Secure the e2e yaml GHA

Signed-off-by: Manuel Buil <mbuil@suse.com>
This commit is contained in:
Manuel Buil 2026-03-31 16:53:40 +02:00
parent 9b6d5dfedd
commit 2a2cd99e3d

View file

@ -104,9 +104,13 @@ jobs:
uses: ./.github/actions/setup-go
- name: Install Kubectl
run: |
STABLE_VERSION=$(yq '.channels[] | select(.name == "stable") | .latest | sub("\+.*", "")' channel.yaml)
curl -LO "https://dl.k8s.io/release/${STABLE_VERSION}/bin/linux/amd64/kubectl"
sudo install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl
set -euo pipefail
STABLE_VERSION=v1.34.6
KUBECTL_SHA256=3166155b17198c0af34ff5a360bd4d9d58db98bafadc6f3c2a57ae560563cd6b
curl -fsSLo ./kubectl "https://dl.k8s.io/release/${STABLE_VERSION}/bin/linux/amd64/kubectl"
echo "${KUBECTL_SHA256} ./kubectl" | sha256sum -c -
sudo install -o root -g root -m 0755 ./kubectl /usr/local/bin/kubectl
rm -f ./kubectl
- name: "Download k3s binary"
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
with: