From 025e120ac809f656fd2c959553d95919830a1e54 Mon Sep 17 00:00:00 2001
From: Anton Belodedenko <2033996+ab77@users.noreply.github.com>
Date: Thu, 20 Mar 2025 08:57:56 -0700
Subject: [PATCH] patch: Add missing session token to use ephemeral AWS creds.

---
 .github/workflows/tests.yml | 4 ++++
 src/cert-manager/Dockerfile | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index fa7ca23..22cb2ef 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -390,6 +390,10 @@ jobs:
           --service cert-manager \
           --device '${{ steps.register-test-device.outputs.balena_device_uuid }}'
 
+        with_backoff balena env add AWS_SESSION_TOKEN '${{ env.AWS_SESSION_TOKEN }}' \
+          --service cert-manager \
+          --device '${{ steps.register-test-device.outputs.balena_device_uuid }}'
+
     - name: provision balenaOS ephemeral SUT
       id: balena-sut
       if: matrix.target == 'balena-public-pki'
diff --git a/src/cert-manager/Dockerfile b/src/cert-manager/Dockerfile
index ff430fe..822dfdf 100644
--- a/src/cert-manager/Dockerfile
+++ b/src/cert-manager/Dockerfile
@@ -1,4 +1,4 @@
 # https://github.com/balena-io/cert-manager
-FROM balena/cert-manager:0.3.1
+FROM balena/cert-manager:0.3.2
 
 COPY *.json /opt/