fix ssh key for git sync
This commit is contained in:
@@ -49,13 +49,19 @@ jobs:
|
|||||||
--wait
|
--wait
|
||||||
- name: Create Airflow git-sync SSH secret
|
- name: Create Airflow git-sync SSH secret
|
||||||
if: ${{ inputs.service == 'all' || inputs.service == 'airflow' }}
|
if: ${{ inputs.service == 'all' || inputs.service == 'airflow' }}
|
||||||
|
env:
|
||||||
|
SSH_KEY: ${{ secrets.AIRFLOW_GITSYNC_SSH_KEY }}
|
||||||
run: |
|
run: |
|
||||||
kubectl create namespace airflow --dry-run=client -o yaml | kubectl apply -f -
|
kubectl create namespace airflow --dry-run=client -o yaml | kubectl apply -f -
|
||||||
|
printf '%s' "$SSH_KEY" | base64 -d > /tmp/gitSshKey
|
||||||
|
chmod 600 /tmp/gitSshKey
|
||||||
|
ssh-keyscan github.com 2>/dev/null > /tmp/known_hosts
|
||||||
kubectl create secret generic airflow-gitsync-ssh \
|
kubectl create secret generic airflow-gitsync-ssh \
|
||||||
--from-literal=gitSshKey="$(echo ${{ secrets.AIRFLOW_GITSYNC_SSH_KEY }} | base64 -d)" \
|
--from-file=gitSshKey=/tmp/gitSshKey \
|
||||||
--from-literal=known_hosts="$(echo ${{ secrets.AIRFLOW_GITSYNC_KNOWN_HOSTS }} | base64 -d)" \
|
--from-file=known_hosts=/tmp/known_hosts \
|
||||||
--namespace airflow \
|
--namespace airflow \
|
||||||
--dry-run=client -o yaml | kubectl apply -f -
|
--dry-run=client -o yaml | kubectl apply -f -
|
||||||
|
rm -f /tmp/gitSshKey /tmp/known_hosts
|
||||||
- name: Deploy Airflow
|
- name: Deploy Airflow
|
||||||
if: ${{ inputs.service == 'all' || inputs.service == 'airflow' }}
|
if: ${{ inputs.service == 'all' || inputs.service == 'airflow' }}
|
||||||
run: |
|
run: |
|
||||||
|
|||||||
Reference in New Issue
Block a user