[Spike] Use crc-cloud in CI environment

[lmilbaum]

No description provided.

[tsebastiani]

If you need a reference https://github.com/redhat-chaos/krkn/blob/main/.github/workflows/build.yml (still using the bash version suitable for your region)

[lmilbaum]

I am implementing an ansible playbook which I could use both in dev and in ci. My current challenge is how to distribute the access keys without exposing them in the log files. @adrianriobo any ideas?

[adrianriobo]

Are those credentials shown anywhere on the log of the container execution? They should not be showed there at all

[lmilbaum]

Are those credentials shown anywhere on the log of the container execution? They should not be showed there at all

My challenge is with sharing them with the running container

[adrianriobo]

Making use of gh secrets directly avoid the issue on showing the credentials.

Also this approach has been switched to make use of oidc integration see #44 . Using that approach required credentials are exported as ENVs on the runner, and those credentials are set as secrets so even using them along the github action they will not be shown

[lmilbaum]

@adrianriobo What else is needed to move this issue to Done?

[adrianriobo]

I would like to have a green pass on platform-engineering-org/poc#93 which means I would like to conclude and add changes if needed around #45.

Although this is a spike and not a issue or task may the spike can be closed as we now know for sure it works and track these expectations on platform-engineering-org/poc#93 WDYT?

[lmilbaum]

@adrianriobo There is a green pass. I would prefer to merge the PR and close this ticket.

[adrianriobo]

yeah I guess as spike we came to a conclusion so I am fine with it 👍