Switch secrets to vars where appropriate (#20)

Author: sethvargo

workflows/create-cloud-deploy-release/cloud-deploy-to-cloud-run.yml

@@ -111,8 +111,8 @@ jobs:
         id: 'auth'
         uses: 'google-github-actions/auth@v1'
         with:
-          workload_identity_provider: '${{ secrets.WIF_PROVIDER }}' # e.g. - projects/123456789/locations/global/workloadIdentityPools/my-pool/providers/my-provider
-          service_account: '${{ secrets.WIF_SERVICE_ACCOUNT }}' # e.g. - [email protected]
+          workload_identity_provider: '${{ vars.WIF_PROVIDER }}' # e.g. - projects/123456789/locations/global/workloadIdentityPools/my-pool/providers/my-provider
+          service_account: '${{ vars.WIF_SERVICE_ACCOUNT }}' # e.g. - [email protected]
 
       - name: 'Set up Cloud SDK'
         uses: 'google-github-actions/setup-gcloud@v1'

workflows/deploy-cloudrun/cloudrun-buildpacks.yml

@@ -61,7 +61,7 @@ env:
   REPOSITORY: YOUR_REPOSITORY_NAME # TODO: update Artifact Registry repository name
   SERVICE: YOUR_SERVICE_NAME # TODO: update Cloud Run service name
   REGION: YOUR_SERVICE_REGION # TODO: update Cloud Run service region
-  SOURCE_DIRECTORY: YOUR_SOURCE_DIRECTORY #TODO: update source code directory 
+  SOURCE_DIRECTORY: YOUR_SOURCE_DIRECTORY #TODO: update source code directory
 
 jobs:
   deploy:
@@ -80,8 +80,8 @@ jobs:
         uses: 'google-github-actions/auth@v0'
         with:
           token_format: 'access_token'
-          workload_identity_provider: '${{ secrets.WIF_PROVIDER }}' # e.g. - projects/123456789/locations/global/workloadIdentityPools/my-pool/providers/my-provider
-          service_account: '${{ secrets.WIF_SERVICE_ACCOUNT }}' # e.g. - [email protected]
+          workload_identity_provider: '${{ vars.WIF_PROVIDER }}' # e.g. - projects/123456789/locations/global/workloadIdentityPools/my-pool/providers/my-provider
+          service_account: '${{ vars.WIF_SERVICE_ACCOUNT }}' # e.g. - [email protected]
 
       # NOTE: Alternative option - authentication via credentials json
       # - name: Google Auth
@@ -100,7 +100,7 @@ jobs:
           username: 'oauth2accesstoken'
           password: '${{ steps.auth.outputs.access_token }}'
           registry: '${{ env.GAR_LOCATION }}-docker.pkg.dev'
-          
+
       # NOTE: Alternative option - authentication via credentials json
       # - name: Docker Auth
       # id: docker-auth
@@ -110,7 +110,7 @@ jobs:
       #   username: _json_key
       #   password: ${{ secrets.GCP_CREDENTIALS }}
 
-      # BEGIN - Pack download, build and publish 
+      # BEGIN - Pack download, build and publish
 
       # Build and publish image to Artifact Registry
       - name: Build and Publish with Buildpacks

workflows/deploy-cloudrun/cloudrun-declarative.yml

@@ -76,8 +76,8 @@ jobs:
         uses: 'google-github-actions/auth@v0'
         with:
           token_format: 'access_token'
-          workload_identity_provider: '${{ secrets.WIF_PROVIDER }}' # e.g. - projects/123456789/locations/global/workloadIdentityPools/my-pool/providers/my-provider
-          service_account: '${{ secrets.WIF_SERVICE_ACCOUNT }}' # e.g. - [email protected]
+          workload_identity_provider: '${{ vars.WIF_PROVIDER }}' # e.g. - projects/123456789/locations/global/workloadIdentityPools/my-pool/providers/my-provider
+          service_account: '${{ vars.WIF_SERVICE_ACCOUNT }}' # e.g. - [email protected]
 
       # NOTE: Alternative option - authentication via credentials json
       # - name: Google Auth
@@ -106,7 +106,7 @@ jobs:
 
       # Create Cloud Run YAML Service specification from template
       # envsubst is replacing template variables and creating a YAML Service specification with the new image tag
-      - name: Create Service declearation   
+      - name: Create Service declearation
         run: |-
           export IMAGE="${{ env.GAR_LOCATION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/${{ env.SERVICE }}:${{ github.sha }}"
           export SERVICE="${{ env.SERVICE }}"

workflows/deploy-cloudrun/cloudrun-docker.yml

@@ -76,8 +76,8 @@ jobs:
         uses: 'google-github-actions/auth@v0'
         with:
           token_format: 'access_token'
-          workload_identity_provider: '${{ secrets.WIF_PROVIDER }}' # e.g. - projects/123456789/locations/global/workloadIdentityPools/my-pool/providers/my-provider
-          service_account: '${{ secrets.WIF_SERVICE_ACCOUNT }}' # e.g. - [email protected]
+          workload_identity_provider: '${{ vars.WIF_PROVIDER }}' # e.g. - projects/123456789/locations/global/workloadIdentityPools/my-pool/providers/my-provider
+          service_account: '${{ vars.WIF_SERVICE_ACCOUNT }}' # e.g. - [email protected]
 
       # NOTE: Alternative option - authentication via credentials json
       # - name: Google Auth
@@ -97,7 +97,7 @@ jobs:
           username: 'oauth2accesstoken'
           password: '${{ steps.auth.outputs.access_token }}'
           registry: '${{ env.GAR_LOCATION }}-docker.pkg.dev'
-          
+
       # NOTE: Alternative option - authentication via credentials json
       # - name: Docker Auth
       # id: docker-auth

workflows/deploy-cloudrun/cloudrun-source.yml

@@ -72,8 +72,8 @@ jobs:
         id: auth
         uses: 'google-github-actions/auth@v0'
         with:
-          workload_identity_provider: '${{ secrets.WIF_PROVIDER }}' # e.g. - projects/123456789/locations/global/workloadIdentityPools/my-pool/providers/my-provider
-          service_account: '${{ secrets.WIF_SERVICE_ACCOUNT }}' # e.g. - [email protected]
+          workload_identity_provider: '${{ vars.WIF_PROVIDER }}' # e.g. - projects/123456789/locations/global/workloadIdentityPools/my-pool/providers/my-provider
+          service_account: '${{ vars.WIF_SERVICE_ACCOUNT }}' # e.g. - [email protected]
 
       # NOTE: Alternative option - authentication via credentials json
       # - name: Google Auth