image-build-containerd/.github/workflows/sync-upstream.yml at master · rancher/image-build-containerd · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
name: Sync Upstream
run-name: Upstream Sync
on:
  schedule:
    - cron: "0 17 * * *"
  workflow_dispatch:

permissions:
    contents: write
    id-token: write

jobs:
  sync:
    runs-on: ubuntu-latest
    steps:
      - name: "Read Secrets"
        uses: rancher-eio/read-vault-secrets@0da85151ad1f19ed7986c41587e45aac1ace74b6 # v3
        with:
          secrets: |
            secret/data/github/repo/${{ github.repository }}/github/rancher-release-team-auto-tagger/app-credentials appId | APP_ID ;
            secret/data/github/repo/${{ github.repository }}/github/rancher-release-team-auto-tagger/app-credentials privateKey | PRIVATE_KEY

      - name: Generate GitHub App token
        id: generate-token
        uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2
        with:
          app-id: ${{ env.APP_ID }}
          private-key: ${{ env.PRIVATE_KEY }}

      - name: Sync Upstream Releases
        uses: rancher/ecm-distro-tools/actions/sync-upstream-release@10ab39987d39be83da6a252c1c3b540e496e0287 # v0.66.0
        with:
          upstream-owner: 'k3s-io'
          upstream-repo: 'containerd'
          image-build-owner: ${{ github.repository_owner }}
          image-build-repo: ${{ github.event.repository.name }}
          GH_TOKEN: ${{ steps.generate-token.outputs.token }}
          tag-prefix: ''