mirror of
https://github.com/tailscale/github-action.git
synced 2026-08-20 09:39:21 +00:00
c66619accf
Change the default matrix test to use an OAuth client which has the new set of more granular minimal OAuth scopes necessary to successfully use the action. Add a new job that uses the previous OAuth client to ensure that we don't break legacy clients. Fixes https://github.com/tailscale/github-action/issues/184 Signed-off-by: Mario Minardi <mario@tailscale.com>
73 lines
2.1 KiB
YAML
73 lines
2.1 KiB
YAML
name: tailscale
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
push:
|
|
branches:
|
|
- main
|
|
pull_request:
|
|
branches:
|
|
- '*'
|
|
|
|
jobs:
|
|
build:
|
|
strategy:
|
|
matrix:
|
|
os: [ubuntu-latest, windows-latest, macos-latest, windows-11-arm]
|
|
cache: ['false', 'true']
|
|
runs-on: ${{ matrix.os }}
|
|
steps:
|
|
- name: Check out code
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
|
|
- name: Tailscale Action
|
|
uses: ./
|
|
with:
|
|
oauth-client-id: ${{ secrets.TS_OAUTH_GRANULAR_CLIENT_ID }}
|
|
oauth-secret: ${{ secrets.TS_OAUTH_GRANULAR_SECRET }}
|
|
tags: tag:ci
|
|
use-cache: ${{ matrix.cache }}
|
|
|
|
- name: check for tailscale connection
|
|
shell: bash
|
|
run:
|
|
tailscale status -json | jq -r .BackendState | grep -q Running
|
|
|
|
- name: ensure no dirty files from Tailscale Action remain
|
|
shell: bash
|
|
run: |
|
|
extra_files=$(git ls-files . --exclude-standard --others)
|
|
if [ ! -z "$extra_files" ]; then
|
|
echo "::error::Unexpected extra files: $extra_files"
|
|
exit 1
|
|
fi
|
|
|
|
# This job runs as a sanity check to ensure we have not broken the ability for OAuth clients using
|
|
# our legacy scopes to successfully connect to tailnets using this action.
|
|
legacyScopesCheck:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Check out code
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
|
|
- name: Tailscale Action
|
|
uses: ./
|
|
with:
|
|
oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
|
|
oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
|
|
tags: tag:ci
|
|
use-cache: ${{ matrix.cache }}
|
|
|
|
- name: check for tailscale connection
|
|
shell: bash
|
|
run:
|
|
tailscale status -json | jq -r .BackendState | grep -q Running
|
|
|
|
- name: ensure no dirty files from Tailscale Action remain
|
|
shell: bash
|
|
run: |
|
|
extra_files=$(git ls-files . --exclude-standard --others)
|
|
if [ ! -z "$extra_files" ]; then
|
|
echo "::error::Unexpected extra files: $extra_files"
|
|
exit 1
|
|
fi
|