From 37412fe21429139abbffaf56943e6b140787958e Mon Sep 17 00:00:00 2001 From: Xun Jiang Date: Tue, 1 Mar 2022 10:59:39 +0800 Subject: [PATCH] Change authentication method from workload identity provider to service account key. Signed-off-by: Xun Jiang --- .github/workflows/push.yml | 19 +------------------ 1 file changed, 1 insertion(+), 18 deletions(-) diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml index 5202a3b4e..aa8fa9b0b 100644 --- a/.github/workflows/push.yml +++ b/.github/workflows/push.yml @@ -6,22 +6,6 @@ on: tags: - '*' -# id-token is added to enable OIDC token generation. All the others are copied from "Set up job" GITHUB_TOKEN Permissions -permissions: - actions: write - checks: write - contents: write - deployments: write - discussions: write - issues: write - packages: write - pages: write - pull-requests: write - repository-projects: write - security-events: write - statuses: write - id-token: write - jobs: build: @@ -71,8 +55,7 @@ jobs: name: 'Authenticate to Google Cloud' uses: 'google-github-actions/auth@v0.6.0' with: - workload_identity_provider: 'projects/298797809281/locations/global/workloadIdentityPools/velero-pool/providers/velero-provider' - service_account: 'gcraccount@velero-gcp.iam.gserviceaccount.com' + credentials_json: '${{ secrets.GCR_SA_KEY }}' token_format: 'access_token' # Use access_token generated above to login gcr.io