Commit a17a87f1 authored by Pierre Smeyers's avatar Pierre Smeyers
Browse files

fix: replace here-string with pipe 

This change improves script portability (on Alpine shell for instance that doesn't support here-string)
parent 09bdf677

templates/gitlab-ci-aws.yml

+2 −2
Original line number Diff line number Diff line
@@ -482,12 +482,12 @@ stages: 
      log_info "Obtaining temporary credentials with OpenID connect..."

      # see: https://docs.gitlab.com/ci/cloud_services/aws/

      # shellcheck disable=SC2046,SC2183

      read -r AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY AWS_SESSION_TOKEN <<< $(aws sts assume-role-with-web-identity \

      aws sts assume-role-with-web-identity \

        --role-arn "$oidc_role_arn" \

        --role-session-name "GitLabRunner-${CI_PROJECT_ID}-${CI_PIPELINE_ID}" \

        --web-identity-token "${AWS_JWT:-$CI_JOB_JWT_V2}" \

        --query 'Credentials.[AccessKeyId,SecretAccessKey,SessionToken]' \

        --output text)

        --output text | read -r AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY AWS_SESSION_TOKEN

      export AWS_ACCESS_KEY_ID

      export AWS_SECRET_ACCESS_KEY

      export AWS_SESSION_TOKEN