Skip to content

chore: support enabling authentication in deploy action #26

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jfonseca-aneo merged 2 commits into from
Jan 20, 2026
Merged

chore: support enabling authentication in deploy action #26

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
79983d1
chore: support enabling authentication in deploy action
jfonseca-aneo Jan 16, 2026
b14bd0f
parse trusted cns as list of strings instead of single one
jfonseca-aneo Jan 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
36 changes: 35 additions & 1 deletion deploy/action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,6 +36,22 @@ inputs:
description: "Path to custom client certificate authority"
required: false
default: ""
require-authentication:
description: "Use authentication"
required: false
default: false
require-authorization:
description: "Use authorization"
required: false
default: false
trusted-cns:
description: "List (of strings) of trusted common names"
required: false
default: '[]'
auth-datafile:
description: "Path to custom authentication configuration data file"
required: false
default: ""
working-directory:
description: "Working directory (should be the ArmoniK repo root folder)"
required: false
Expand Down Expand Up @@ -95,6 +111,10 @@ runs:
GENCERT: ${{ inputs.generate-client-cert }}
CUSTOM_CA: ${{ inputs.custom-client-ca }}
SHARED_HOST: ${{ inputs.shared-data-folder }}
AUTHENTICATION: ${{ inputs.require-authentication }}
AUTHORIZATION: ${{ inputs.require-authorization }}
AUTH_DATAFILE: ${{ inputs.auth-datafile }}
TRUSTED_CNS: ${{ inputs.trusted-cns }}
run: |
set -ex
ingress() {
Expand All @@ -104,7 +124,8 @@ runs:
gencert="$3"
custom_ca="$4"
if [ "$tls" == "true" ]; then
jq --argjson tls "$tls" --argjson mtls "$mtls" --argjson gencert "$gencert" --arg custom_ca "$custom_ca" '.ingress={tls:$tls, mtls:$mtls, generate_client_cert:$gencert, custom_client_ca_file:$custom_ca}' extra.tfvars.json > .extra.tfvars.json
jq --argjson tls "$tls" --argjson mtls "$mtls" --argjson gencert "$gencert" --arg custom_ca "$custom_ca" \
'.ingress={tls:$tls, mtls:$mtls, generate_client_cert:$gencert, custom_client_ca_file:$custom_ca}' extra.tfvars.json > .extra.tfvars.json
mv .extra.tfvars.json extra.tfvars.json
fi
}
Expand All @@ -113,6 +134,19 @@ runs:
jq --arg shared "$SHARED_HOST" '.shared_storage={host_path:$shared}' extra.tfvars.json > .extra.tfvars.json
mv .extra.tfvars.json extra.tfvars.json
fi
auth() {
local authentication authorization auth_datafile trusted_cns
authentication="$1"
authorization="$2"
auth_datafile="$3"
trusted_cns=$4
if [ "$authentication" == "true" ]; then
jq --argjson authentication "$authentication" --argjson authorization "$authorization" --arg auth_datafile "$auth_datafile" --argjson trusted_cns "$trusted_cns" \
'.authentication={require_authentication:$authentication, require_authorization:$authorization, authentication_datafile:$auth_datafile, trusted_common_names:$trusted_cns}' extra.tfvars.json > .extra.tfvars.json
mv .extra.tfvars.json extra.tfvars.json
fi
}
auth "$AUTHENTICATION" "$AUTHORIZATION" "$AUTH_DATAFILE" "$TRUSTED_CNS"
- id: apply
name: Apply
shell: bash
Expand Down