From 0fd7f0523aaaaa495b8114066fa16165347a8954 Mon Sep 17 00:00:00 2001
From: Moritz Sanft <58110325+msanft@users.noreply.github.com>
Date: Tue, 22 Oct 2024 11:55:45 +0200
Subject: [PATCH] ci: set secrets correctly

---
 .github/actions/e2e_test/action.yml | 10 ++++++++--
 .github/workflows/e2e-test.yml      |  2 ++
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/.github/actions/e2e_test/action.yml b/.github/actions/e2e_test/action.yml
index d246bc8f61..d9ed6d1e1f 100644
--- a/.github/actions/e2e_test/action.yml
+++ b/.github/actions/e2e_test/action.yml
@@ -93,6 +93,12 @@ inputs:
   encryptionSecret:
     description: "The secret to use for decrypting the artifact."
     required: true
+  openStackCloudsYaml:
+    description: "The contents of ~/.config/openstack/clouds.yaml"
+    required: true
+  stackitUat:
+    description: "The UAT for STACKIT"
+    required: true
 
 outputs:
   kubeconfig:
@@ -233,13 +239,13 @@ runs:
       if: inputs.cloudProvider == 'stackit'
       uses: ./.github/actions/login_openstack
       with:
-        clouds_yaml: ${{ secrets.STACKIT_IMAGE_UPLOAD_CLOUDS_YAML }}
+        clouds_yaml: ${{inputs.openStackCloudsYaml }}
 
     - name: Login to STACKIT
       if: inputs.cloudProvider == 'stackit'
       uses: ./.github/actions/login_stackit
       with:
-        serviceAccountToken: ${{ secrets.STACKIT_SERVICE_ACCOUNT_TOKEN }}
+        serviceAccountToken: ${{ inputs.stackitUat }}
 
     - name: Create prefix
       id: create-prefix
diff --git a/.github/workflows/e2e-test.yml b/.github/workflows/e2e-test.yml
index 5021c5cd26..1634050816 100644
--- a/.github/workflows/e2e-test.yml
+++ b/.github/workflows/e2e-test.yml
@@ -268,6 +268,8 @@ jobs:
           marketplaceImageVersion: ${{ inputs.marketplaceImageVersion }}
           force: ${{ inputs.force }}
           encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}
+          openStackCloudsYaml: ${{ secrets.STACKIT_IMAGE_UPLOAD_CLOUDS_YAML }}
+          stackitUat: ${{ secrets.STACKIT_SERVICE_ACCOUNT_TOKEN }}
 
       - name: Always terminate cluster
         if: always()