Provisioner: Add kbs provisioning steps in CI

Fixes: confidential-containers#1676 Signed-off-by: Kartik Joshi <kartikjoshi@microsoft.com>
kartikjoshi21 · Feb 1, 2024 · b2854c4 · b2854c4
1 parent 81364b7
commit b2854c4
Showing 1 changed file with 22 additions and 5 deletions.
diff --git a/.github/workflows/azure-e2e-test.yml b/.github/workflows/azure-e2e-test.yml
@@ -20,6 +20,12 @@ on:
       caa-image:
         type: string
         description: prebuilt caa image
+      kbs-image-id:
+        type: string
+        description: prebuild kbs image
+      kbs-image-tag:
+        type: string
+        description: prebuild kbs image tag
 
 jobs:
   generate-podvm-image-version:
@@ -112,6 +118,8 @@ jobs:
       env:
         AZURE_IMAGE_ID: ${{ github.event.inputs.podvm-image-id || format('/CommunityGalleries/{0}/images/{1}/Versions/{2}', vars.AZURE_COMMUNITY_GALLERY_NAME, vars.AZURE_PODVM_IMAGE_DEF_NAME, needs.generate-podvm-image-version.outputs.image-version) }}
         CAA_IMAGE: "${{ github.event.inputs.caa-image || needs.build-caa-container-image.outputs.caa-image }}"
+        KBS_IMAGE: ${{ github.event.inputs.kbs-image-id || 'ghcr.io/confidential-containers/staged-images/kbs' }}
+        KBS_IMAGE_TAG: ${{ github.event.inputs.kbs-image-tag || 'latest' }}
       run: |
         cat << EOF > ${{ env.TEST_PROVISION_FILE }}
           AZURE_SUBSCRIPTION_ID="${{ secrets.AZURE_SUBSCRIPTION_ID }}"
@@ -124,6 +132,8 @@ jobs:
           IS_CI_MANAGED_CLUSTER="true"
           MANAGED_IDENTITY_NAME="${{ secrets.AZURE_MANAGED_IDENTITY_NAME}}"
           CAA_IMAGE="${CAA_IMAGE}"
+          KBS_IMAGE="${KBS_IMAGE}"
+          KBS_IMAGE_TAG="${KBS_IMAGE_TAG}"
         EOF
         cat ${{ env.TEST_PROVISION_FILE }}
 
@@ -158,11 +168,11 @@ jobs:
   run-e2e-test:
     runs-on: ubuntu-latest
     needs:
-    - build-podvm-image
-    - build-caa-container-image
-    - install-aks
-    - generate-podvm-image-version
-    if: always() && !cancelled() && needs.build-podvm-image.result != 'failure'
+      - build-podvm-image
+      - build-caa-container-image
+      - install-aks
+      - generate-podvm-image-version
+      if: always() && !cancelled() && needs.build-podvm-image.result != 'failure'
     steps:
     - uses: actions/checkout@v3
 
@@ -193,6 +203,13 @@ jobs:
         test -n "$SUBNET_ID"
         echo "AZURE_SUBNET_ID=\"${SUBNET_ID}\"" >> "$TEST_PROVISION_FILE"
 
+    - name: Checkout kbs Repository
+      uses: actions/checkout@v2
+      with:
+        repository: confidential-containers/kbs
+        ref: main
+        path: test/e2e/kbs
+
     - name: Run e2e test
       env:
         TEST_PROVISION: "no"