHOUSE_DEV_REGISTRY_PASSWORD }}
307305
SVACE_ANALYZE_HOST: "${{ secrets.SVACE_ANALYZE_HOST }}"

0 commit comments

Comments
 (0)