From 3968305629e1d1f23a2638ea09de7ebe422deaa1 Mon Sep 17 00:00:00 2001 From: Josh Mock Date: Tue, 14 Jul 2020 14:28:12 -0500 Subject: [PATCH 1/2] Add ssh keys so new tags can be pushed to Github --- .ci/jobs/elastic+eui+npm-publish.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.ci/jobs/elastic+eui+npm-publish.yml b/.ci/jobs/elastic+eui+npm-publish.yml index 3bfd69aa694..f11600a0baa 100644 --- a/.ci/jobs/elastic+eui+npm-publish.yml +++ b/.ci/jobs/elastic+eui+npm-publish.yml @@ -34,6 +34,9 @@ npm install -g yarn yarn + # add ssh keys to ensure tags can push to Github + /usr/local/bin/ssh-add-from-vault elastic + npm run release -- --type=${version_type} --steps=test,build,version,tag set +x From 27ae6c795164b7bc39664aeaf1f70b0c374bbd65 Mon Sep 17 00:00:00 2001 From: Josh Mock Date: Tue, 14 Jul 2020 14:34:39 -0500 Subject: [PATCH 2/2] Need a vault token before we can pull secrets --- .ci/jobs/elastic+eui+npm-publish.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.ci/jobs/elastic+eui+npm-publish.yml b/.ci/jobs/elastic+eui+npm-publish.yml index f11600a0baa..b7587e5a4d8 100644 --- a/.ci/jobs/elastic+eui+npm-publish.yml +++ b/.ci/jobs/elastic+eui+npm-publish.yml @@ -34,15 +34,15 @@ npm install -g yarn yarn - # add ssh keys to ensure tags can push to Github - /usr/local/bin/ssh-add-from-vault elastic - npm run release -- --type=${version_type} --steps=test,build,version,tag set +x export VAULT_TOKEN=$(vault write -field=token auth/approle/login role_id="$VAULT_ROLE_ID" secret_id="$VAULT_SECRET_ID") + # add ssh keys to ensure tags can push to Github + /usr/local/bin/ssh-add-from-vault elastic + # write npm auth to .npmrc NPM_TOKEN=$(vault read -field=token secret/jenkins-ci/npmjs/elasticmachine) echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > ~/.npmrc