Skip to content

Commit e6a8459

Browse files
committed
ci: update helm release to use vault
1 parent bb6c5c3 commit e6a8459

File tree

1 file changed

+9
-3
lines changed

1 file changed

+9
-3
lines changed

.github/workflows/helm-release.yaml

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,9 @@
11

22
name: Helm release
3-
permissions: {}
3+
# These permissions are needed to assume roles from Github's OIDC.
4+
permissions:
5+
contents: read
6+
id-token: write
47

58
on:
69
workflow_dispatch: {}
@@ -61,11 +64,14 @@ jobs:
6164
needs:
6265
- generate-chart-schema
6366
uses: grafana/helm-charts/.github/workflows/update-helm-repo.yaml@main
67+
permissions:
68+
id-token: write
69+
contents: write
70+
packages: write
6471
with:
6572
charts_dir: charts
6673
cr_configfile: charts/cr.yaml
6774
ct_configfile: charts/ct.yaml
6875
helm_tag_prefix: helm
6976
secrets:
70-
github_app_id: ${{ secrets.K6_OPERATOR_HELM_RELEASE_APP_ID }}
71-
github_app_pem: ${{ secrets.K6_OPERATOR_HELM_RELEASE_PEM_KEY }}
77+
vault_repo_secret_name: github-app

0 commit comments

Comments
 (0)