Inject AWS_ACCOUNT for e2e tests in cicd

communitiesuk · Dec 3, 2024 · 3b9847d · 3b9847d
1 parent 84f9efe
commit 3b9847d
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/.github/workflows/copilot_deploy.yml b/.github/workflows/copilot_deploy.yml
@@ -66,6 +66,8 @@ jobs:
 
   post_dev_deploy_tests:
     needs: dev_deploy
+    permissions:
+      id-token: write # This is required for requesting the JWT
     concurrency:
       group: 'fsd-preaward-dev'
       cancel-in-progress: false
@@ -74,6 +76,7 @@ jobs:
       FSD_GH_APP_KEY: ${{ secrets.FSD_GH_APP_KEY }}
       FS_BASIC_AUTH_USERNAME: ${{ secrets.FS_BASIC_AUTH_USERNAME }}
       FS_BASIC_AUTH_PASSWORD: ${{ secrets.FS_BASIC_AUTH_PASSWORD }}
+      AWS_ACCOUNT: ${{ secrets.AWS_ACCOUNT }}
     uses: communitiesuk/funding-service-design-workflows/.github/workflows/post-deploy.yml@main
     with:
       run_performance_tests: ${{ inputs.run_performance_tests || true }}
@@ -96,6 +99,8 @@ jobs:
 
   post_test_deploy_tests:
     needs: test_deploy
+    permissions:
+      id-token: write # This is required for requesting the JWT
     if: ${{ always() && contains(fromJSON(needs.setup.outputs.jobs_to_run), 'test') && (! contains(needs.*.result, 'failure') ) && (! contains(needs.*.result, 'cancelled') )}}
     concurrency:
       group: 'fsd-preaward-test'
@@ -105,6 +110,7 @@ jobs:
       FSD_GH_APP_KEY: ${{ secrets.FSD_GH_APP_KEY }}
       FS_BASIC_AUTH_USERNAME: ${{ secrets.FS_BASIC_AUTH_USERNAME }}
       FS_BASIC_AUTH_PASSWORD: ${{ secrets.FS_BASIC_AUTH_PASSWORD }}
+      AWS_ACCOUNT: ${{ secrets.AWS_ACCOUNT }}
     uses: communitiesuk/funding-service-design-workflows/.github/workflows/post-deploy.yml@main
     with:
       run_performance_tests: ${{ inputs.run_performance_tests || false }}
@@ -127,6 +133,8 @@ jobs:
 
   post_uat_deploy_tests:
     needs: uat_deploy
+    permissions:
+      id-token: write # This is required for requesting the JWT
     if: ${{ always() && contains(fromJSON(needs.setup.outputs.jobs_to_run), 'uat') && (! contains(needs.*.result, 'failure') ) && (! contains(needs.*.result, 'cancelled') )}}
     concurrency:
       group: 'fsd-preaward-uat'
@@ -136,6 +144,7 @@ jobs:
       FSD_GH_APP_KEY: ${{ secrets.FSD_GH_APP_KEY }}
       FS_BASIC_AUTH_USERNAME: ${{ secrets.FS_BASIC_AUTH_USERNAME }}
       FS_BASIC_AUTH_PASSWORD: ${{ secrets.FS_BASIC_AUTH_PASSWORD }}
+      AWS_ACCOUNT: ${{ secrets.AWS_ACCOUNT }}
     uses: communitiesuk/funding-service-design-workflows/.github/workflows/post-deploy.yml@main
     with:
       run_performance_tests: ${{ inputs.run_performance_tests || false }}

diff --git a/copilot/fsd-assessment-store/addons/assessment-import-queue.yml b/copilot/fsd-assessment-store/addons/assessment-import-queue.yml
@@ -26,5 +26,5 @@ Resources:
 
 Outputs:
   AssessmentImportQueuePolicyArn:
-    Description: "The ARN of the ManagedPolicy to attach to the task role."
+    Description: "The ARN of the ManagedPolicy to attach to the task role."pw
     Value: !Ref AssessmentImportQueuePolicy