Use service account from vault

elastic · May 9, 2022 · 645de6f · 645de6f
1 parent 38ce27d
commit 645de6f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.buildkite/scripts/steps/bazel_cache/bootstrap_mac.sh b/.buildkite/scripts/steps/bazel_cache/bootstrap_mac.sh
@@ -5,6 +5,10 @@ set -euo pipefail
 export BAZEL_CACHE_MODE=populate-local-gcs
 export DISABLE_BOOTSTRAP_VALIDATION=true
 
+retry 5 5 vault read -field=service_account_json secret/kibana-issues/dev/kibana-ci-bazel-remote-cache-local-dev > target/kibana-ci-bazel-remote-cache-local-dev.json
+GOOGLE_APPLICATION_CREDENTIALS=$(pwd)/target/kibana-ci-bazel-remote-cache-local-dev.json
+export GOOGLE_APPLICATION_CREDENTIALS
+
 # Clear out bazel cache between runs to make sure that any artifacts that don't exist in the cache are uploaded
 rm -rf ~/.bazel-cache