Fix TiCS action's permission error #4609
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Go | |
| on: | |
| push: | |
| paths-ignore: | |
| - 'docs/**' | |
| branches: | |
| - main | |
| - autoupdate/strict | |
| - autoupdate/moonray | |
| - 'release-[0-9]+.[0-9]+' | |
| - 'autoupdate/release-[0-9]+.[0-9]+-strict' | |
| - 'autoupdate/sync/**' | |
| pull_request: | |
| paths-ignore: | |
| - 'docs/**' | |
| permissions: | |
| contents: read | |
| jobs: | |
| test: | |
| permissions: | |
| contents: read # for actions/checkout to fetch code | |
| pull-requests: write # for marocchino/sticky-pull-request-comment to create or update PR comment | |
| name: Unit Tests & Code Quality | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@v2 | |
| with: | |
| egress-policy: audit | |
| - name: Check out code | |
| uses: actions/checkout@v4 | |
| - name: Install Go | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version: "1.22" | |
| - name: go mod download | |
| working-directory: src/k8s | |
| run: go mod download | |
| - name: go fmt | |
| working-directory: src/k8s | |
| run: make go.fmt | |
| - name: go doc | |
| working-directory: src/k8s | |
| run: make go.doc | |
| - name: check diff | |
| run: | | |
| if ! [ -z "$(git diff)" ]; then | |
| echo "Detected changes that have not been committed to the repository" | |
| echo "Please run 'cd src/k8s && make go.fmt go.doc'" | |
| echo "git diff:" | |
| git diff | |
| exit 1 | |
| fi | |
| - name: go vet | |
| working-directory: src/k8s | |
| run: make go.vet | |
| - name: go test | |
| working-directory: src/k8s | |
| # NOTE: there are a handful of tests checking/setting | |
| # root ownership so the tests must be run as root: | |
| run: sudo make go.unit | |
| test-binary: | |
| name: Binaries | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@v2 | |
| with: | |
| egress-policy: audit | |
| - name: Check out code | |
| uses: actions/checkout@v4 | |
| - name: Install Go | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version: "1.22" | |
| - name: go mod download | |
| working-directory: src/k8s | |
| run: go mod download | |
| - name: Build static binaries | |
| working-directory: src/k8s | |
| run: | | |
| make -j static | |
| ./bin/static/k8s --help | |
| ./bin/static/k8sd --help | |
| ./bin/static/k8s-apiserver-proxy --help | |
| - name: Build shared binaries | |
| working-directory: src/k8s | |
| run: | | |
| make -j dynamic | |
| export LD_LIBRARY_PATH=bin/dynamic/lib | |
| ./bin/dynamic/k8s --help | |
| ./bin/dynamic/k8sd --help | |
| ./bin/dynamic/k8s-apiserver-proxy --help |