Add sccache bucket secret

This adds the secret to the config so apache/tvm#10246 will work
driazati · Feb 22, 2022 · 2f53d03 · 2f53d03
1 parent 9dcb207
commit 2f53d03
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 0 deletions.
diff --git a/.github/workflows/prepare.yml b/.github/workflows/prepare.yml
@@ -45,6 +45,7 @@ jobs:
       AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
       AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
       TQCHEN_CI_PAT: ${{ secrets.TQCHEN_CI_PAT }}
+      SCCACHE_BUCKET: ${{ secrets.SCCACHE_BUCKET }}
     steps:
       -
         name: Pull repository

diff --git a/ansible/roles/setup_jenkins_head/tasks/main.yml b/ansible/roles/setup_jenkins_head/tasks/main.yml
@@ -75,6 +75,14 @@
     group: 1000
     mode: 0600
 
+- name: sccache bucket creds
+  ansible.builtin.copy:
+    content: "{{ lookup('env', 'SCCACHE_BUCKET') }}"
+    dest: "/var/jenkins/keys/sccache_bucket"
+    owner: 1000
+    group: 1000
+    mode: 0600
+
 - name: Base configuration for Jenkins
   ansible.builtin.copy:
     src: "{{ lookup('env', 'GITHUB_WORKSPACE') + '/docker/' + lookup('env', 'ENVIRONMENT') + '/base_config.yaml' }}"

diff --git a/docker/prod/base_config.yaml b/docker/prod/base_config.yaml
@@ -148,3 +148,7 @@ credentials:
               id: "tvm-bot-jenkins-reader"
               description: "PAT for the tvm-bot user"
               secret: "${readFile:/key/tvm_bot_token}"
+          - string:
+              id: "tvm-sccache-bucket"
+              description: "Sccache S3 bucket name"
+              secret: "${readFile:/key/sccache_bucket}"