bk: use a buildkite plugin and be declarative (#14408)

Author: v1v

.buildkite/hooks/pre-command

@@ -100,8 +100,6 @@ if [[ "${BUILDKITE_PIPELINE_SLUG}" =~ ^(integrations|integrations-test-stack)$ ]
  if [[ "${BUILDKITE_STEP_KEY}" == "publish-benchmarks" ]]; then
  BUILDKITE_API_TOKEN=$(retry 5 vault kv get -field buildkite_token "${BUILDKITE_API_TOKEN_PATH}")
  export BUILDKITE_API_TOKEN
- GITHUB_TOKEN=$VAULT_GITHUB_TOKEN
- export GITHUB_TOKEN
  fi
 
  if [[ "${BUILDKITE_STEP_KEY}" =~ ^test-integrations- ]]; then
@@ -120,19 +118,3 @@ if [[ "${BUILDKITE_PIPELINE_SLUG}" == "integrations-serverless" ]]; then
  export EC_REGION_SECRET
  fi
 fi
-
-if [[ "$BUILDKITE_PIPELINE_SLUG" == "integrations-backport" ]]; then
- if [[ "$BUILDKITE_STEP_KEY" == "create-backport-branch" ]]; then
- GITHUB_USERNAME="elastic-vault-github-plugin-prod"
- GITHUB_EMAIL="elasticmachine@elastic.co"
- GITHUB_TOKEN=$VAULT_GITHUB_TOKEN
- export GITHUB_TOKEN GITHUB_EMAIL GITHUB_USERNAME
- fi
-fi
-
-if [[ "$BUILDKITE_PIPELINE_SLUG" == "integrations" || "$BUILDKITE_PIPELINE_SLUG" == "integrations-serverless" ]]; then
- if [[ "$BUILDKITE_STEP_KEY" == "report-failed-tests" ]]; then
- export GITHUB_TOKEN="${VAULT_GITHUB_TOKEN}"
- fi
-fi
-

.buildkite/pipeline.backport.yml

@@ -53,6 +53,11 @@ steps:
  command: ".buildkite/scripts/backport_branch.sh"
  agents:
  image: "${LINUX_AGENT_IMAGE}"
+ env:
+ GITHUB_EMAIL: "elasticmachine@elastic.co"
+ GITHUB_USERNAME: "elastic-vault-github-plugin-prod"
+ plugins:
+ - elastic/vault-github-token#v0.1.0:
  depends_on:
  - step: "input-variables"
  allow_failure: false

.buildkite/pipeline.serverless.yml

@@ -110,6 +110,8 @@ steps:
  image: "${LINUX_AGENT_IMAGE}"
  cpu: "8"
  memory: "4G"
+ plugins:
+ - elastic/vault-github-token#v0.1.0:
  # not fail build if this step fails
  soft_fail: true
  # run this step when if it is triggered by the daily job

.buildkite/pipeline.yml

@@ -70,6 +70,8 @@ steps:
  image: "${LINUX_AGENT_IMAGE}"
  cpu: "8"
  memory: "4G"
+ plugins:
+ - elastic/vault-github-token#v0.1.0:
  if: |
  build.env('BUILDKITE_PULL_REQUEST') != "false" &&
  build.env('BUILDKITE_PIPELINE_SLUG') == "integrations"
@@ -108,6 +110,8 @@ steps:
  image: "${LINUX_AGENT_IMAGE}"
  cpu: "8"
  memory: "4G"
+ plugins:
+ - elastic/vault-github-token#v0.1.0:
  # not fail build if this step fails
  soft_fail: true
  # run this step when if it is triggered by the daily job