diff --git a/.github/workflows/build-docker-image.yml b/.github/workflows/build-docker-image.yml index 6e44aebe..046fa16b 100644 --- a/.github/workflows/build-docker-image.yml +++ b/.github/workflows/build-docker-image.yml @@ -14,6 +14,21 @@ jobs: - name: "Set up Docker Buildx 🏗" uses: docker/setup-buildx-action@v3 + + - name: "Retrieve secret from Vault 🗝" + uses: hashicorp/vault-action@v2 + with: + method: jwt + url: "https://quansight-vault-public-vault-b2379fa7.d415e30e.z1.hashicorp.cloud:8200" + namespace: "admin/quansight" + role: "repository-conda-incubator-conda-store-role" + secrets: | + kv/data/repository/conda-incubator/conda-store/shared_secrets DOCKER_QUANSIGHT_USERNAME | DOCKER_USERNAME; + kv/data/repository/conda-incubator/conda-store/shared_secrets DOCKER_QUANSIGHT_PASSWORD | DOCKER_PASSWORD; + kv/data/repository/conda-incubator/conda-store/shared_secrets QUAY_QUANSIGHT_USERNAME | QUAY_USERNAME; + kv/data/repository/conda-incubator/conda-store/shared_secrets QUAY_QUANSIGHT_PASSWORD | QUAY_PASSWORD; + + - name: "Build Docker image 🚀" uses: docker/build-push-action@v5 with: