-
Notifications
You must be signed in to change notification settings - Fork 592
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
gha: update to use aws sm #18857
gha: update to use aws sm #18857
Conversation
to resolve warning: > Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@v3.
Looks like this worklfow is not needed because it has been disabled for over 1 year: https://github.com/redpanda-data/redpanda/actions/workflows/old-backports.yml
It does not look like this worklfow is used because no history of it running: https://github.com/redpanda-data/redpanda/actions/workflows/packages-created.yml
No history of workflow runs since disabled: https://github.com/redpanda-data/redpanda/actions/workflows/render-draft-release-notes.yml
Disabled worklfow has no history of workflow run: https://github.com/redpanda-data/redpanda/actions/workflows/slack-messages.yml
|
To address warning message: > Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/labeler@v4.
/dt |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Mostly LGTM - found one thing that wasn't super clear at a glance
uses: aws-actions/aws-secretsmanager-get-secrets@v2 | ||
with: | ||
secret-ids: | | ||
,sdlc/prod/github/jira |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I assume the empty list before the leading comma means "all IDs" or something? Maybe a comment here would be useful.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
that's just how the plugin is documented to be used for environmental variable naming with blank aliases:
If you set
parse-json-secrets: true
and enter a blank alias, followed by a comma and then the secret ID, the action names the environment variable the same as the parsed JSON keys.
/backport v24.1.x |
/backport v23.3.x |
/backport v23.2.x |
fixes https://redpandadata.atlassian.net/browse/PESDLC-1345
github secrets for this repo have been migrated to aws secretsmanager. this PR uses gha aws-actions/aws-secretsmanager-get-secrets to access the secrets.
this PR also removes unused workflows to reduce number of used secrets:
Backports Required
Release Notes