vbem/configure-huawei-cloud-credentials
🌼 OIDC based Huawei Cloud STS credentials (Access Key ID / Secret Access Key / Security Token) configuration action
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| provider-urn | The OIDC provider URN in Huawei Cloud IAM v5. Required, in format of `iam::<account-id>:oidcProvider:<provider-name>`. | yes | — |
| agency-urn | The agency URN to assume in Huawei Cloud IAM v5. Required, in format of `iam::<account-id>:agency:<agency-name>`. | yes | — |
| audience | The audience for OIDC token. Default to `sts.huaweicloud.com`. | no | sts.huaweicloud.com |
| session-name | The session name for agency assuming. Default to `GitHubActions`. | no | GitHubActions |
| duration-seconds | The duration seconds for agency assuming. Must be between `900` (15 mins) and `43200` (12 hrs), default to `900` (15 mins). | no | 900 |
| export-env | Whether to export the credentials as env vars. Default to `true`. | no | true |
| env-ak-name | The env name for Access Key ID to export. Default to `HUAWEICLOUD_SDK_AK`. | no | HUAWEICLOUD_SDK_AK |
| env-sk-name | The env name for Secret Access Key to export. Default to `HUAWEICLOUD_SDK_SK`. | no | HUAWEICLOUD_SDK_SK |
| env-st-name | The env name for Security Token to export. Default to `HUAWEICLOUD_SDK_SECURITY_TOKEN`. | no | HUAWEICLOUD_SDK_SECURITY_TOKEN |
| sts-region | The region of Huawei Cloud STS API for requesting. Default to `` (`ap-southeast-1` for GitHub-hosted runners, `cn-east-3` otherwise). | no | "" |
| api-timeout | The timeout seconds for API calls to GitHub and Huawei Cloud STS. Default to `10`. | no | 10 |
| api-retry | The retry times for API calls to GitHub and Huawei Cloud STS. Default to `2`. | no | 2 |
Outputs
| name | description |
|---|---|
| ak | Access Key ID of the temporary credential. String, e.g. `HSTANO...........`. |
| sk | Secret Access Key of the temporary credential. String, e.g. `EoWCQrr...........`. |
| st | Security Token of the temporary credential. String, e.g. `hQpjbi1...........`. |
| expiration | Expiration time of the temporary credential in RFC 3339 format. Datetime, e.g. `2026-09-07T03:27:51.158Z`. |
| urn | The URN of the assumed agency. String, in format of `sts::<account-id>::assumed-agency:<agency-name>/<session-name>`. |
| id | The unique ID of the assumed agency. String, in format of `<agency-id>:<session-name>`. |