Provisioner: Add kbs provisioning steps in CI

Fixes: confidential-containers#1676
Signed-off-by: Kartik Joshi <kartikjoshi@microsoft.com>

.github/workflows/azure-e2e-test.yml

@@ -20,6 +20,12 @@ on:
       caa-image:
         type: string
         description: prebuilt caa image
+      kbs-image-id:
+        type: string
+        description: prebuild kbs image
+      kbs-image-tag:
+        type: string
+        description: prebuild kbs image tag
 
 jobs:
   generate-podvm-image-version:
@@ -112,6 +118,8 @@ jobs:
       env:
         AZURE_IMAGE_ID: ${{ github.event.inputs.podvm-image-id || format('/CommunityGalleries/{0}/images/{1}/Versions/{2}', vars.AZURE_COMMUNITY_GALLERY_NAME, vars.AZURE_PODVM_IMAGE_DEF_NAME, needs.generate-podvm-image-version.outputs.image-version) }}
         CAA_IMAGE: "${{ github.event.inputs.caa-image || needs.build-caa-container-image.outputs.caa-image }}"
+        KBS_IMAGE: ${{ github.event.inputs.kbs-image-id ||  $(yq -e '.kbs.image.registry' versions.yaml)}}
+        KBS_IMAGE_TAG: ${{  github.event.inputs.kbs-image-tag || $(yq -e '.kbs.image.tag' versions.yaml)}}
       run: |
         cat << EOF > ${{ env.TEST_PROVISION_FILE }}
           AZURE_SUBSCRIPTION_ID="${{ secrets.AZURE_SUBSCRIPTION_ID }}"
@@ -124,6 +132,8 @@ jobs:
           IS_CI_MANAGED_CLUSTER="true"
           MANAGED_IDENTITY_NAME="${{ secrets.AZURE_MANAGED_IDENTITY_NAME}}"
           CAA_IMAGE="${CAA_IMAGE}"
+          KBS_IMAGE="${KBS_IMAGE}"
+          KBS_IMAGE_TAG="${KBS_IMAGE_TAG}"
         EOF
         cat ${{ env.TEST_PROVISION_FILE }}
 
@@ -193,6 +203,13 @@ jobs:
         test -n "$SUBNET_ID"
         echo "AZURE_SUBNET_ID=\"${SUBNET_ID}\"" >> "$TEST_PROVISION_FILE"
 
+    - name: Checkout kbs Repository
+      uses: actions/checkout@v2
+      with:
+        repository: confidential-containers/kbs
+        ref: main
+        path: test/e2e/kbs
+
     - name: Run e2e test
       env:
         TEST_PROVISION: "no"