secrets are needed for test only

Author: rodolfoIOET

.github/workflows/time-tracker-ui-cd-stage.yml

@@ -46,6 +46,18 @@ jobs:
       with:
         ssh-private-key: ${{ secrets.INFRA_TERRAFORM_MODULES_SSH_PRIV_KEY }}
 
+    - name: append secret to secret.auto.tfvars
+      working-directory: ./${{ env.WORKING_DIR }}
+      run: |
+        ./append_secret.py CHROME_BIN /opt/google/chrome/google-chrome
+        ./append_secret.py AUTHORITY "${{ secrets.AUTHORITY }}"
+        ./append_secret.py CLIENT_ID "${{ secrets.CLIENT_ID }}"
+        ./append_secret.py SCOPES "${{ secrets.SCOPES }}"
+        ./append_secret.py STACK_EXCHANGE_ID "${{ secrets.STACK_EXCHANGE_ID }}"
+        ./append_secret.py STACK_EXCHANGE_ACCESS_TOKEN "${{ secrets.STACK_EXCHANGE_ACCESS_TOKEN }}"
+        ./append_secret.py AZURE_APP_CONFIGURATION_CONNECTION_STRING "${{ secrets.AZURE_APP_CONFIGURATION_CONNECTION_STRING }}"
+
+
     - name: Terraform Init
       working-directory: ${{ env.WORKING_DIR }}
       run: terraform init

.github/workflows/time-tracker-ui-ci.yml

@@ -33,6 +33,18 @@ jobs:
     - name: build docker
       run: make build
 
+    - name: Inject Secrets
+      env:
+        SCOPES: ${{ secrets.SCOPES }}
+        CLIENT_ID: ${{ secrets.CLIENT_ID }}
+        AUTHORITY: ${{ secrets.AUTHORITY }}
+        STACK_EXCHANGE_ID: ${{ secrets.STACK_EXCHANGE_ID }}
+        STACK_EXCHANGE_ACCESS_TOKEN: ${{ secrets.STACK_EXCHANGE_ACCESS_TOKEN }}
+        AZURE_APP_CONFIGURATION_CONNECTION_STRING: ${{ secrets.AZURE_APP_CONFIGURATION_CONNECTION_STRING }}
+      run: |
+        chmod +x ./scripts/populate-keys.sh
+        sh ./scripts/populate-keys.sh
+
     - name: append secret to secret.auto.tfvars
       working-directory: ./${{ env.WORKING_DIR }}
       run: |
@@ -71,7 +83,7 @@ jobs:
 
     - name: Terraform Plan Stage
       id: plan-stage
-      run: terraform plan -var-file=${{ env.TF_WORKSPACE }}.tfvars  -var image_tag=latest  -no-color
+      run: terraform plan -var-file=${{ env.TF_WORKSPACE }}.tfvars -var image_tag=latest -no-color
       continue-on-error: true
       working-directory: ./${{ env.WORKING_DIR }}
       env: