Skip to content

Commit 73b223c

Browse files
committed
feat: add visibility step
1 parent 9421133 commit 73b223c

1 file changed

Lines changed: 16 additions & 0 deletions

File tree

.github/workflows/ci_k8_base.yml

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -39,6 +39,9 @@ on:
3939
WF_CREATE_PR_IN_MAIN:
4040
type: boolean
4141
required: false
42+
WF_IS_INTERNAL:
43+
type: boolean
44+
required: false
4245

4346
secrets:
4447
WF_KUBE_TYPE:
@@ -61,6 +64,9 @@ on:
6164
WF_GITHUB_TOKEN:
6265
required: true
6366

67+
WF_WHITELIST_SOURCE_RANGE:
68+
required: false
69+
6470
# A workflow run is made up of one or more jobs that can run sequentially or in parallel
6571
jobs:
6672
setup:
@@ -173,6 +179,16 @@ jobs:
173179
kubectl apply -f ingress.yaml
174180
echo "URL: https://${KUBE_NAME}${KUBE_DOMAIN}"
175181
182+
- name: Setting the service visibility
183+
if: ${{ inputs.WF_IS_INTERNAL }}
184+
id: 'set-visibility'
185+
env:
186+
KUBE_NAME: ${{ secrets.WF_KUBE_NAME }}
187+
WHITELIST_SOURCE_RANGE: ${{ secrets.WF_WHITELIST_SOURCE_RANGE}}
188+
run: |
189+
kubectl -n ${KUBE_NAME} annotate ingress ${KUBE_NAME} ingress.kubernetes.io/whitelist-source-range=${WHITELIST_SOURCE_RANGE}
190+
kubectl -n ${KUBE_NAME} annotate ingress ${KUBE_NAME} kubernetes.io/whitelist-source-range=${WHITELIST_SOURCE_RANGE}
191+
176192
- name: Create comment
177193
if: ${{ inputs.WF_SHOW_COMMENT }}
178194
uses: peter-evans/create-or-update-comment@v1

0 commit comments

Comments
 (0)