mirror of
https://github.com/openobserve/openobserve.git
synced 2026-11-04 16:09:05 +00:00
mmosarafO2
433f947745
### **User description**
updated github action role
___
### **PR Type**
Enhancement
___
### **Description**
- Use GitHub OIDC for AWS credentials
- Add AWS credentials configuration step
- Remove manual AWS secret environment variables
- Set id-token and contents permissions
___
### Diagram Walkthrough
```mermaid
flowchart LR
A["GitHub Actions release job"] -- "assume role via OIDC" --> B["AWS IAM Role"]
B -- "provide temporary credentials" --> A
A -- "upload artifacts with AWS CLI" --> C["S3 Bucket"]
```
<details> <summary><h3> File Walkthrough</h3></summary>
<table><thead><tr><th></th><th align="left">Relevant
files</th></tr></thead><tbody><tr><td><strong>Configuration
changes</strong></td><td><table>
<tr>
<td>
<details>
<summary><strong>release.yml</strong><dd><code>Configure OIDC AWS
credentials and permissions</code>
</dd></summary>
<hr>
.github/workflows/release.yml
<ul><li>Added <code>permissions</code> for <code>id-token</code> and
<code>contents</code><br> <li> Introduced AWS OIDC credentials
configuration step<br> <li> Removed manual AWS_ACCESS_KEY_ID and
AWS_SECRET_ACCESS_KEY env</ul>
</details>
</td>
<td><a
href="https://github.com/openobserve/openobserve/pull/7729/files#diff-87db21a973eed4fef5f32b267aa60fcee5cbdf03c67fafdc2a9b553bb0b15f34">+11/-5</a>
</td>
</tr>
</table></td></tr></tr></tbody></table>
</details>
___