ci: Fix cleanup permissions (#4943)

.github/actions/e2e/cleanup/action.yaml

@@ -21,12 +21,6 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - name: configure aws credentials
-      uses: aws-actions/[email protected]
-      with:
-        role-to-assume: arn:aws:iam::${{ inputs.account_id }}:role/${{ inputs.role }}
-        aws-region: ${{ inputs.region }}
-        role-duration-seconds: 21600
     - uses: actions/checkout@v4
       with:
         ref: ${{ inputs.git_ref }}

.github/actions/e2e/create-cluster/action.yaml

@@ -30,12 +30,6 @@ inputs:
 runs:
   using: "composite"
   steps:
-  - name: configure aws credentials
-    uses: aws-actions/[email protected]
-    with:
-      role-to-assume: arn:aws:iam::${{ inputs.account_id }}:role/${{ inputs.role }}
-      aws-region: ${{ inputs.region }}
-      role-duration-seconds: 21600
   - uses: actions/checkout@v4
     with:
       ref: ${{ inputs.git_ref }}

.github/actions/e2e/install-karpenter/action.yaml

@@ -24,12 +24,6 @@ inputs:
 runs:
   using: "composite"
   steps:
-  - name: configure aws credentials
-    uses: aws-actions/[email protected]
-    with:
-      role-to-assume: arn:aws:iam::${{ inputs.account_id }}:role/${{ inputs.role }}
-      aws-region: ${{ inputs.region }}
-      role-duration-seconds: 21600
   - uses: actions/checkout@v4
     with:
       ref: ${{ inputs.git_ref }}

.github/workflows/e2e-cleanup.yaml

@@ -14,6 +14,8 @@ on:
           - "us-east-2"
           - "us-west-2"
           - "eu-west-1"
+permissions:
+  id-token: write # aws-actions/[email protected]
 jobs:
   cleanup:
     name: cleanup-${{ inputs.cluster_name }}
@@ -22,6 +24,12 @@ jobs:
       - uses: actions/checkout@v4
         with:
           ref: ${{ inputs.git_ref }}
+      - name: configure aws credentials
+        uses: aws-actions/[email protected]
+        with:
+          role-to-assume: arn:aws:iam::${{ vars.ACCOUNT_ID }}:role/${{ vars.ROLE_NAME }}
+          aws-region: ${{ inputs.region }}
+          role-duration-seconds: 21600
       - name: cleanup karpenter and cluster '${{ inputs.cluster_name }}' resources
         uses: ./.github/actions/e2e/cleanup
         with: