Files
ci-actions/spiffe-openbao-login/action.yml
T

17 lines
421 B
YAML

name: SPIFFE OpenBao Login
description: Exchange a JWT-SVID for a short-lived OpenBao token and revoke it in post
inputs:
bao-address:
default: https://bao.ad.ddupan.top:8200
role:
description: Exact OpenBao jwt-spire role
required: true
audience:
default: openbao
socket-path:
default: /run/spire/agent-sockets/spire-agent.sock
runs:
using: node20
main: dist/main.js
post: dist/post.js