Add jobs and credentials for octoml/relax (#62)

tlc-pack · Jan 13, 2023 · 38aacd6 · 38aacd6
1 parent 0884b40
commit 38aacd6
Show file tree

Hide file tree

Showing 4 changed files with 376 additions and 0 deletions.
diff --git a/.github/workflows/jenkins_prepare.yml b/.github/workflows/jenkins_prepare.yml
@@ -50,6 +50,7 @@ jobs:
  OAUTH_CLIENT_ID_PROD: ${{ secrets.OAUTH_CLIENT_ID_PROD }}
  OAUTH_CLIENT_SECRET_PROD: ${{ secrets.OAUTH_CLIENT_SECRET_PROD }}
  JENKINS_READER_APP_KEY: ${{ secrets.JENKINS_READER_APP_KEY }}
+ OCTOML_RELAX_CI_GITHUB_APP_KEY: ${{ secrets.OCTOML_RELAX_CI_GITHUB_APP_KEY }}
  DISCORD_WEBHOOK_URL: ${{ secrets.DISCORD_WEBHOOK_URL }}
  JENKINS_PRIV_KEY_PROD: ${{ secrets.JENKINS_PRIV_KEY_PROD }}
  JENKINS_TOKEN: ${{ secrets.JENKINS_TOKEN }}

diff --git a/jenkins/ansible/roles/setup_jenkins_head/tasks/main.yml b/jenkins/ansible/roles/setup_jenkins_head/tasks/main.yml
@@ -35,6 +35,14 @@
  group: 1000
  mode: 0600
 
+- name: octoml-relax-ci Github App Key
+ ansible.builtin.copy:
+ content: "{{ lookup('env', 'OCTOML_RELAX_CI_GITHUB_APP_KEY') }}"
+ dest: "/var/jenkins/keys/octoml_relax_ci_github_app_key"
+ owner: 1000
+ group: 1000
+ mode: 0600
+
 - name: Discord Webhook URL
  ansible.builtin.copy:
  content: "{{ lookup('env', 'DISCORD_WEBHOOK_URL') }}"

diff --git a/jenkins/docker/prod/base_config.yaml b/jenkins/docker/prod/base_config.yaml
@@ -71,6 +71,8 @@ jenkins:
  value: "yes"
  - key: "RETAG_STAGING_IMAGES"
  value: "yes"
+ - key: "DEPLOY_DOCKER_IMAGES"
+ value: "yes"
 security:
  apiToken:
  creationOfLegacyTokenEnabled: false
@@ -176,3 +178,9 @@ credentials:
  id: "dockerhub-tlcpack-key"
  description: "aws account id"
  secret: "${readFile:/key/dockerhub-tlcpack-key}"
+ - gitHubApp:
+ appID: "281513"
+ id: "octoml-relax-ci"
+ owner: "octoml"
+ description: "GitHub App for octoml/relax repos"
+ privateKey: "${readFile:/key/octoml_relax_ci_github_app_key}"