change pipeline to pull private repo

Author: SylvainSenechal

.github/dockerfiles/syntheticbucketd/Dockerfile

@@ -5,7 +5,13 @@ RUN npm install -g \
     [email protected]
 COPY package.json /app
 COPY yarn.lock /app
-RUN cd /app && yarn install --network-concurrency 1
+
+RUN --mount=type=secret,id=npmtoken \
+    cd /app && \
+    TOKEN=$(cat /run/secrets/npmtoken 2>/dev/null || echo "") && \
+    git config --global url."https://${TOKEN}@github.com/".insteadOf "https://github.com/" && \
+    yarn install --network-concurrency 1 && \
+    git config --global --unset url."https://github.com/".insteadOf || true
 
 COPY tests/utils /app
 

.github/workflows/docker-build.yaml

@@ -17,6 +17,14 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Get token to access private repositories
+        uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ vars.ACTIONS_APP_ID }}
+          private-key: ${{ secrets.ACTIONS_APP_PRIVATE_KEY }}
+          repositories: cloudserverclient
+
       - name: Set up Docker Buildk
         uses: docker/setup-buildx-action@v3
 
@@ -35,6 +43,8 @@ jobs:
           tags: ghcr.io/${{ github.repository }}:${{ github.sha }}
           cache-from: type=gha
           cache-to: type=gha,mode=max
+          secrets: |
+            npmtoken=${{ steps.app-token.outputs.token }}
 
       - name: Build and push federation image
         uses: docker/build-push-action@v6
@@ -46,6 +56,8 @@ jobs:
           tags: ghcr.io/${{ github.repository }}:${{ github.sha }}-federation
           cache-from: type=gha,scope=federation
           cache-to: type=gha,scope=federation,mode=max
+          secrets: |
+            npmtoken=${{ steps.app-token.outputs.token }}
         
       - name: Install Oras
         run: |

.github/workflows/tests.yaml

@@ -21,6 +21,14 @@ jobs:
     - name: Checkout
       uses: actions/checkout@v4
 
+    - name: Get token to access private repositories
+      uses: actions/create-github-app-token@v1
+      id: app-token
+      with:
+        app-id: ${{ vars.ACTIONS_APP_ID }}
+        private-key: ${{ secrets.ACTIONS_APP_PRIVATE_KEY }}
+        repositories: cloudserverclient
+
     - uses: actions/setup-node@v4
       with:
         node-version: '22'
@@ -54,6 +62,8 @@ jobs:
         tags: ghcr.io/${{ github.repository }}/syntheticbucketd:${{ github.sha }}
         cache-from: type=gha,scope=syntheticbucketd
         cache-to: type=gha,mode=max,scope=syntheticbucketd
+        secrets: |
+          npmtoken=${{ steps.app-token.outputs.token }}
 
     - name: Build and push MongoDB
       uses: docker/build-push-action@v6
@@ -70,6 +80,14 @@ jobs:
     - name: Checkout
       uses: actions/checkout@v4
 
+    - name: Get token to access private repositories
+      uses: actions/create-github-app-token@v1
+      id: app-token
+      with:
+        app-id: ${{ vars.ACTIONS_APP_ID }}
+        private-key: ${{ secrets.ACTIONS_APP_PRIVATE_KEY }}
+        repositories: cloudserverclient
+
     - uses: actions/setup-node@v4
       with:
         node-version: '22'
@@ -128,12 +146,24 @@ jobs:
     steps:
     - name: Checkout
       uses: actions/checkout@v4
+    
+    - name: Get token to access private repositories
+      uses: actions/create-github-app-token@v1
+      id: app-token
+      with:
+        app-id: ${{ vars.ACTIONS_APP_ID }}
+        private-key: ${{ secrets.ACTIONS_APP_PRIVATE_KEY }}
+        repositories: cloudserverclient
+
     - uses: actions/setup-node@v4
       with:
         node-version: '22'
         cache: yarn
+    
     - name: Install node dependencies
       run: yarn install --ignore-engines --frozen-lockfile --network-concurrency 1
+      env:
+        GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
     - name: Lint markdown
       run: yarn run --silent lint_md
     - name: Lint Javascript
@@ -227,12 +257,24 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+      
+      - name: Get token to access private repositories
+        uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ vars.ACTIONS_APP_ID }}
+          private-key: ${{ secrets.ACTIONS_APP_PRIVATE_KEY }}
+          repositories: cloudserverclient
+
       - uses: actions/setup-node@v4
         with:
           node-version: '22'
           cache: yarn
+      
       - name: Install node dependencies
         run: yarn install --ignore-engines --frozen-lockfile --network-concurrency 1
+        env:
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
       - name: Login to Registry
         uses: docker/login-action@v3
         with:

Dockerfile

@@ -29,10 +29,15 @@ RUN wget https://github.com/jwilder/dockerize/releases/download/$DOCKERIZE_VERSI
     && rm dockerize-linux-amd64-$DOCKERIZE_VERSION.tar.gz
 
 COPY package.json yarn.lock /usr/src/app/
-RUN yarn install --ignore-engines --frozen-lockfile --production --network-concurrency 1 \
+
+RUN --mount=type=secret,id=npmtoken \
+    TOKEN=$(cat /run/secrets/npmtoken 2>/dev/null || echo "") && \
+    git config --global url."https://${TOKEN}@github.com/".insteadOf "https://github.com/" && \
+    yarn install --ignore-engines --frozen-lockfile --production --network-concurrency 1 \
     && rm -rf /var/lib/apt/lists/* \
     && rm -rf ~/.node-gyp \
-    && rm -rf /tmp/yarn-*
+    && rm -rf /tmp/yarn-* \
+    && git config --global --unset url."https://github.com/".insteadOf || true
 
 ################################################################################
 FROM node:${NODE_VERSION}

package.json

@@ -70,7 +70,7 @@
     "uuid": "^11.0.4",
     "vaultclient": "scality/vaultclient#8.5.1",
     "werelogs": "scality/werelogs#8.2.1",
-    "@scality/cloudserverclient": "file:../cloudserverclient"
+    "@scality/cloudserverclient": "git+https://github.com/scality/cloudserverclient#v1.0.0-CLDSRVCLT-1.0"
   },
   "resolutions": {
     "node-rdkafka-prometheus/prom-client": "^15.1.3"