Is there a way to use Github App Access Token with git sync?

[sfc-gh-cfraleigh]

We have some security concerns with using ssh and/or personal access token to authenticate git-sync with github. Is there a way we can auth using a github app?

[thockin]

I have no notion of how that would work. I'm not inherently against it, but I'd need someone (you?) to detail how exactly it would work. How would you configure git to do this?

[yan-hic]

https://docs.github.com/en/developers/overview/managing-deploy-keys#server-to-server-tokens describes the steps to setup and authenticate with a GitHub App.
However, if anyone is concerned about using personal SSH keys, look at Deploy keys instead, in the same webpage/link

[k8s-triage-robot]

The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs.

This bot triages issues and PRs according to the following rules:

• After 90d of inactivity, lifecycle/stale is applied
• After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
• After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

• Mark this issue or PR as fresh with /remove-lifecycle stale
• Mark this issue or PR as rotten with /lifecycle rotten
• Close this issue or PR with /close
• Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

[k8s-triage-robot]

The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs.

This bot triages issues and PRs according to the following rules:

• After 90d of inactivity, lifecycle/stale is applied
• After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
• After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

• Mark this issue or PR as fresh with /remove-lifecycle stale
• Mark this issue or PR as rotten with /lifecycle rotten
• Close this issue or PR with /close
• Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

[joebowbeer]

/remove-lifecycle stale

[joebowbeer]

@thockin I'm looking for this as well.

This was not completed, right? That is, there is no way to auth with a GitHub App? (e.g., like ArgoCD does)

If not, should I reopen this or create a new issue?

[thockin]

It aged out. I don't really know enough about github apps to know what this would mean. I am not against it in principle, I just haven't any idea how to do what OP wanted. Happy to discuss if someone can bring information.