github-secrets: use keyless (#1170)

.github/workflows/release.yml

@@ -64,27 +64,15 @@ jobs:
         run: zip -r packages.zip packages/
         working-directory: build
 
-      - name: 'Get service account'
-        uses: hashicorp/[email protected]
+      - uses: elastic/oblt-actions/google/[email protected]
         with:
-          url: ${{ secrets.VAULT_ADDR }}
-          roleId: ${{ secrets.VAULT_ROLE_ID }}
-          secretId: ${{ secrets.VAULT_SECRET_ID }}
-          method: approle
-          secrets: |
-            secret/observability-team/ci/apm-agent-php-bucket service-account | SERVICE_ACCOUNT ;
-
-      - name: 'Authenticate to Google Cloud'
-        uses: 'google-github-actions/auth@v2'
-        with:
-          credentials_json: '${{ env.SERVICE_ACCOUNT }}'
+          project-number: '911195782929'
 
       - id: 'upload-file'
         uses: 'google-github-actions/upload-cloud-storage@v2'
         with:
           path: "${{ env.BUILD_PACKAGES }}.zip"
           destination: "${{ env.BUCKET_NAME }}/${{ github.run_id }}"
-          predefinedAcl: "publicRead"
 
       - id: buildkite-run
         uses: elastic/oblt-actions/buildkite/[email protected]