feat: Reference the `goreleaser`, `renovate_bot`, and `semantic_release` environments. (!576) · Merge requests · GitLab.com / GitLab Infrastructure Team / common-ci-tasks · GitLab

Florian Forster requested to merge fforster/protected_environments into main Jun 06, 2024

What

feat(goreleaser): Reference the goreleaser environment.
feat(renovate-bot): Reference the renovate_bot environment.
feat(semantic-release): Reference the semantic_release environment.

Why

https://ops.gitlab.net/gitlab-com/gl-infra/terraform-modules/gitlab/project/-/merge_requests/11 adds common-ci-tasks secrets to Vault using the "read/write" policy. That means that we need to set VAULT_AUTH_ROLE to a different value for these jobs.

To achieve this, https://ops.gitlab.net/gitlab-com/gl-infra/terraform-modules/gitlab/project/-/merge_requests/14 adds a protected environment for each of the above mentioned jobs.

Issue: #15