reverting authentication strategy for the official one

nicholasSUSE · Aug 14, 2024 · d849905 · d849905
1 parent 49795db
commit d849905
Showing 1 changed file with 46 additions and 11 deletions.
diff --git a/.github/workflows/push-release.yml b/.github/workflows/push-release.yml
@@ -245,11 +245,17 @@ jobs:
         uses: actions/checkout@v4
       - name: Setup Environment Variables
         uses: ./.github/actions/setup-tag-env
+      - name: Load Secrets from Vault
+        uses: rancher-eio/read-vault-secrets@main
+        with:
+          secrets: |
+            secret/data/github/repo/${{ github.repository }}/stage-registry-username/credentials token | STAGE_REGISTRY_USERNAME ;
+            secret/data/github/repo/${{ github.repository }}/stage-registry-password/credentials token | STAGE_REGISTRY_PASSWORD ;
       - name: Login to Docker Hub
         uses: docker/login-action@v3
         with:
-          username: ${{ secrets.STAGE_REGISTRY_USERNAME }}
-          password: ${{ secrets.STAGE_REGISTRY_PASSWORD }}
+          username: ${{ env.STAGE_REGISTRY_USERNAME }}
+          password: ${{ env.STAGE_REGISTRY_PASSWORD }}
           registry: ${{ env.REGISTRY }}
       - name: Build Windows Server Image
         run: |
@@ -277,7 +283,12 @@ jobs:
           merge-multiple: true
       - name: Setup Environment Variables
         uses: ./.github/actions/setup-tag-env
-
+      - name: Load Secrets from Vault
+        uses: rancher-eio/read-vault-secrets@main
+        with:
+          secrets: |
+            secret/data/github/repo/${{ github.repository }}/stage-registry-username/credentials token | STAGE_REGISTRY_USERNAME ;
+            secret/data/github/repo/${{ github.repository }}/stage-registry-password/credentials token | STAGE_REGISTRY_PASSWORD ;
       - name: Docker Registry Login
         uses: docker/login-action@v3
         with:
@@ -315,11 +326,17 @@ jobs:
         uses: ./.github/actions/setup-tag-env
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
+      - name: Load Secrets from Vault
+        uses: rancher-eio/read-vault-secrets@main
+        with:
+          secrets: |
+            secret/data/github/repo/${{ github.repository }}/stage-registry-username/credentials token | STAGE_REGISTRY_USERNAME ;
+            secret/data/github/repo/${{ github.repository }}/stage-registry-password/credentials token | STAGE_REGISTRY_PASSWORD ;
       - name: Login to Docker Hub
         uses: docker/login-action@v3
         with:
-          username: ${{ secrets.STAGE_REGISTRY_USERNAME }}
-          password: ${{ secrets.STAGE_REGISTRY_PASSWORD }}
+          username: ${{ env.STAGE_REGISTRY_USERNAME }}
+          password: ${{ env.STAGE_REGISTRY_PASSWORD }}
           registry: ${{ env.REGISTRY }}
       - name: Create manifest list and push
         run: |
@@ -345,11 +362,17 @@ jobs:
         uses: ./.github/actions/setup-tag-env
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
+      - name: Load Secrets from Vault
+        uses: rancher-eio/read-vault-secrets@main
+        with:
+          secrets: |
+            secret/data/github/repo/${{ github.repository }}/stage-registry-username/credentials token | STAGE_REGISTRY_USERNAME ;
+            secret/data/github/repo/${{ github.repository }}/stage-registry-password/credentials token | STAGE_REGISTRY_PASSWORD ;
       - name: Login to Docker Hub
         uses: docker/login-action@v3
         with:
-          username: ${{ secrets.STAGE_REGISTRY_USERNAME }}
-          password: ${{ secrets.STAGE_REGISTRY_PASSWORD }}
+          username: ${{ env.STAGE_REGISTRY_USERNAME }}
+          password: ${{ env.STAGE_REGISTRY_PASSWORD }}
           registry: ${{ env.REGISTRY }}
       - name: Create manifest list and push
         run: |
@@ -404,11 +427,17 @@ jobs:
           images: ${{ env.IMAGE }}
           flavor: |
             latest=false
+      - name: Load Secrets from Vault
+        uses: rancher-eio/read-vault-secrets@main
+        with:
+          secrets: |
+            secret/data/github/repo/${{ github.repository }}/stage-registry-username/credentials token | STAGE_REGISTRY_USERNAME ;
+            secret/data/github/repo/${{ github.repository }}/stage-registry-password/credentials token | STAGE_REGISTRY_PASSWORD ;
       - name: Docker Registry Login
         uses: docker/login-action@v3
         with:
-          username: ${{ secrets.STAGE_REGISTRY_USERNAME }}
-          password: ${{ secrets.STAGE_REGISTRY_PASSWORD }}
+          username: ${{ env.STAGE_REGISTRY_USERNAME }}
+          password: ${{ env.STAGE_REGISTRY_PASSWORD }}
           registry: ${{ env.REGISTRY }}
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
@@ -454,11 +483,17 @@ jobs:
           images: ${{ env.IMAGE_INSTALLER }}
           flavor: |
             latest=false
+      - name: Load Secrets from Vault
+        uses: rancher-eio/read-vault-secrets@main
+        with:
+          secrets: |
+            secret/data/github/repo/${{ github.repository }}/stage-registry-username/credentials token | STAGE_REGISTRY_USERNAME ;
+            secret/data/github/repo/${{ github.repository }}/stage-registry-password/credentials token | STAGE_REGISTRY_PASSWORD ;
       - name: Login to Docker Hub
         uses: docker/login-action@v3
         with:
-          username: ${{ secrets.STAGE_REGISTRY_USERNAME }}
-          password: ${{ secrets.STAGE_REGISTRY_PASSWORD }}
+          username: ${{ env.STAGE_REGISTRY_USERNAME }}
+          password: ${{ env.STAGE_REGISTRY_PASSWORD }}
           registry: ${{ env.REGISTRY }}
       - name: Create manifest list and push
         run: |