[workflow] Download bpf objects for veristat from S3 bucket

Use bpf objects from S3 bucker for Veristat validation and comparison

Signed-off-by: Nikolay Yurin <[email protected]>

.github/workflows/test.yml

@@ -377,6 +377,10 @@ jobs:
       REPO_ROOT: ${{ github.workspace }}
       REPO_PATH: ""
       KBUILD_OUTPUT: kbuild-output/
+    permissions:
+      id-token: write
+      contents: read   
+    environment: aws-openid-auth
     steps:
       - name: Setup environment variables
         run: |
@@ -391,6 +395,23 @@ jobs:
         # zstd is installed by default in the runner images.
         run: zstd -d -T0  vmlinux-${{ env.arch_and_tool }}.tar.zst --stdout | tar -xf -
 
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v2
+        with:
+          aws-region: ${{ vars.AWS_REGION }}
+          role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
+          role-session-name: github-action-bpf-ci
+
+      - name: Download BPF objects
+        run: |
+          set -eux
+          if [ -n "$AWS_ROLE_ARN" ]; then
+            mkdir ./bpf_objects
+            aws s3 sync s3://veristat-bpf-binaries ./bpf_objects
+          fi
+        env:
+          AWS_ROLE_ARN: ${{ secrets.AWS_ROLE_ARN }}
+
       - name: Prepare rootfs
         uses: libbpf/ci/prepare-rootfs@main
         with: