Skip to content

Commit 4efaa51

Browse files
authored
🧹 use owner role for wif binding test (#386)
1 parent 7ce78e7 commit 4efaa51

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

‎.github/workflows/test.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -102,7 +102,7 @@ jobs:
102102
TOKEN: ${{ secrets.WIF_API_TOKEN }}
103103
PR_REF: repo:mondoohq/terraform-provider-mondoo:pull_request
104104
run: |
105-
curl https://api.edge.mondoo.com/query -H "authorization: Bearer $TOKEN" -H "content-type: application/json" --data-raw $'{"operationName":"CreateWIFAuthBinding","variables":{"input":{"scopeMrn":"//captain.api.mondoo.app/organizations/relaxed-khayyam-961566","roles":["//iam.api.mondoo.app/roles/editor"],"issuerUri":"https://token.actions.githubusercontent.com","subject":"'"${PR_REF}"'","expiration":3600,"name":"pullrequest-test-wif","description":"pull request wif test"}},"query":"mutation CreateWIFAuthBinding($input: CreateWIFAuthBindingInput) { createWIFAuthBinding(input: $input) { binding { mrn __typename } config { universeDomain scopes type audience subjectTokenType issuerUri __typename } __typename }}"}'
105+
curl https://api.edge.mondoo.com/query -H "authorization: Bearer $TOKEN" -H "content-type: application/json" --data-raw $'{"operationName":"CreateWIFAuthBinding","variables":{"input":{"scopeMrn":"//captain.api.mondoo.app/organizations/relaxed-khayyam-961566","roles":["//iam.api.mondoo.app/roles/owner"],"issuerUri":"https://token.actions.githubusercontent.com","subject":"'"${PR_REF}"'","expiration":3600,"name":"pullrequest-test-wif","description":"pull request wif test"}},"query":"mutation CreateWIFAuthBinding($input: CreateWIFAuthBindingInput) { createWIFAuthBinding(input: $input) { binding { mrn __typename } config { universeDomain scopes type audience subjectTokenType issuerUri __typename } __typename }}"}'
106106
107107
- name: Create WIF binding for main branch
108108
if: github.ref == 'refs/heads/main'
@@ -111,7 +111,7 @@ jobs:
111111
TOKEN: ${{ secrets.WIF_API_TOKEN }}
112112
MAIN_REF: repo:mondoohq/terraform-provider-mondoo:ref:refs/heads/main
113113
run: |
114-
curl https://api.edge.mondoo.com/query -H "authorization: Bearer $TOKEN" -H "content-type: application/json" --data-raw $'{"operationName":"CreateWIFAuthBinding","variables":{"input":{"scopeMrn":"//captain.api.mondoo.app/organizations/relaxed-khayyam-961566","roles":["//iam.api.mondoo.app/roles/editor"],"issuerUri":"https://token.actions.githubusercontent.com","subject":"'"${MAIN_REF}"'","expiration":3600,"name":"main-branch-test-wif","description":"main branch wif test"}},"query":"mutation CreateWIFAuthBinding($input: CreateWIFAuthBindingInput) { createWIFAuthBinding(input: $input) { binding { mrn __typename } config { universeDomain scopes type audience subjectTokenType issuerUri __typename } __typename }}"}'
114+
curl https://api.edge.mondoo.com/query -H "authorization: Bearer $TOKEN" -H "content-type: application/json" --data-raw $'{"operationName":"CreateWIFAuthBinding","variables":{"input":{"scopeMrn":"//captain.api.mondoo.app/organizations/relaxed-khayyam-961566","roles":["//iam.api.mondoo.app/roles/owner"],"issuerUri":"https://token.actions.githubusercontent.com","subject":"'"${MAIN_REF}"'","expiration":3600,"name":"main-branch-test-wif","description":"main branch wif test"}},"query":"mutation CreateWIFAuthBinding($input: CreateWIFAuthBindingInput) { createWIFAuthBinding(input: $input) { binding { mrn __typename } config { universeDomain scopes type audience subjectTokenType issuerUri __typename } __typename }}"}'
115115
116116
- name: Create WIF binding for release
117117
continue-on-error: true # we will fail on duplicates and non-release refs
@@ -121,7 +121,7 @@ jobs:
121121
FULL_REF: repo:mondoohq/terraform-provider-mondoo:ref:${{ github.ref }}
122122
run: |
123123
echo "using REF: " $FULL_REF
124-
curl https://api.edge.mondoo.com/query -H "authorization: Bearer $TOKEN" -H "content-type: application/json" --data-raw $'{"operationName":"CreateWIFAuthBinding","variables":{"input":{"scopeMrn":"//captain.api.mondoo.app/organizations/relaxed-khayyam-961566","roles":["//iam.api.mondoo.app/roles/editor"],"issuerUri":"https://token.actions.githubusercontent.com","subject":"'"${FULL_REF}"'","expiration":3600,"name":"release-test-wif","description":"pre-release wif test"}},"query":"mutation CreateWIFAuthBinding($input: CreateWIFAuthBindingInput) { createWIFAuthBinding(input: $input) { binding { mrn __typename } config { universeDomain scopes type audience subjectTokenType issuerUri __typename } __typename }}"}'
124+
curl https://api.edge.mondoo.com/query -H "authorization: Bearer $TOKEN" -H "content-type: application/json" --data-raw $'{"operationName":"CreateWIFAuthBinding","variables":{"input":{"scopeMrn":"//captain.api.mondoo.app/organizations/relaxed-khayyam-961566","roles":["//iam.api.mondoo.app/roles/owner"],"issuerUri":"https://token.actions.githubusercontent.com","subject":"'"${FULL_REF}"'","expiration":3600,"name":"release-test-wif","description":"pre-release wif test"}},"query":"mutation CreateWIFAuthBinding($input: CreateWIFAuthBindingInput) { createWIFAuthBinding(input: $input) { binding { mrn __typename } config { universeDomain scopes type audience subjectTokenType issuerUri __typename } __typename }}"}'
125125
126126
- name: Run terraform using the WIF binding config
127127
run: |

0 commit comments

Comments
 (0)