enable gcp testing

pulumi · Dec 12, 2024 · 9323fb6 · 9323fb6
1 parent 0462458
commit 9323fb6
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/.github/workflows/scheduled-test.yml b/.github/workflows/scheduled-test.yml
@@ -12,10 +12,18 @@ env:
   ARM_CLIENT_SECRET: ${{ secrets.ARM_CLIENT_SECRET }}
   ARM_TENANT_ID: ${{ secrets.ARM_TENANT_ID }}
   ARM_SUBSCRIPTION_ID: ${{ secrets.ARM_SUBSCRIPTION_ID }}
+  GOOGLE_CI_SERVICE_ACCOUNT_EMAIL: [email protected]
+  GOOGLE_CI_WORKLOAD_IDENTITY_POOL: pulumi-ci
+  GOOGLE_CI_WORKLOAD_IDENTITY_PROVIDER: pulumi-ci
+  GOOGLE_PROJECT: pulumi-ci-gcp-provider
+  GOOGLE_PROJECT_NUMBER: 895284651812
 
 jobs:
   test:
     runs-on: ${{ matrix.platform }}
+    permissions:
+      contents: read
+      id-token: write
     environment: "testing"
     strategy:
       matrix:
@@ -84,8 +92,8 @@ jobs:
       - name: Authenticate to Google Cloud
         uses: google-github-actions/auth@v2
         with:
-          workload_identity_provider: projects/${{ vars.GOOGLE_PROJECT_NUMBER }}/locations/global/workloadIdentityPools/${{ vars.GOOGLE_CI_WORKLOAD_IDENTITY_POOL }}/providers/${{ vars.GOOGLE_CI_WORKLOAD_IDENTITY_PROVIDER }}
-          service_account: ${{ vars.GOOGLE_CI_SERVICE_ACCOUNT_EMAIL }}
+          workload_identity_provider: projects/${{ env.GOOGLE_PROJECT_NUMBER }}/locations/global/workloadIdentityPools/${{ env.GOOGLE_CI_WORKLOAD_IDENTITY_POOL }}/providers/${{ env.GOOGLE_CI_WORKLOAD_IDENTITY_PROVIDER }}
+          service_account: ${{ env.GOOGLE_CI_SERVICE_ACCOUNT_EMAIL }}
 
       - name: Run the tests
         run: make test