build(deps): bump the google-cloud group across 2 directories with 3 updates #8683
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # (C) Copyright Confidential Containers Contributors 2023. | |
| # SPDX-License-Identifier: Apache-2.0 | |
| # | |
| # Run end-to-end (e2e) tests on pull request. | |
| --- | |
| name: e2e tests | |
| on: | |
| # Note on repository checkout: pull_request_target sets `GITHUB_SHA` to the | |
| # "last commit on the PR base branch", meaning that by default `actions/checkout` | |
| # is going to checkout the repository main branch. In order to pick up the pull | |
| # request code, this workflow uses the `github.event.pull_request.head.sha` | |
| # property to get the last commit on the HEAD branch. One limitation of this approach | |
| # is that, unlike the `pull_request` event, the checked pull request isn't necessarily | |
| # rebased to main (so it is up to users ensure the pull request is rebased **before* | |
| # triggering this workflow). | |
| pull_request_target: # zizmor: ignore[dangerous-triggers] TODO fix in #2214 | |
| types: | |
| # This workflow will be run if the pull request is labeled test_e2e_libvirt, | |
| # so adding 'labeled' to the list of activity types. | |
| # | |
| - opened | |
| - synchronize | |
| - reopened | |
| - labeled | |
| branches: | |
| - 'main' | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} | |
| cancel-in-progress: true | |
| permissions: {} | |
| jobs: | |
| authorize: | |
| name: authorize | |
| runs-on: ubuntu-24.04 | |
| if: | | |
| contains(github.event.pull_request.labels.*.name, 'test_e2e_aws') || | |
| contains(github.event.pull_request.labels.*.name, 'test_e2e_alibabacloud') || | |
| contains(github.event.pull_request.labels.*.name, 'test_e2e_libvirt') || | |
| contains(github.event.pull_request.labels.*.name, 'test_e2e_byom') | |
| steps: | |
| - run: "true" | |
| e2e: | |
| uses: ./.github/workflows/e2e_run_all.yaml | |
| needs: [authorize] | |
| with: | |
| caa_image_tag: ci-pr${{ github.event.number }} | |
| git_ref: ${{ github.event.pull_request.head.sha }} | |
| podvm_image_tag: ci-pr${{ github.event.number }} | |
| registry: ghcr.io/${{ github.repository_owner }} | |
| permissions: | |
| id-token: write # Required for OIDC authentication | |
| contents: read # Required to checkout code | |
| packages: write # Required to push container images | |
| attestations: write # Required to write attestations | |
| artifact-metadata: write # Required to write artifact metadata | |
| secrets: | |
| AWS_IAM_ROLE_ARN: ${{ secrets.AWS_IAM_ROLE_ARN }} | |
| ALIBABA_CLOUD_ROLE_ARN: ${{ secrets.ALIBABA_CLOUD_ROLE_ARN }} | |
| ALIBABA_CLOUD_OIDC_PROVIDER_ARN: ${{ secrets.ALIBABA_CLOUD_OIDC_PROVIDER_ARN }} | |
| QUAY_PASSWORD: ${{ secrets.QUAY_PASSWORD }} | |
| REGISTRY_CREDENTIAL_ENCODED: ${{ secrets.REGISTRY_CREDENTIAL_ENCODED }} | |
| # Dummy values, since pull-request-target should not have access to upstream secrets | |
| AZURE_CLIENT_ID: '' | |
| AZURE_SUBSCRIPTION_ID: '' | |
| AZURE_TENANT_ID: '' |