diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 46d0108e..709fb5f3 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -90,14 +90,6 @@ jobs: project_id: '${{ vars.PROJECT_ID }}' workload_identity_provider: '${{ vars.WIF_PROVIDER_NAME }}' - - uses: 'google-github-actions/setup-gcloud@v2' - with: - version: '>= 363.0.0' - - - name: 'gcloud' - run: |- - gcloud secrets versions access "latest" --secret "${{ vars.SECRET_NAME }}" - - id: 'oauth-federated-token' name: 'oauth-federated-token' run: |- @@ -107,6 +99,14 @@ jobs: --fail \ --header "Authorization: Bearer ${{ steps.auth-default.outputs.auth_token }}" + - uses: 'google-github-actions/setup-gcloud@v2' + with: + version: '>= 363.0.0' + + - name: 'gcloud' + run: |- + gcloud secrets versions access "latest" --secret "${{ vars.SECRET_NAME }}" + # # Workload Identity Federation through a Service Account @@ -243,15 +243,6 @@ jobs: id_token_audience: 'https://secretmanager.googleapis.com/' id_token_include_email: true - - id: 'auth-sa-retries' - name: 'auth-sa-retries' - uses: './' - with: - retries: '2' - backoff: '200' - backoff_limit: '1000' - credentials_json: '${{ secrets.SERVICE_ACCOUNT_KEY_JSON }}' - # # This test ensures that the GOOGLE_APPLICATION_CREDENTIALS environment # variable is shared with the container and that the path of the file is on diff --git a/README.md b/README.md index 3ccdac4c..896be978 100644 --- a/README.md +++ b/README.md @@ -208,24 +208,6 @@ generate any tokens. will contain "email" and "email_verified" claims. This is only valid when "token_format" is "id_token". The default value is false. -### Inputs: Retry options - -The following inputs are for controlling retry behavior. By default, this GitHub -Action will retry API calls in an attempt to reduce transient failures. You can -control and disable the retry behavior with these inputs. - -- `retries`: (Optional) Number of times to retry a failed authentication - attempt. This is useful for automated pipelines that may execute before IAM - permissions are fully propogated or intermittent connectivity failures. The - default value is "3". - -- `backoff`: (Optional) Delay time before trying another authentication - attempt. This is implemented using a fibonacci backoff method (e.g. - 1-1-2-3-5). This value defaults to 250 milliseconds. - -- `backoff_limit`: (Optional) Limits the retry backoff to the specified value. - The default value is no limit. - ### Inputs: Miscellaneous The following inputs are for controlling the behavior of this GitHub Actions,