github-actions: use slack and aws gh secrets (elastic#2065)

Author: v1v

.github/workflows/release.yml

@@ -74,17 +74,12 @@ jobs:
  needs:
  - build-distribution
  runs-on: ubuntu-latest
+ env:
+ # TODO: use keyless
+ AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+ AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
  steps:
  - uses: actions/checkout@v4
- - uses: hashicorp/vault-action@v3.0.0
- with:
- url: ${{ secrets.VAULT_ADDR }}
- method: approle
- roleId: ${{ secrets.VAULT_ROLE_ID }}
- secretId: ${{ secrets.VAULT_SECRET_ID }}
- secrets: |
- secret/observability-team/ci/service-account/apm-agent-python access_key_id | AWS_ACCESS_KEY_ID ;
- secret/observability-team/ci/service-account/apm-agent-python secret_access_key | AWS_SECRET_ACCESS_KEY
  - uses: actions/download-artifact@v3
  with:
  name: build-distribution

.github/workflows/test.yml

@@ -174,13 +174,11 @@ jobs:
  needs: ${{ toJSON(needs) }}
  - run: ${{ steps.check.outputs.isSuccess }}
  - if: failure() && (github.event_name == 'schedule' || github.event_name == 'push')
- uses: elastic/apm-pipeline-library/.github/actions/notify-build-status@current
+ uses: elastic/oblt-actions/slack/notify-result@v1
  with:
+ bot-token: ${{ secrets.SLACK_BOT_TOKEN }}
  status: ${{ steps.check.outputs.status }}
- vaultUrl: ${{ secrets.VAULT_ADDR }}
- vaultRoleId: ${{ secrets.VAULT_ROLE_ID }}
- vaultSecretId: ${{ secrets.VAULT_SECRET_ID }}
- slackChannel: "#apm-agent-python"
+ channel-id: "#apm-agent-python"
 
  coverage:
  name: Combine & check coverage.