tiny-pilot / tinypilot

Use your Raspberry Pi as a browser-based KVM.
https://tinypilotkvm.com
MIT License
2.89k stars 244 forks source link

Use CircleCI secure context when uploading bundle to Backblaze #1755

Closed jdeanwallace closed 3 months ago

jdeanwallace commented 3 months ago

Resolves https://github.com/tiny-pilot/tinypilot-pro/issues/1260

We need to make the following changes in CircleCI:

  1. Create a CircleCI secure context for TinyPilot Community.

    1. Open the TinyPilot CircleCI context
    2. Click "Create Context"
    3. Enter a context name:
      • Perhaps we should name it community-production?
    4. Click "Create Context"
  2. Restrict the TinyPilot Community context to only be used on the master branch and when SSH is disabled on the CI job.

    1. Click the TinyPilot Community context
    2. Click "Add Expression Restriction"
    3. Enter the following expression in the text box:
      • pipeline.git.branch == "master" and not job.ssh.enabled
    4. Click "Add Expression Restriction"
  3. Add new production Backblaze credentials to the TinyPilot Community context

After we've merged this PR, we can remove the BACKBLAZE_* environment variables from the TinyPilot Community CircleCI project settings.

Review on CodeApprove

jdeanwallace commented 3 months ago
Automated comment from CodeApprove ➜

⏳ @mtlynch please review this Pull Request

codeapprove[bot] commented 3 months ago
Automated comment from CodeApprove ➜

👀 @jdeanwallace it's your turn, please take a look

mtlynch commented 3 months ago

We need to make the following changes in CircleCI:

@jdeanwallace - Done

Except I named it production-tinypilot-community to match the naming scheme we used for gatekeeper.

jdeanwallace commented 3 months ago
Automated comment from CodeApprove ➜

⏳ @jotaen4tinypilot please review this Pull Request