Skip to content

Commit 400da5c

Browse files
huydhnatalman
andauthored
[oidc] switch text wheels to oidc (#2220) (#2226)
* [oidc] switch text wheels to oidc * Grant id-token write permission * Update build-wheels-m1.yml * Update build-wheels-macos.yml * Update build-wheels-windows.yml --------- Co-authored-by: Andrey Talman <[email protected]>
1 parent 02a5901 commit 400da5c

File tree

4 files changed

+16
-18
lines changed

4 files changed

+16
-18
lines changed

.github/workflows/build-wheels-linux.yml

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,10 @@ on:
1313
- v[0-9]+.[0-9]+.[0-9]+-rc[0-9]+
1414
workflow_dispatch:
1515

16+
permissions:
17+
id-token: write
18+
contents: read
19+
1620
jobs:
1721
generate-matrix:
1822
uses: pytorch/test-infra/.github/workflows/generate_binary_build_matrix.yml@release/2.2
@@ -46,9 +50,4 @@ jobs:
4650
post-script: ${{ matrix.post-script }}
4751
package-name: ${{ matrix.package-name }}
4852
smoke-test-script: ${{ matrix.smoke-test-script }}
49-
# Using "development" as trigger event so these binaries are not uploaded
50-
# to official channels yet
5153
trigger-event: ${{ github.event_name }}
52-
secrets:
53-
AWS_PYTORCH_UPLOADER_ACCESS_KEY_ID: ${{ secrets.AWS_PYTORCH_UPLOADER_ACCESS_KEY_ID }}
54-
AWS_PYTORCH_UPLOADER_SECRET_ACCESS_KEY: ${{ secrets.AWS_PYTORCH_UPLOADER_SECRET_ACCESS_KEY }}

.github/workflows/build-wheels-m1.yml

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,10 @@ on:
1313
- v[0-9]+.[0-9]+.[0-9]+-rc[0-9]+
1414
workflow_dispatch:
1515

16+
permissions:
17+
id-token: write
18+
contents: read
19+
1620
jobs:
1721
generate-matrix:
1822
uses: pytorch/test-infra/.github/workflows/generate_binary_build_matrix.yml@release/2.2
@@ -45,9 +49,4 @@ jobs:
4549
package-name: ${{ matrix.package-name }}
4650
smoke-test-script: ${{ matrix.smoke-test-script }}
4751
runner-type: macos-m1-12
48-
# Using "development" as trigger event so these binaries are not uploaded
49-
# to official channels yet
5052
trigger-event: ${{ github.event_name }}
51-
secrets:
52-
AWS_PYTORCH_UPLOADER_ACCESS_KEY_ID: ${{ secrets.AWS_PYTORCH_UPLOADER_ACCESS_KEY_ID }}
53-
AWS_PYTORCH_UPLOADER_SECRET_ACCESS_KEY: ${{ secrets.AWS_PYTORCH_UPLOADER_SECRET_ACCESS_KEY }}

.github/workflows/build-wheels-macos.yml

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,10 @@ on:
1313
- v[0-9]+.[0-9]+.[0-9]+-rc[0-9]+
1414
workflow_dispatch:
1515

16+
permissions:
17+
id-token: write
18+
contents: read
19+
1620
jobs:
1721
generate-matrix:
1822
uses: pytorch/test-infra/.github/workflows/generate_binary_build_matrix.yml@release/2.2
@@ -45,9 +49,4 @@ jobs:
4549
package-name: ${{ matrix.package-name }}
4650
smoke-test-script: ${{ matrix.smoke-test-script }}
4751
runner-type: macos-12
48-
# Using "development" as trigger event so these binaries are not uploaded
49-
# to official channels yet
5052
trigger-event: ${{ github.event_name }}
51-
secrets:
52-
AWS_PYTORCH_UPLOADER_ACCESS_KEY_ID: ${{ secrets.AWS_PYTORCH_UPLOADER_ACCESS_KEY_ID }}
53-
AWS_PYTORCH_UPLOADER_SECRET_ACCESS_KEY: ${{ secrets.AWS_PYTORCH_UPLOADER_SECRET_ACCESS_KEY }}

.github/workflows/build-wheels-windows.yml

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,10 @@ on:
1313
- v[0-9]+.[0-9]+.[0-9]+-rc[0-9]+
1414
workflow_dispatch:
1515

16+
permissions:
17+
id-token: write
18+
contents: read
19+
1620
jobs:
1721
generate-matrix:
1822
uses: pytorch/test-infra/.github/workflows/generate_binary_build_matrix.yml@release/2.2
@@ -48,6 +52,3 @@ jobs:
4852
package-name: ${{ matrix.package-name }}
4953
smoke-test-script: ${{ matrix.smoke-test-script }}
5054
trigger-event: ${{ github.event_name }}
51-
secrets:
52-
AWS_PYTORCH_UPLOADER_ACCESS_KEY_ID: ${{ secrets.AWS_PYTORCH_UPLOADER_ACCESS_KEY_ID }}
53-
AWS_PYTORCH_UPLOADER_SECRET_ACCESS_KEY: ${{ secrets.AWS_PYTORCH_UPLOADER_SECRET_ACCESS_KEY }}

0 commit comments

Comments
 (0)