chore: Update github secrets keys

actions-python · Oct 13, 2023 · 8655b4a · 8655b4a
1 parent 0517ee0
commit 8655b4a
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 7 deletions.
diff --git a/.github/workflows/opentofu-format.yml b/.github/workflows/opentofu-format.yml
@@ -69,7 +69,7 @@ jobs:
         id: create-github-app-token
         with:
           app-id: ${{ secrets.ACTIONS_PYTHON_CI_APP_ID }}
-          private-key: ${{ secrets.ACTIONS_PYTHON_CI_PRIVATE_KEY }}
+          private-key: ${{ secrets.ACTIONS_PYTHON_CI_APP_PEM_FILE }}
 
       - uses: actions/checkout@v4
         with:

diff --git a/.github/workflows/opentofu-tfcmt.yml b/.github/workflows/opentofu-tfcmt.yml
@@ -25,7 +25,7 @@ jobs:
         id: create-github-app-token
         with:
           app-id: ${{ secrets.ACTIONS_PYTHON_CI_APP_ID }}
-          private-key: ${{ secrets.ACTIONS_PYTHON_CI_PRIVATE_KEY }}
+          private-key: ${{ secrets.ACTIONS_PYTHON_CI_APP_PEM_FILE }}
 
       - uses: kislerdm/setup-opentofu@main
         with:
@@ -47,7 +47,11 @@ jobs:
             -repo ${{ github.event.repository.name }} \
             -pr ${{ github.event.pull_request.number }} \
             -var "target:${{ matrix.module }}" \
-            plan -patch -- tofu plan -no-color
+            plan -patch -- tofu plan -no-color \
+              -var "app_terraform_io_token=${{ secrets.APP_TERRAFORM_IO_TOKEN }}" \
+              -var "github_provider_app_id=${{ secrets.ACTIONS_PYTHON_CI_APP_ID }}" \
+              -var "github_provider_app_installation_id=${{ secrets.ACTIONS_PYTHON_CI_APP_INSTALLATION_ID }}" \
+              -var "github_provider_app_pem_file=${{ secrets.ACTIONS_PYTHON_CI_APP_PEM_FILE }}"
         env:
           GITHUB_TOKEN: ${{ steps.create-github-app-token.outputs.token }}
         working-directory: ${{ matrix.module }}
@@ -68,7 +72,7 @@ jobs:
         id: create-github-app-token
         with:
           app-id: ${{ secrets.ACTIONS_PYTHON_CI_APP_ID }}
-          private-key: ${{ secrets.ACTIONS_PYTHON_CI_PRIVATE_KEY }}
+          private-key: ${{ secrets.ACTIONS_PYTHON_CI_APP_PEM_FILE }}
 
       - uses: kislerdm/setup-opentofu@main
         with:
@@ -90,7 +94,11 @@ jobs:
             -repo ${{ github.event.repository.name }} \
             -sha ${{ github.sha }} \
             -var "target:${{ matrix.module }}" \
-            apply -- tofu apply -auto-approve
+            apply -- tofu apply -auto-approve \
+              -var "app_terraform_io_token=${{ secrets.APP_TERRAFORM_IO_TOKEN }}" \
+              -var "github_provider_app_id=${{ secrets.ACTIONS_PYTHON_CI_APP_ID }}" \
+              -var "github_provider_app_installation_id=${{ secrets.ACTIONS_PYTHON_CI_APP_INSTALLATION_ID }}" \
+              -var "github_provider_app_pem_file=${{ secrets.ACTIONS_PYTHON_CI_APP_PEM_FILE }}"
         env:
           GITHUB_TOKEN: ${{ steps.create-github-app-token.outputs.token }}
         working-directory: ${{ matrix.module }}
diff --git a/github/nested_repos.tf b/github/nested_repos.tf
@@ -41,9 +41,10 @@ module "github_repository_infra" {
   ]
 
   secrets = [
-    { name = "APP_TERRAFORM_IO_TOKEN", value = var.app_terraform_io_token },
     { name = "ACTIONS_PYTHON_CI_APP_ID", value = var.github_provider_app_id },
-    { name = "ACTIONS_PYTHON_CI_PRIVATE_KEY", value = var.github_provider_app_pem_file },
+    { name = "ACTIONS_PYTHON_CI_APP_INSTALLATION_ID", value = var.github_provider_app_installation_id },
+    { name = "ACTIONS_PYTHON_CI_APP_PEM_FILE", value = var.github_provider_app_pem_file },
+    { name = "APP_TERRAFORM_IO_TOKEN", value = var.app_terraform_io_token },
   ]
 }