diff --git a/.circleci/config.yml b/.circleci/config.yml index 93f67dd24..d0f445cd7 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -10,11 +10,12 @@ # DOCKER_LOAD_TEST_USER - Docker Hub load test repo user # # These environment variables are necessary to authenticate with GCP and upload images to GAR +# GCP_GAR_PROJECT_ID - GCP project ID for GAR repo # GCP_GAR_REPO - Name of GAR repo -# GCP_PROJECT_ID - GCP project ID -# GCP_SERVICE_ACCOUNT_EMAIL - GCP service account email -# GCP_WIP_ID - GCP Workload Identity Pool ID -# GCP_WIP_PROVIDER_ID - GCP Workload Identity Pool Provider ID +# GCP_OIDC_PROJECT_ID - GCP project ID for Workload Identity Pool/Provider +# GCP_OIDC_SERVICE_ACCOUNT_EMAIL - GCP service account email +# GCP_OIDC_WIP_ID - GCP Workload Identity Pool ID +# GCP_OIDC_WIP_PROVIDER_ID - GCP Workload Identity Pool Provider ID version: 2.1 @@ -338,12 +339,12 @@ jobs: # https://circleci.com/developer/orbs/orb/circleci/gcp-gcr#commands-gcr-auth - gcp-gcr/gcr-auth: gcp_cred_config_file_path: ~/gcp_cred_config.json - google-project-id: GCP_PROJECT_ID + google-project-id: GCP_OIDC_PROJECT_ID registry-url: <> - service_account_email: GCP_SERVICE_ACCOUNT_EMAIL + service_account_email: GCP_OIDC_SERVICE_ACCOUNT_EMAIL use_oidc: true - workload_identity_pool_id: GCP_WIP_ID - workload_identity_pool_provider_id: GCP_WIP_PROVIDER_ID + workload_identity_pool_id: GCP_OIDC_WIP_ID + workload_identity_pool_provider_id: GCP_OIDC_WIP_PROVIDER_ID - run: name: Tag image command: | @@ -352,7 +353,7 @@ jobs: elif [ ! -z "${CIRCLE_TAG}" ]; then echo "export GAR_TAG=$CIRCLE_TAG" >> $BASH_ENV fi - echo "export GAR_IMAGE=\"<>/${GCP_PROJECT_ID}/${GCP_GAR_REPO}/<>\"" >> $BASH_ENV + echo "export GAR_IMAGE=\"<>/${GCP_GAR_PROJECT_ID}/${GCP_GAR_REPO}/<>\"" >> $BASH_ENV source $BASH_ENV docker tag <>:<> $GAR_IMAGE:$GAR_TAG docker tag <>:<> $GAR_IMAGE:latest @@ -360,7 +361,7 @@ jobs: # https://circleci.com/developer/orbs/orb/circleci/gcp-gcr#commands-push-image - gcp-gcr/push-image: image: $GAR_IMAGE - google-project-id: GCP_PROJECT_ID + google-project-id: GCP_GAR_PROJECT_ID registry-url: <> tag: $GAR_TAG,latest