Skip to content

Commit b02dbc2

Browse files
Bump actions and remove usage of deploy key
1 parent 6dda981 commit b02dbc2

File tree

1 file changed

+10
-12
lines changed

1 file changed

+10
-12
lines changed

.github/workflows/main.yml

+10-12
Original file line numberDiff line numberDiff line change
@@ -1,21 +1,20 @@
1-
name: "main"
1+
name: Build and deploy
22
on:
33
push:
44
paths-ignore:
55
- "charts/**"
66
branches:
77
- main
8-
8+
permissions:
9+
contents: read
10+
id-token: write
911
jobs:
1012
build:
11-
runs-on: ubuntu-20.04
12-
permissions:
13-
contents: read
14-
id-token: write
13+
runs-on: ubuntu-latest
1514
steps:
16-
- uses: actions/checkout@v3 # ratchet:exclude
15+
- uses: actions/checkout@v4
1716
- name: Build and push image
18-
uses: nais/platform-build-push-sign@main # ratchet:exclude
17+
uses: nais/platform-build-push-sign@main
1918
id: build_push_sign
2019
with:
2120
name: kolide-event-handler
@@ -29,14 +28,13 @@ jobs:
2928
environment: prod-gcp
3029
needs:
3130
- build
32-
runs-on: ubuntu-20.04
31+
runs-on: ubuntu-latest
3332
steps:
34-
- uses: actions/checkout@v3 # ratchet:exclude
33+
- uses: actions/checkout@v4
3534
- name: Deploy to prod-gcp
36-
uses: nais/deploy/actions/deploy@v1 # ratchet:exclude
35+
uses: nais/deploy/actions/deploy@v2
3736
env:
3837
IMAGE: "${{ needs.build.outputs.image }}"
39-
APIKEY: "${{ secrets.NAIS_DEPLOY_APIKEY }}"
4038
CLUSTER: "prod-gcp"
4139
RESOURCE: ".nais/nais.yml,.nais/secret.yml,.nais/grpc-ingress.yaml"
4240
VARS: ".nais/prod.yml"

0 commit comments

Comments
 (0)