diff --git a/.github/workflows/production.yml b/.github/workflows/production.yml index f318aab..33b2c83 100644 --- a/.github/workflows/production.yml +++ b/.github/workflows/production.yml @@ -13,13 +13,14 @@ jobs: outputs: image_name: ${{ steps.build.outputs.image_name }} steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v3 - uses: ./.github/actions/build name: Build image id: build deploy_production: + runs-on: ubuntu-latest environment: production needs: build @@ -32,13 +33,19 @@ jobs: - "1" - "137" - "43114" + permissions: + id-token: write + steps: - uses: actions/checkout@v2 - name: GCP Auth - uses: google-github-actions/auth@v0.4.0 + uses: google-github-actions/auth@v0.6.0 with: - credentials_json: ${{ secrets.GCP_SA_KEY }} + workload_identity_provider: ${{ secrets.GCP_workload_identity_provider }} + service_account: ${{ secrets.GCP_service_account }} + token_format: 'access_token' + - name: Get GKE credentials uses: google-github-actions/get-gke-credentials@v0.4.0 with: