ksobrenat32 opened a new pull request, #35911: URL: https://github.com/apache/beam/pull/35911
This pull request introduces automation for managing and rotating Google Cloud service account keys using GitHub Actions. It adds a new workflow to handle key rotation, updates the documentation to reflect this automation, and makes a minor change to the `keys.yaml` configuration. These changes help ensure that service account keys are kept up-to-date and that the management process is streamlined and well-documented. **Automation and Workflow Integration:** * Added a new GitHub Actions workflow (`.github/workflows/beam_Infrastructure_ServiceAccountKeys.yml`) that automatically manages, rotates, and stores GCP service account keys using the `keys.py` script. The workflow is triggered on schedule, on manual dispatch, and when `infra/keys/keys.yaml` is updated. **Documentation Updates:** * Updated `infra/keys/README.md` to describe the new automation process, including details about the workflow triggers and how the script is executed via GitHub Actions. * Corrected a documentation example to use the correct script name (`keys.py` instead of `main.py`) for retrieving a service account key. **Configuration Changes:** * Set the `service_accounts` list in `infra/keys/keys.yaml` to be empty (`[]`), clarifying the initial configuration state. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
