-
Story
-
Resolution: Done
-
Undefined
-
None
-
None
-
None
-
2
-
False
-
-
False
-
Not Selected
-
rhel-container-tools
-
-
-
RUN 284
Update GitHub Actions YAML with OIDC permissions and AWS Auth Step Description: Modify the existing .github/workflows file to enable OpenID Connect (OIDC) authentication. This involves updating the job permissions and inserting the standard AWS authentication action to replace the legacy Cirrus logic.
Tasks:
- Locate the target job in the workflow YAML.
- Add the required permissions block to the job:
YAML
permissions:
id-token: write
contents: read - Insert the aws-actions/configure-aws-credentials step before any build commands.
- Configure the step to accept role-to-assume (we will use a variable reference here, e.g., ${{ secrets.AWS_ROLE_ARN }}{}).
Acceptance Criteria:
- [ ] Workflow syntax is valid and passes linting.
- [ ] The permissions block is correctly correctly positioned at the job level.
- [ ] The aws-actions/configure-aws-credentials step is present in the execution order.