From 7177cf8d3458c3575bb48d313703eaa9f0287fd0 Mon Sep 17 00:00:00 2001
From: samcday <me@samcday.com>
Date: Thu, 11 May 2023 15:25:16 +0200
Subject: [PATCH] feat(ci): support TPS usage in e2e CI (#446)

---
 .github/workflows/test_e2e.yml | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/test_e2e.yml b/.github/workflows/test_e2e.yml
index 571f06b3c..e13df58cd 100644
--- a/.github/workflows/test_e2e.yml
+++ b/.github/workflows/test_e2e.yml
@@ -5,12 +5,14 @@ on:
     branches: [main]
 jobs:
   k3s:
+    name: k3s ${{ matrix.k3s }}
+    permissions:
+      id-token: write
     runs-on: ubuntu-latest
     strategy:
       matrix:
         k3s: [ v1.24, v1.25, v1.26, v1.27]
       fail-fast: false
-    name: k3s ${{ matrix.k3s }}
     steps:
       - uses: actions/setup-go@v4
         with:
@@ -24,6 +26,14 @@ jobs:
           set -ueo pipefail
           if [[ "${HCLOUD_TOKEN:-}" != "" ]]; then
             echo "HCLOUD_TOKEN=$HCLOUD_TOKEN" >> "$GITHUB_ENV"
+          elif [[ "${{vars.USE_TPS}}" != "" ]]; then
+                    ci_token=$(curl --fail --retry 2 -s \
+                        -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" \
+                        "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=tps" \
+                        | jq -r .value)
+                    token="$(curl --fail --retry 2 -s -X POST -H "Authorization: Bearer $ci_token" https://tps.hc-integrations.de/)"
+                    echo "::add-mask::$token"
+                    echo "HCLOUD_TOKEN=$token" >> "$GITHUB_ENV"
           elif [[ "${TTS_TOKEN:-}" != "" ]]; then
                     token="$(./scripts/get-token.sh)"
                     echo "::add-mask::$token"