From deb42cc9f051d1a197f2b54b7b04c12d520fd035 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Patryk=20Ma=C5=82ek?= <patryk.malek@konghq.com>
Date: Mon, 2 Dec 2024 17:17:30 +0100
Subject: [PATCH] chore(ci): use 1pass to access konnect PAT for tests

---
 .github/workflows/_kongintegration_tests.yaml | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/_kongintegration_tests.yaml b/.github/workflows/_kongintegration_tests.yaml
index df186082f0..86ead7ae61 100644
--- a/.github/workflows/_kongintegration_tests.yaml
+++ b/.github/workflows/_kongintegration_tests.yaml
@@ -47,13 +47,24 @@ jobs:
 
       - run: echo "GOTESTSUM_JUNITFILE=kongintegration-${{ matrix.name }}-tests.xml" >> $GITHUB_ENV
 
+      - uses: 1password/load-secrets-action@v2
+        id: konnect-pat
+        with:
+          export-env: false
+        env:
+          OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN_TEAM_K8S_PUBLIC }}
+          PAT: 'op://team-k8s-public/Team K8S Konnect testing account - KIC tests token/token'
+
+      - if: ${{ steps.konnect-pat.outputs.PAT == '' }}
+        run: exit 1
+
       - name: run kong integration tests
         run: make test.kongintegration
         env:
           MISE_VERBOSE: 1
           MISE_DEBUG: 1
           GOTESTSUM_JUNITFILE: ${{ env.GOTESTSUM_JUNITFILE }}
-          TEST_KONG_KONNECT_ACCESS_TOKEN: ${{ secrets.K8S_TEAM_KONNECT_ACCESS_TOKEN }}
+          KONG_TEST_KONNECT_ACCESS_TOKEN: ${{ steps.konnect-pat.outputs.PAT }}
           KONG_LICENSE_DATA: ${{ steps.license.outputs.license }}
           TEST_KONG_ENTERPRISE: ${{ matrix.enterprise }}