Pass explicit secrets to reusable server CI workflows (#36896)

This commit is contained in:
Nuno Simões
2026-06-04 19:42:32 +02:00
committed by GitHub
parent 3af36e0a49
commit 4245b69744
6 changed files with 36 additions and 11 deletions
-1
View File
@@ -22,4 +22,3 @@ jobs:
permissions:
contents: read
uses: ./.github/workflows/i18n-ci-template.yml
secrets: inherit
@@ -21,6 +21,15 @@ on:
required: false
default: false
type: boolean
secrets:
# Only if fips-enabled is true
DOCKERHUB_USERNAME:
required: false
DOCKERHUB_TOKEN:
required: false
# Only master / release and there is report
MM_E2E_ZEPHYR_API_KEY:
required: false
permissions:
contents: read
@@ -43,7 +43,6 @@ jobs:
contents: read
actions: write
uses: ./.github/workflows/server-test-template.yml
secrets: inherit
with:
name: Race Detector
datasource: postgres://mmuser:mostest@postgres:5432/mattermost_test?sslmode=disable&connect_timeout=10
+7 -3
View File
@@ -44,7 +44,6 @@ jobs:
contents: read
actions: write
uses: ./.github/workflows/server-test-template.yml
secrets: inherit
with:
name: Postgres with binary parameters
datasource: postgres://mmuser:mostest@postgres:5432/mattermost_test?sslmode=disable&connect_timeout=10&binary_parameters=yes
@@ -64,7 +63,9 @@ jobs:
contents: read
actions: write
uses: ./.github/workflows/server-test-template.yml
secrets: inherit
secrets:
DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
with:
name: Postgres FIPS
datasource: postgres://mmuser:mostest-fips-test@postgres:5432/mattermost_test?sslmode=disable&connect_timeout=10
@@ -82,7 +83,10 @@ jobs:
contents: read
actions: write
uses: ./.github/workflows/mmctl-test-template.yml
secrets: inherit
secrets:
DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
MM_E2E_ZEPHYR_API_KEY: ${{ secrets.MM_E2E_ZEPHYR_API_KEY }}
with:
name: mmctl
datasource: postgres://mmuser:mostest-fips-test@postgres:5432/mattermost_test?sslmode=disable&connect_timeout=10
+11 -6
View File
@@ -291,7 +291,8 @@ jobs:
contents: read
actions: write
uses: ./.github/workflows/server-test-template.yml
secrets: inherit
secrets:
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
with:
name: "Postgres (shard ${{ matrix.shard }})"
datasource: postgres://mmuser:mostest@postgres:5432/mattermost_test?sslmode=disable&connect_timeout=10
@@ -325,7 +326,6 @@ jobs:
contents: read
actions: write
uses: ./.github/workflows/server-test-template.yml
secrets: inherit
with:
name: Elasticsearch v8 Compatibility
datasource: postgres://mmuser:mostest@postgres:5432/mattermost_test?sslmode=disable&connect_timeout=10
@@ -343,7 +343,6 @@ jobs:
contents: read
actions: write
uses: ./.github/workflows/server-test-template.yml
secrets: inherit
with:
name: OpenSearch v2 Compatibility
datasource: postgres://mmuser:mostest@postgres:5432/mattermost_test?sslmode=disable&connect_timeout=10
@@ -368,7 +367,9 @@ jobs:
contents: read
actions: write
uses: ./.github/workflows/server-test-template.yml
secrets: inherit
secrets:
DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
with:
name: "Postgres FIPS (shard ${{ matrix.shard }})"
datasource: postgres://mmuser:mostest-fips-test@postgres:5432/mattermost_test?sslmode=disable&connect_timeout=10
@@ -397,7 +398,8 @@ jobs:
contents: read
actions: write
uses: ./.github/workflows/mmctl-test-template.yml
secrets: inherit
secrets:
MM_E2E_ZEPHYR_API_KEY: ${{ secrets.MM_E2E_ZEPHYR_API_KEY }}
with:
name: mmctl
datasource: postgres://mmuser:mostest@postgres:5432/mattermost_test?sslmode=disable&connect_timeout=10
@@ -413,7 +415,10 @@ jobs:
contents: read
actions: write
uses: ./.github/workflows/mmctl-test-template.yml
secrets: inherit
secrets:
DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
MM_E2E_ZEPHYR_API_KEY: ${{ secrets.MM_E2E_ZEPHYR_API_KEY }}
with:
name: mmctl
datasource: postgres://mmuser:mostest-fips-test@postgres:5432/mattermost_test?sslmode=disable&connect_timeout=10
@@ -64,6 +64,15 @@ on:
required: false
type: boolean
default: false
secrets:
# Only if enablecoverage is true
CODECOV_TOKEN:
required: false
# Only if fips-enabled is true
DOCKERHUB_USERNAME:
required: false
DOCKERHUB_TOKEN:
required: false
permissions:
contents: read