Konfig for å deploye utan å bruke API-nøkkel (#166)

* Konfig for å deploye utan å bruke API-nøkkel * Også for prod * Fordel å hugse å oppdatere versjon overalt
navikt · Dec 19, 2023 · 1b32277 · 1b32277
1 parent e70c449
commit 1b32277
Show file tree

Hide file tree

Showing 5 changed files with 17 additions and 7 deletions.
diff --git a/.github/workflows/.deploy.yaml b/.github/workflows/.deploy.yaml
@@ -19,9 +19,8 @@ jobs:
     timeout-minutes: 10
     steps:
       - uses: actions/checkout@v4
-      - uses: nais/deploy/actions/deploy@v1
+      - uses: nais/deploy/actions/deploy@v2
         env:
-          APIKEY: ${{ secrets.NAIS_DEPLOY_APIKEY }}
           CLUSTER: dev-${{ inputs.cluster }}
           RESOURCE: apps/${{ github.workflow }}/.nais/dev.yaml
           VAR: image=${{ inputs.image }}
@@ -38,10 +37,9 @@ jobs:
         id: check_files
         with:
           files: "apps/${{ github.workflow }}/.nais/prod.yaml"
-      - uses: nais/deploy/actions/deploy@v1
+      - uses: nais/deploy/actions/deploy@v2
         if: steps.check_files.outputs.files_exists == 'true'
         env:
-          APIKEY: ${{ secrets.NAIS_DEPLOY_APIKEY }}
           CLUSTER: prod-${{ inputs.cluster }}
           RESOURCE: apps/${{ github.workflow }}/.nais/prod.yaml
           VAR: image=${{ inputs.image }}
diff --git a/.github/workflows/app-etterlatte-proxy.yaml b/.github/workflows/app-etterlatte-proxy.yaml
@@ -41,4 +41,7 @@ jobs:
     with:
       image: ${{ needs.build.outputs.image }}
       cluster: 'fss'
-    secrets: inherit
+    secrets: inherit
+    permissions:
+      contents: 'read'
+      id-token: 'write'
diff --git a/.github/workflows/app-ey-pdfgen.yaml b/.github/workflows/app-ey-pdfgen.yaml
@@ -29,4 +29,7 @@ jobs:
     with:
       image: ${{ needs.build.outputs.image }}
       cluster: 'gcp'
-    secrets: inherit
+    secrets: inherit
+    permissions:
+      contents: 'read'
+      id-token: 'write'
diff --git a/.github/workflows/etterlatte-notifikasjoner.yaml b/.github/workflows/etterlatte-notifikasjoner.yaml
@@ -41,4 +41,7 @@ jobs:
     with:
       image: ${{ needs.build.outputs.image }}
       cluster: 'gcp'
-    secrets: inherit
+    secrets: inherit
+    permissions:
+      contents: 'read'
+      id-token: 'write'
diff --git a/.github/workflows/ey-slackbot.yaml b/.github/workflows/ey-slackbot.yaml
@@ -25,3 +25,6 @@ jobs:
       image: ${{ needs.build.outputs.image }}
       cluster: 'gcp'
     secrets: inherit
+    permissions:
+      contents: 'read'
+      id-token: 'write'