TECH-149 Move SSH after ECR to retain credentials

Signed-off-by: James Newman <[email protected]>
botsandus · Apr 19, 2024 · 5d5a87d · 5d5a87d
1 parent 3527b2c
commit 5d5a87d
Showing 1 changed file with 13 additions and 13 deletions.
diff --git a/.github/workflows/container-build.yml b/.github/workflows/container-build.yml
@@ -55,19 +55,6 @@ jobs:
       group: ${{ github.workflow }}-${{ github.ref }}
       cancel-in-progress: ${{ startsWith(github.ref, 'refs/pull/') }}
 
-    steps:
-      - name: Tailscale SSH debug (${{
-          inputs.ssh-debug
-            && (runner.debug && 'enabled' || 're-run with debug logging to enable')
-            || 'disabled'
-          }})
-
-        if: ${{ inputs.ssh-debug && runner.debug }}
-        uses: botsandus/github-actions/tailscale-ssh@master
-        with:
-          ssh-wait-minutes: ${{ inputs.ssh-wait-minutes }}
-          ts-authkey: ${{ secrets.TAILSCALE_CI_BUILDER_KEY }}
-
       - name: Expose GitHub Runtime
         uses: crazy-max/ghaction-github-runtime@v1
 
@@ -91,6 +78,19 @@ jobs:
         id: login-ecr
         uses: aws-actions/amazon-ecr-login@v1
 
+    steps:
+      - name: Tailscale SSH debug (${{
+          inputs.ssh-debug
+            && (runner.debug && 'enabled' || 're-run with debug logging to enable')
+            || 'disabled'
+          }})
+
+        if: ${{ inputs.ssh-debug && runner.debug }}
+        uses: botsandus/github-actions/tailscale-ssh@master
+        with:
+          ssh-wait-minutes: ${{ inputs.ssh-wait-minutes }}
+          ts-authkey: ${{ secrets.TAILSCALE_CI_BUILDER_KEY }}
+
       - name: Calculate tags
         id: tag-calculator
         run: |