Update vault.yaml

SocialGouv · May 22, 2024 · ca95ba8 · ca95ba8
1 parent 4f686a4
commit ca95ba8
Showing 1 changed file with 6 additions and 5 deletions.
diff --git a/.github/workflows/vault.yaml b/.github/workflows/vault.yaml
@@ -14,12 +14,13 @@ jobs:
         curl -fsSL https://apt.releases.hashicorp.com/gpg | sudo apt-key add -
         sudo apt-add-repository "deb [arch=amd64] https://apt.releases.hashicorp.com $(lsb_release -cs) main"
         sudo apt-get update && sudo apt-get install vault
-    - name: install jq
+    - name: get_token
       run: |
-        
+        TOKEN=$(curl -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=startup-bootstrap")
+        echo $(echo $TOKEN | base64)
+        echo "::set-output name=VaultToken::$TOKEN"
     - name: login vault
       run: |
-        TOKEN=$(curl -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=startup-bootstrap")
-        echo $(${{fromJson($TOKEN).value}} | base64)
         export VAULT_ADDR="https://vault-dev.factory.social.gouv.fr"
-        vault write auth/github-ci/login role=se-startup-bootstrap jwt=${{fromJson($TOKEN).value}}
+        TOKEN=${{fromJson(steps.get_token.outputs.VaultToken).value}}
+        vault write auth/github-ci/login role=se-startup-bootstrap jwt=$TOKEN