Use fastlane API key for build

appditto · Nov 23, 2021 · 96ffb62 · 96ffb62
1 parent e495197
commit 96ffb62
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 7 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -101,7 +101,9 @@ jobs:
           MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }}
           TEMP_KEYCHAIN_NAME: ${{ secrets.TEMP_KEYCHAIN_NAME }}
           TEMP_KEYCHAIN_PASSWORD: ${{ secrets.TEMP_KEYCHAIN_PASSWORD }}
-          FASTLANE_SESSION: ${{ secrets.FASTLANE_SESSION }}  
+          API_KEY_ID: ${{ secrets.FASTLANE_API_KEY_ID }}
+          API_KEY_ISSUER: ${{ secrets.FASTLANE_API_KEY_ISSUER }}
+          API_KEY_FILEPATH: ${{ secrets.FASTLANE_API_KEY_FILEPATH }}
           GEM_HOME: ~/.gems
         run: |
           /usr/local/bin/fastlane build_ios

diff --git a/ios/fastlane/Fastfile b/ios/fastlane/Fastfile
@@ -40,24 +40,34 @@ platform :ios do
       keychain_name = ENV['TEMP_KEYCHAIN_NAME'] || TEMP_KEYCHAIN_NAME_DEFAULT
       keychain_password = ENV['TEMP_KEYCHAIN_PASSWORD'] || TEMP_KEYCHAN_PASSWORD_DEFAULT
       ensure_temp_keychain(keychain_name, keychain_password)
+      api_key = app_store_connect_api_key(
+        key_id: ENV['API_KEY_ID'],
+        issuer_id: ENV['API_KEY_ISSUER'],
+        key_filepath: ENV['API_KEY_FILEPATH'],
+        duration: 1200,
+        in_house: false
+      )      
       match(
         app_identifier: CredentialsManager::AppfileConfig.try_fetch_value(:app_identifier),
         type: "appstore",
         keychain_name: keychain_name,
         keychain_password: keychain_password,
         readonly: false,
-        skip_provisioning_profiles: true
+        skip_provisioning_profiles: true,
+        api_key: api_key
       )
       cert(
         keychain_path: "~/Library/Keychains/#{keychain_name}-db",
-        keychain_password: keychain_password        
+        keychain_password: keychain_password,
+        api_key: api_key
       )
       sigh(
         app_identifier: CredentialsManager::AppfileConfig.try_fetch_value(:app_identifier),
         readonly: false,
         cert_id: lane_context[SharedValues::CERT_CERTIFICATE_ID],
         provisioning_name: ENV['SIGH_PROVISIONING_PROFILE_NAME'],
-        ignore_profiles_with_different_name: true
+        ignore_profiles_with_different_name: true,
+        api_key: api_key
       )
       disable_automatic_code_signing(
         path: "./Runner.xcodeproj",
@@ -96,9 +106,11 @@ platform :ios do
   desc "Upload iOS app to app store"
   lane :deploy_ios do |options|
     api_key = app_store_connect_api_key(
-      key_id:  ENV['FASTLANE_API_KEY_ID'],
-      issuer_id: ENV['FASTLANE_API_KEY_ISSUER'],
-      key_content: ENV['FASTLANE_API_KEY']
+      key_id: ENV['API_KEY_ID'],
+      issuer_id: ENV['API_KEY_ISSUER'],
+      key_filepath: ENV['API_KEY_FILEPATH'],
+      duration: 1200,
+      in_house: false
     )
     if options[:testflight]
       upload_to_testflight(