Skip to content

Commit

Permalink
Rotating travis secrets part 1 and 2 (#7521)
Browse files Browse the repository at this point in the history
* Switch travis variable name from DOCKER_SERVICE_PASS -> DOCKER_SERVICE_TOKEN for clarity
* Replace gcloud key
* Replace deploy key for travis to authenticate to github
  • Loading branch information
lbergelson authored Oct 27, 2021
1 parent 1766f30 commit 8230258
Show file tree
Hide file tree
Showing 4 changed files with 3 additions and 3 deletions.
4 changes: 2 additions & 2 deletions .travis.yml
Original file line number Diff line number Diff line change
Expand Up @@ -74,7 +74,7 @@ before_install:
fi;
- if [[ $TRAVIS_SECURE_ENV_VARS == true ]]; then
echo "Logging in to dockerhub";
docker login --username=$DOCKER_SERVICE_LOGIN --password=$DOCKER_SERVICE_PASS;
docker login --username=$DOCKER_SERVICE_LOGIN --password=$DOCKER_SERVICE_TOKEN;
fi
- REPORT_PATH=${TRAVIS_BRANCH}_${TRAVIS_JOB_NUMBER};
- if [[ $TRAVIS_SECURE_ENV_VARS == true && $TRAVIS_EVENT_TYPE != cron ]]; then
Expand All @@ -84,7 +84,7 @@ before_install:
if [[ ${TESTS_REQUIRE_GCLOUD} == true ]]; then
scripts/travis/install_and_authenticate_to_gcloud.sh;
fi;
openssl aes-256-cbc -K $encrypted_4823d58debd3_key -iv $encrypted_4823d58debd3_iv -in resources_for_CI/github_deploy_key.enc -out ~/.ssh/id_rsa -d;
openssl aes-256-cbc -K $encrypted_8ebb1ef83f64_key -iv $encrypted_8ebb1ef83f64_iv -in resources_for_CI/github_deploy_key.enc -out ~/.ssh/id_rsa -d;
chmod 600 ~/.ssh/id_rsa;
echo "Testing github authentication:";
ssh -T git@github.com;
Expand Down
Binary file modified resources_for_CI/github_deploy_key.enc
Binary file not shown.
Binary file modified resources_for_CI/servicekey.json.enc
Binary file not shown.
2 changes: 1 addition & 1 deletion scripts/travis/install_and_authenticate_to_gcloud.sh
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
# This is expected to be run from the travis root directory.

export BOTO_CONFIG=/dev/null; # see for more information https://github.com/broadinstitute/gatk/pull/3350
openssl aes-256-cbc -K $encrypted_703d76169d63_key -iv $encrypted_703d76169d63_iv -in resources_for_CI/servicekey.json.enc -out servicekey.json -d;
openssl aes-256-cbc -K $encrypted_c51214b7dd65_key -iv $encrypted_c51214b7dd65_iv -in resources_for_CI/servicekey.json.enc -out servicekey.json -d;
scripts/travis/install_gcloud.sh;
$GCLOUD_HOME/gcloud components update --quiet;
if [[ $TEST_TYPE == cloud ]]; then
Expand Down

0 comments on commit 8230258

Please sign in to comment.