Rotate linode bucket credentials

This commit is contained in:
Adriano Caloiaro 2023-04-17 10:23:34 -06:00
parent 8f11a30ae6
commit adc4f494ab
No known key found for this signature in database
GPG key ID: C2BC56DE73CE3F75
2 changed files with 7 additions and 3 deletions

View file

@ -47,7 +47,7 @@ jobs:
sudo apt-add-repository "deb [arch=amd64] https://apt.releases.hashicorp.com $(lsb_release -cs) main"
sudo apt-get update && sudo apt-get install nomad
tailscale status
nomad job run -var version=${GITHUB_SHA} job.nomad.hcl
nomad job run -var version=${GITHUB_SHA} -var secret_access_key=${{secrets.AWS_SECRET_ACCESS_KEY}} job.nomad.hcl
env:
NOMAD_ADDR: http://cluster-0:4646
NOMAD_TOKEN: ${{ secrets.NOMAD_TOKEN }}

View file

@ -2,6 +2,10 @@ variable "version" {
type = string
}
variable "secret_access_key" {
type = string
}
job "adriano.fyi" {
datacenters = ["dc1"]
namespace = "default"
@ -20,8 +24,8 @@ job "adriano.fyi" {
artifact {
source = "s3://us-east-1.linodeobjects.com/adriano-fyi-static-site/adriano_fyi-${var.version}.tar"
options {
aws_access_key_id = "U8GPO4T1HQ0S5FZO8WV9"
aws_access_key_secret = "a5dlaGsstjR9lRJZHANXqR3jdW9i2dRU1BjQCC6Y"
aws_access_key_id = "6P583LDF5TH38MV4D1Y1"
aws_access_key_secret = var.secret_access_key
# Leave the archive in tar format
archive = false
}