mirror of
https://github.com/kata-containers/kata-containers.git
synced 2026-05-16 20:37:15 +00:00
8c3c7aa871
The ITA_KEY secret was conditionally passed to TDX jobs for Intel Trust Authority attestation, but it is no longer needed. Remove it from all workflow files and the test helper export. Signed-off-by: Fabiano Fidêncio <ffidencio@nvidia.com>
50 lines
1.4 KiB
YAML
50 lines
1.4 KiB
YAML
name: Kata Containers CI (manually triggered)
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
tee-test-scope:
|
|
description: "TEE test scope: small runs only attestation + policy tests, full runs everything"
|
|
required: false
|
|
type: choice
|
|
options:
|
|
- small
|
|
- full
|
|
default: small
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}-devel
|
|
cancel-in-progress: true
|
|
|
|
permissions: {}
|
|
|
|
jobs:
|
|
kata-containers-ci-on-push:
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
id-token: write
|
|
attestations: write
|
|
uses: ./.github/workflows/ci.yaml
|
|
with:
|
|
commit-hash: ${{ github.sha }}
|
|
pr-number: "dev"
|
|
tag: ${{ github.sha }}-dev
|
|
target-branch: ${{ github.ref_name }}
|
|
extensive-matrix-autogenerated-policy: "yes"
|
|
tee-test-scope: ${{ inputs.tee-test-scope || 'small' }}
|
|
|
|
secrets:
|
|
AUTHENTICATED_IMAGE_PASSWORD: ${{ secrets.AUTHENTICATED_IMAGE_PASSWORD }}
|
|
AZ_APPID: ${{ secrets.AZ_APPID }}
|
|
AZ_TENANT_ID: ${{ secrets.AZ_TENANT_ID }}
|
|
AZ_SUBSCRIPTION_ID: ${{ secrets.AZ_SUBSCRIPTION_ID }}
|
|
CI_HKD_PATH: ${{ secrets.CI_HKD_PATH }}
|
|
QUAY_DEPLOYER_PASSWORD: ${{ secrets.QUAY_DEPLOYER_PASSWORD }}
|
|
NGC_API_KEY: ${{ secrets.NGC_API_KEY }}
|
|
KBUILD_SIGN_PIN: ${{ secrets.KBUILD_SIGN_PIN }}
|
|
|
|
build-checks:
|
|
uses: ./.github/workflows/build-checks.yaml
|
|
with:
|
|
instance: ubuntu-22.04
|