debug #38
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy AKS LTS Prow | |
| on: [push, workflow_dispatch] | |
| jobs: | |
| Deploy_AKS_LTS_Prow: | |
| runs-on: ubuntu-latest | |
| env: | |
| GITHUB_APP_ID: ${{ vars.APP_ID }} | |
| GITHUB_ORG: ${{ vars.ORG }} | |
| GITHUB_REPO: ${{ vars.REPO }} | |
| GITHUB_TOKEN: ${{ secrets.TOKEN }} | |
| HMAC_TOKEN: ${{ secrets.HMAC_TOKEN }} | |
| MINIO_CONSOLE_PORT: 8003 | |
| FAKE_MOUNT_SECRET: ${{ secrets.FAKE_MOUNT_SECRET }} | |
| steps: | |
| - name: Check out repo | |
| uses: actions/checkout@v3 | |
| - name: Log into Azure | |
| uses: azure/login@v1 | |
| with: | |
| creds: ${{ secrets.AZURE_CREDENTIALS }} | |
| - name: Deploy Prow cluster Bicep | |
| id: bicep | |
| uses: azure/arm-deploy@v1 | |
| with: | |
| subscriptionId: ${{ vars.AZURE_SUBSCRIPTION }} | |
| resourceGroupName: ${{ vars.AZURE_RG }} | |
| template: ./config/prow/cluster/prow-cluster.bicep | |
| failOnStdErr: false | |
| - name: Fetch config | |
| run: | | |
| echo "PROW_HOST=${{ steps.bicep.outputs.prowHostName }}" >> "$GITHUB_ENV" | |
| echo "AZURE_STORAGE_ACCOUNT_USER=${{ steps.bicep.outputs.storageAccountName }}" >> "$GITHUB_ENV" | |
| - name: Fetch storage key | |
| id: fetch-storage-key | |
| run: | | |
| storage_key=$(az storage account keys list -g ${{ vars.AZURE_RG }} -n ${{ steps.bicep.outputs.storageAccountName }} | jq -r '.[0].value') | |
| echo $storage_key | |
| echo '::add-mask::$storage_key' | |
| echo $storage_key | |
| echo "storage_key=$storage_key" >> "$GITHUB_OUTPUT" | |
| - name: Install Kubectl | |
| uses: azure/setup-kubectl@v3 | |
| - name: Set AKS cluster context | |
| uses: azure/aks-set-context@v3 | |
| with: | |
| resource-group: ${{ vars.AZURE_RG }} | |
| cluster-name: ${{ steps.bicep.outputs.aksClusterName }} | |
| admin: true | |
| - name: 'Apply Prow base manifests' | |
| run: for f in config/prow/k8s/base/*.yaml; do kubectl apply --server-side=true -f $f; done | |
| - name: 'Create GitHub Token secret' | |
| run: | | |
| echo $GITHUB_TOKEN | base64 -d > cert.pem | |
| kubectl delete secret github-token -n prow || echo "no existing secret to clean up" | |
| kubectl create secret generic github-token -n prow --from-file=cert=cert.pem --from-literal=appid=$GITHUB_APP_ID | |
| rm cert.pem | |
| - name: 'Apply Prow app manifests' | |
| run: for f in config/prow/k8s/app/*.yaml; do envsubst < $f | kubectl apply -f -; done | |
| env: | |
| AZURE_STORAGE_ACCOUNT_PASSWORD: ${{ steps.fetch-storage-key.outputs.storage_key }} | |