710f5d816b
Our DockerHub password is in ESC, and a bunch of the other variables were copy-pasted defaults. We need to keep GCP because that isn't in ESC yet. Refs https://github.com/pulumi/ci-mgmt/issues/1583.
54 lines
1.9 KiB
YAML
54 lines
1.9 KiB
YAML
# WARNING: This file is autogenerated - changes will be overwritten when regenerated by https://github.com/pulumi/ci-mgmt
|
|
|
|
env:
|
|
GOOGLE_CI_SERVICE_ACCOUNT_EMAIL: pulumi-ci@pulumi-ci-gcp-provider.iam.gserviceaccount.com
|
|
GOOGLE_CI_WORKLOAD_IDENTITY_POOL: pulumi-ci
|
|
GOOGLE_CI_WORKLOAD_IDENTITY_PROVIDER: pulumi-ci
|
|
GOOGLE_PROJECT: pulumi-ci-gcp-provider
|
|
GOOGLE_PROJECT_NUMBER: "895284651812"
|
|
GOOGLE_REGION: us-central1
|
|
GOOGLE_ZONE: us-central1-a
|
|
PULUMI_API: https://api.pulumi-staging.io
|
|
PULUMI_GO_DEP_ROOT: ${{ github.workspace }}/..
|
|
PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
|
|
PULUMI_PULUMI_ENABLE_JOURNALING: "true"
|
|
TF_APPEND_USER_AGENT: pulumi
|
|
|
|
jobs:
|
|
command-dispatch-for-testing:
|
|
name: command-dispatch-for-testing
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
id-token: write # For ESC secrets.
|
|
steps:
|
|
- name: Checkout Repo
|
|
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
|
|
with:
|
|
persist-credentials: false
|
|
- env:
|
|
ESC_ACTION_ENVIRONMENT: github-secrets/${{ github.repository_owner }}-${{ github.event.repository.name }}
|
|
ESC_ACTION_EXPORT_ENVIRONMENT_VARIABLES: "false"
|
|
ESC_ACTION_OIDC_AUTH: "true"
|
|
ESC_ACTION_OIDC_ORGANIZATION: pulumi
|
|
ESC_ACTION_OIDC_REQUESTED_TOKEN_TYPE: urn:pulumi:token-type:access_token:organization
|
|
id: esc-secrets
|
|
name: Fetch secrets from ESC
|
|
uses: pulumi/esc-action@9eb774255b1a4afb7855678ae8d4a77359da0d9b
|
|
- uses: peter-evans/slash-command-dispatch@5c11dc7efead556e3bdabf664302212f79eb26fa # v5
|
|
with:
|
|
commands: |
|
|
run-acceptance-tests
|
|
release
|
|
issue-type: pull-request
|
|
permission: write
|
|
reaction-token: ${{ secrets.GITHUB_TOKEN }}
|
|
repository: pulumi/pulumi-docker-build
|
|
token: ${{ steps.esc-secrets.outputs.PULUMI_BOT_TOKEN }}
|
|
name: command-dispatch
|
|
on:
|
|
issue_comment:
|
|
types:
|
|
- created
|
|
- edited
|