dependabot[bot]
4b416f89bf
* Chore(deps): Bump actions/checkout from 4 to 5 Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> * remove incorrect comments --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ashley Harrison <ashley.harrison@grafana.com>
65 lines
2.1 KiB
YAML
65 lines
2.1 KiB
YAML
name: "publish-kinds-next"
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- "main"
|
|
paths:
|
|
- '**/*.cue'
|
|
workflow_dispatch:
|
|
|
|
permissions: {}
|
|
|
|
jobs:
|
|
main:
|
|
if: github.repository == 'grafana/grafana'
|
|
runs-on: "ubuntu-latest"
|
|
permissions:
|
|
contents: read # cloning repo
|
|
actions: read # reading .github/workflows/ dir
|
|
id-token: write # reading vault secrets
|
|
|
|
steps:
|
|
- name: "Checkout Grafana repo"
|
|
uses: "actions/checkout@v5"
|
|
with:
|
|
fetch-depth: 0
|
|
persist-credentials: false
|
|
|
|
- name: "Setup Go"
|
|
uses: "actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5"
|
|
with:
|
|
go-version-file: go.mod
|
|
|
|
- name: "Verify kinds"
|
|
run: go run .github/workflows/scripts/kinds/verify-kinds.go
|
|
|
|
- name: "Get vault secrets"
|
|
id: vault-secrets
|
|
uses: grafana/shared-workflows/actions/get-vault-secrets@main
|
|
with:
|
|
# Secrets placed in the ci/data/repo/grafana/grafana/delivery-bot-app path in Vault
|
|
repo_secrets: |
|
|
GRAFANA_DELIVERY_BOT_APP_PEM=delivery-bot-app:PRIVATE_KEY
|
|
- name: "Generate token"
|
|
id: generate_token
|
|
uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a
|
|
with:
|
|
# App needs Actions: Read/Write for the grafana/security-patch-actions repo
|
|
app_id: ${{ vars.DELIVERY_BOT_APP_ID }}
|
|
private_key: ${{ env.GRAFANA_DELIVERY_BOT_APP_PEM }}
|
|
|
|
- name: "Clone website-sync Action"
|
|
run: "git clone --single-branch --no-tags --depth 1 -b master https://grafana-delivery-bot:${{ steps.generate_token.outputs.token }}@github.com/grafana/website-sync ./.github/actions/website-sync"
|
|
|
|
- name: "Publish to kind registry (next)"
|
|
uses: "./.github/actions/website-sync"
|
|
id: "publish-next"
|
|
with:
|
|
repository: "grafana/kind-registry"
|
|
branch: "main"
|
|
host: "github.com"
|
|
github_pat: "grafana-delivery-bot:${{ steps.generate_token.outputs.token }}"
|
|
source_folder: ".github/workflows/scripts/kinds/next"
|
|
target_folder: "grafana/next"
|