Add GCS service account to night rally (elastic#349)

cbuescher · Dec 2, 2020 · dc50024 · dc50024
1 parent e4189ef
commit dc50024
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 0 deletions.
diff --git a/night_rally/fixtures/ansible/roles/rally-configure/tasks/main.yml b/night_rally/fixtures/ansible/roles/rally-configure/tasks/main.yml
@@ -6,3 +6,16 @@
   template:
     src: rally.ini.j2
     dest: "{{ rally_homedir }}/.rally/rally-{{ rally_environment }}.ini"
+
+- block:
+    - set_fact:
+        gcs_service_account_contents: "{{ lookup('hashi_vault', 'secret=/secret/rally/cloud/gcs-internal-rally-service-account:contents') }}"
+
+    - name: write gcs service account file
+      become: true
+      become_user: "jenkins"
+      copy:
+        content: "{{ gcs_service_account_contents }}"
+        dest: ~/.gcs-service-account.json
+  when: not local_setup | default("false") | bool
+
diff --git a/night_rally/fixtures/ansible/roles/rally-update/tasks/main.yml b/night_rally/fixtures/ansible/roles/rally-update/tasks/main.yml
@@ -11,6 +11,7 @@
   args:
     chdir: /var/lib/jenkins
   environment:
+    GOOGLE_APPLICATION_CREDENTIALS: /var/lib/jenkins/.gcs-service-account.json
     JAVA7_HOME: /var/lib/jenkins/.java/java7
     JAVA8_HOME: /var/lib/jenkins/.java/java8
     JAVA9_HOME: /var/lib/jenkins/.java/java9
@@ -31,6 +32,7 @@
   args:
     chdir: /var/lib/jenkins
   environment:
+    GOOGLE_APPLICATION_CREDENTIALS: /var/lib/jenkins/.gcs-service-account.json
     JAVA8_HOME: /usr/lib/jvm/java-8-openjdk-amd64
     JAVA11_HOME: /var/lib/jenkins/.java/openjdk11
     JAVA12_HOME: /var/lib/jenkins/.java/openjdk12