From b8ac9fd86603a1af7ca87cd384de5c76e9459161 Mon Sep 17 00:00:00 2001 From: Ashley Harrison Date: Thu, 1 May 2025 11:33:36 +0100 Subject: [PATCH] Chore: i18n action - get secrets stuff from vault (#104816) get PR_AUTOMATION stuff from vault --- .github/workflows/i18n-crowdin-download.yml | 28 +++++++++++---------- 1 file changed, 15 insertions(+), 13 deletions(-) diff --git a/.github/workflows/i18n-crowdin-download.yml b/.github/workflows/i18n-crowdin-download.yml index 094748ba831..32a2ceab514 100644 --- a/.github/workflows/i18n-crowdin-download.yml +++ b/.github/workflows/i18n-crowdin-download.yml @@ -15,19 +15,6 @@ jobs: id-token: write # needed to get vault secrets steps: - - name: Generate token - id: generate_token - uses: tibdex/github-app-token@b62528385c34dbc9f38e5f4225ac829252d1ea92 - with: - app_id: ${{ secrets.GRAFANA_PR_AUTOMATION_APP_ID }} - private_key: ${{ secrets.GRAFANA_PR_AUTOMATION_APP_PEM }} - - - uses: actions/checkout@v4 - with: - ref: ${{ github.head_ref }} - token: ${{ steps.generate_token.outputs.token }} - persist-credentials: false - - name: "Get vault secrets" id: vault-secrets uses: grafana/shared-workflows/actions/get-vault-secrets@main # zizmor: ignore[unpinned-uses] @@ -36,6 +23,21 @@ jobs: # - ci/repo/grafana/grafana/grafana_frontend_platform_crowdin_bot repo_secrets: | CROWDIN_TOKEN=grafana_frontend_platform_crowdin_bot:access_token + GRAFANA_PR_AUTOMATION_APP_ID=grafana_pr_automation_app:app_id + GRAFANA_PR_AUTOMATION_APP_PEM=grafana_pr_automation_app:app_pem + + - name: Generate token + id: generate_token + uses: tibdex/github-app-token@b62528385c34dbc9f38e5f4225ac829252d1ea92 + with: + app_id: ${{ env.GRAFANA_PR_AUTOMATION_APP_ID }} + private_key: ${{ env.GRAFANA_PR_AUTOMATION_APP_PEM }} + + - uses: actions/checkout@v4 + with: + ref: ${{ github.head_ref }} + token: ${{ steps.generate_token.outputs.token }} + persist-credentials: false - name: Download sources id: crowdin-download