diff --git a/.github/workflows/publish-techdocs.yml b/.github/workflows/publish-techdocs.yml index 061dd70..d20ad24 100644 --- a/.github/workflows/publish-techdocs.yml +++ b/.github/workflows/publish-techdocs.yml @@ -11,3 +11,4 @@ on: jobs: publish: uses: geolonia/.github/.github/workflows/reusable-backstage-techdocs.yml@v1 + secrets: inherit diff --git a/docs/workflows.md b/docs/workflows.md index 13dc413..9862e22 100644 --- a/docs/workflows.md +++ b/docs/workflows.md @@ -25,9 +25,9 @@ on their own schedule. - Runs on `main` when `docs/**` or `mkdocs.yml` changes, or manually via `workflow_dispatch`. - Delegates to `reusable-backstage-techdocs.yml@v1` with safe defaults for AWS region, environment, and tool versions. -- Inherits org-level `TECHDOCS_AWS_ACCOUNT_ID` by default; set a repo secret - `AWS_ACCOUNT_ID` to override per-repo; role/bucket overrides can be passed via - vars or workflow inputs. +- Uses `TECHDOCS_AWS_ACCOUNT_ID` of `geolonia/.github` repository secret by default; + optional inputs allow setting a repo secret `AWS_ACCOUNT_ID` to override on a + per-repo basis. Example minimal usage after selecting the template: @@ -39,9 +39,8 @@ jobs: # with: # environment: production # aws_region: ap-northeast-1 - secrets: - inherit: true - # AWS_ACCOUNT_ID: ${{ secrets.TECHDOCS_AWS_ACCOUNT_ID }} + # secrets: + # AWS_ACCOUNT_ID: ${{ secrets.TECHDOCS_AWS_ACCOUNT_ID }} ``` ## Release on Tag (`release-auto-on-tag.yml`) @@ -58,7 +57,6 @@ Example minimal usage: jobs: publish: uses: geolonia/.github/.github/workflows/reusable-release-auto-on-tag.yml@v1 - secrets: inherit ``` ## Updating templates diff --git a/workflow-templates/publish-techdocs.yml b/workflow-templates/publish-techdocs.yml index 862395d..b1638f8 100644 --- a/workflow-templates/publish-techdocs.yml +++ b/workflow-templates/publish-techdocs.yml @@ -11,11 +11,10 @@ on: jobs: publish: uses: geolonia/.github/.github/workflows/reusable-backstage-techdocs.yml@v1 + secrets: inherit + # optional inputs can be specified here to override defaults # with: # environment: production # aws_region: ap-northeast-1 # techdocs_bucket: ${{ vars.TECHDOCS_BUCKET }} # techdocs_entity: ${{ vars.TECHDOCS_ENTITY }} - - # secrets: - # AWS_ACCOUNT_ID: ${{ secrets.TECHDOCS_AWS_ACCOUNT_ID }}