Rotate API Key for CI/CD #500
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Rotate API Key for CI/CD | |
| on: | |
| workflow_dispatch: | |
| schedule: | |
| - cron: '0 0 * * *' | |
| # All operations use provided PAT; disable default GITHUB_TOKEN access. | |
| permissions: {} | |
| jobs: | |
| rotate: | |
| name: Rotate API Key | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: rotate gcp keys | |
| uses: anekkanti/github-action-rotate-temporalcloud-apikey@v0.1.0 | |
| with: | |
| apikey: "${{ secrets.TEMPORAL_CLOUD_API_KEY }}" | |
| serviceAccountId: "${{ secrets.TEMPORAL_CLOUD_SERVICE_ACCOUNT_ID }}" | |
| apikeyNamePrefix: "${{ github.repository }}-ci" | |
| duration: 90 | |
| description: "Apikey used for CI/CD" | |
| deleteOldApikeys: true | |
| personalAccessToken: "${{ secrets.PERSONAL_ACCESS_TOKEN }}" | |
| repositories: ${{ github.repository }} | |
| secretName: "TEMPORAL_CLOUD_API_KEY" |