chore(ci): use TPS for temporary hcloud tokens

Co-authored-by: Julian Tölle <[email protected]>
hetznercloud · May 22, 2023 · 8c55f5e · 8c55f5e
1 parent 1e8c751
commit 8c55f5e
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 18 deletions.
diff --git a/.ci/delete-token.sh b/.ci/delete-token.sh
diff --git a/.ci/get-token.sh b/.ci/get-token.sh
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -27,6 +27,11 @@ jobs:
 
   molecule:
     name: Molecule
+
+    permissions:
+      # Required for hetznercloud/tps-action
+      id-token: write
+
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -40,11 +45,13 @@ jobs:
       - name: Install ansible and molecule
         run: pip3 install ansible molecule-hetznercloud
 
+      - uses: hetznercloud/tps-action@main
+        with:
+          token: ${{ secrets.HCLOUD_TOKEN }}
+
       - name: Run molecule
         run: |
-          export HCLOUD_TOKEN=$(./.ci/get-token.sh)
           molecule test
-          ./.ci/delete-token.sh ${HCLOUD_TOKEN}
         env:
           TTS_TOKEN: ${{ secrets.TTS_TOKEN }}
           PY_COLORS: '1'