feat(ci): support TPS usage in e2e CI (#446)

hetznercloud · May 11, 2023 · 7177cf8 · 7177cf8
1 parent 1291b76
commit 7177cf8
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/.github/workflows/test_e2e.yml b/.github/workflows/test_e2e.yml
@@ -5,12 +5,14 @@ on:
     branches: [main]
 jobs:
   k3s:
+    name: k3s ${{ matrix.k3s }}
+    permissions:
+      id-token: write
     runs-on: ubuntu-latest
     strategy:
       matrix:
         k3s: [ v1.24, v1.25, v1.26, v1.27]
       fail-fast: false
-    name: k3s ${{ matrix.k3s }}
     steps:
       - uses: actions/setup-go@v4
         with:
@@ -24,6 +26,14 @@ jobs:
           set -ueo pipefail
           if [[ "${HCLOUD_TOKEN:-}" != "" ]]; then
             echo "HCLOUD_TOKEN=$HCLOUD_TOKEN" >> "$GITHUB_ENV"
+          elif [[ "${{vars.USE_TPS}}" != "" ]]; then
+                    ci_token=$(curl --fail --retry 2 -s \
+                        -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" \
+                        "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=tps" \
+                        | jq -r .value)
+                    token="$(curl --fail --retry 2 -s -X POST -H "Authorization: Bearer $ci_token" https://tps.hc-integrations.de/)"
+                    echo "::add-mask::$token"
+                    echo "HCLOUD_TOKEN=$token" >> "$GITHUB_ENV"
           elif [[ "${TTS_TOKEN:-}" != "" ]]; then
                     token="$(./scripts/get-token.sh)"
                     echo "::add-mask::$token"