Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Get access to the GCP kyma-project to migrate release-template-operator-assets from the Neighbors Prow #9925

Open
nesmabadr opened this issue Feb 21, 2024 · 1 comment
Labels
area/ci Issues or PRs related to CI related topics

Comments

@nesmabadr
Copy link
Contributor

Description

As a part of the prow jobs migration from the Neighbors's Prow, we wanted to migrate the release-template-operator-assets to a Github Action in the Template Operator repo. But for this we need to get access to the kyma-project since we are using the Github action, so we need to have a service account name, a workload identity provider and to give our repo some access to the GCP project.

specifically: Assign principalset://iam.googleapis.com/projects/718973091829/locations/global/workloadIdentityPools/github-action/attribute.repository/kyma-project/template-operator as Service Account Token Creator as well as Workload Identity User

Reasons

To allow the job to work correctly with GitHub Actions

Acceptance Criteria

  • Give the template operator Github Action access to the kyma-project GCP artifact registry

This is blocking #9495
Attachments

@TorstenD-SAP
Copy link

Only pipelines/jobs/actions/... controlled by the Neighbors are allowed to upload images to our registry, especially the productive one. We can think about providing some kind of dev registry to cache images for testing purposes (if this makes sense?). The images from this dev registry must not reach the productive registry!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/ci Issues or PRs related to CI related topics
Projects
None yet
Development

No branches or pull requests

2 participants