From e3a0ec03f9876d4fe99f36cb7285cc6d901804ce Mon Sep 17 00:00:00 2001
From: test-cli-e2e-aws <test-cli-e2e-aws@srv.plural.sh>
Date: Thu, 5 Dec 2024 15:17:27 +0100
Subject: [PATCH] tune aws-nuke

---
 .github/workflows/e2e.yaml        | 6 ++++--
 test/plural/lib/aws-teardown.yaml | 2 +-
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/e2e.yaml b/.github/workflows/e2e.yaml
index ea5dd5e1..55b586b9 100644
--- a/.github/workflows/e2e.yaml
+++ b/.github/workflows/e2e.yaml
@@ -43,6 +43,10 @@ jobs:
           aws-region: eu-west-1
           role-to-assume: arn:aws:iam::911167907168:role/GitHubAction-AssumeRoleWithAction
           role-session-name: GitHub_to_AWS_via_FederatedOIDC
+      - uses: mcblair/configure-aws-profile-action@v1.0.0
+        with:
+          role-arn: arn:aws:iam::911167907168:role/GitHubAction-AssumeRoleWithAction
+          profile-name: aws-nuke
       - name: Store test timestamp
         run: echo "TIMESTAMP=$(date +'%s')" >> $GITHUB_ENV
       - name: Setup test repository SSH key
@@ -97,8 +101,6 @@ jobs:
           VENOM_VAR_email: ${{ secrets.E2E_AWS_SA_EMAIL }}
           VENOM_VAR_token: ${{ secrets.E2E_AWS_SA_TOKEN }}
           TF_VAR_deletion_protection: false
-          AWS_ACCESS_KEY_ID: ${{ secrets.E2E_AWS_ACCESS_KEY_ID }}
-          AWS_SECRET_ACCESS_KEY: ${{ secrets.E2E_AWS_SECRET_ACCESS_KEY }}
         run: venom run -vv --html-report --format=json --output-dir ${{ env.TESTOUT_PATH }} test/plural
       - name: Post status on Slack
         id: slack_message
diff --git a/test/plural/lib/aws-teardown.yaml b/test/plural/lib/aws-teardown.yaml
index 3db277c5..2468f6a7 100644
--- a/test/plural/lib/aws-teardown.yaml
+++ b/test/plural/lib/aws-teardown.yaml
@@ -2,7 +2,7 @@ executor: aws-teardown
 input:
   resourceGroup: ''
 steps:
-  - script: aws-nuke run --config ../../nuke-config.yml --force --access-key-id $AWS_ACCESS_KEY_ID --secret-access-key $AWS_SECRET_ACCESS_KEY --no-dry-run --no-alias-check --max-wait-retries 10
+  - script: aws-nuke run --config ../../nuke-config.yml --force --profile aws-nuke --no-dry-run --no-alias-check --max-wait-retries 10
     retry: 5
     retry_if:
       - result.code ShouldNotEqual 0