fix(ci): hardcode admin gitea sync remote
This commit is contained in:
parent
345ebac4bf
commit
b2838ba32a
1 changed files with 11 additions and 91 deletions
102
.github/workflows/sync-to-gitea.yml
vendored
102
.github/workflows/sync-to-gitea.yml
vendored
|
|
@ -16,102 +16,22 @@ jobs:
|
||||||
with:
|
with:
|
||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
|
|
||||||
- name: Push to Gitea main
|
- name: Sync to Gitea
|
||||||
env:
|
env:
|
||||||
GITEA_USERNAME: ${{ secrets.GITEA_USERNAME }}
|
|
||||||
GITEA_TOKEN: ${{ secrets.GITEA_SECRET }}
|
GITEA_TOKEN: ${{ secrets.GITEA_SECRET }}
|
||||||
GITEA_HOST: ci.nxtgauge.com
|
REPO: ${{ github.event.repository.name }}
|
||||||
GITEA_OWNER: ${{ vars.GITEA_OWNER }}
|
BRANCH: ${{ github.ref_name }}
|
||||||
run: |
|
run: |
|
||||||
set -euo pipefail
|
set -euo pipefail
|
||||||
echo "Syncing ${{ github.event.repository.name }}:main → Gitea main"
|
git config user.name "github-actions[bot]"
|
||||||
echo "Commit: $(git rev-parse HEAD)"
|
git config user.email "github-actions[bot]@users.noreply.github.com"
|
||||||
|
|
||||||
if [ -z "${GITEA_TOKEN:-}" ]; then
|
GITEA_URL="https://Admin:${GITEA_TOKEN}@ci.nxtgauge.com/Admin/${REPO}.git"
|
||||||
echo "Missing GITEA_SECRET"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
REPO_NAME="${{ github.event.repository.name }}"
|
git remote remove gitea 2>/dev/null || true
|
||||||
BRANCH_NAME="${{ github.ref_name }}"
|
git remote add gitea "${GITEA_URL}"
|
||||||
API_USER_JSON="$(curl -fsS -H "Authorization: token ${GITEA_TOKEN}" "https://${GITEA_HOST}/api/v1/user" || curl -fsS -H "Authorization: Bearer ${GITEA_TOKEN}" "https://${GITEA_HOST}/api/v1/user" || true)"
|
|
||||||
TOKEN_OWNER_USER="$(printf '%s' "$API_USER_JSON" | jq -r '.login // empty')"
|
|
||||||
if [ -n "$TOKEN_OWNER_USER" ]; then
|
|
||||||
echo "Resolved token owner user: $TOKEN_OWNER_USER"
|
|
||||||
else
|
|
||||||
echo "Could not resolve token owner via API; using configured username fallbacks"
|
|
||||||
fi
|
|
||||||
RESOLVED_GITEA_USER=""
|
|
||||||
CANDIDATE_OWNERS="${GITEA_OWNER:-} Admin ${{ github.repository_owner }}"
|
|
||||||
TARGET_FULL_NAME=""
|
|
||||||
TARGET_URL=""
|
|
||||||
|
|
||||||
for owner in $CANDIDATE_OWNERS; do
|
git ls-remote "${GITEA_URL}" >/dev/null
|
||||||
[ -n "$owner" ] || continue
|
|
||||||
candidate_full_name="${owner}/${REPO_NAME}"
|
|
||||||
candidate_url="https://${GITEA_HOST}/${candidate_full_name}.git"
|
|
||||||
if git ls-remote "https://${GITEA_USERNAME}:${GITEA_TOKEN}@${GITEA_HOST}/${candidate_full_name}.git" >/dev/null 2>&1; then
|
|
||||||
TARGET_FULL_NAME="$candidate_full_name"
|
|
||||||
echo "Using Gitea target owner: $owner"
|
|
||||||
break
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
if [ -z "$TARGET_FULL_NAME" ]; then
|
git push "${GITEA_URL}" "HEAD:${BRANCH}" --force
|
||||||
echo "Owner guess failed; searching accessible repos via Gitea API"
|
git push "${GITEA_URL}" --tags --force
|
||||||
API_URL="https://${GITEA_HOST}/api/v1/repos/search?q=${REPO_NAME}&limit=100"
|
|
||||||
API_JSON="$(curl -fsS -H "Authorization: token ${GITEA_TOKEN}" "${API_URL}" || true)"
|
|
||||||
TARGET_FULL_NAME="$(printf '%s' "$API_JSON" | jq -r --arg repo "$REPO_NAME" '[.data[]?.full_name | select((ascii_downcase | endswith("/" + ($repo | ascii_downcase))))][0] // empty')"
|
|
||||||
if [ -n "$TARGET_FULL_NAME" ]; then
|
|
||||||
echo "Resolved Gitea target via API"
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ -z "$TARGET_FULL_NAME" ]; then
|
|
||||||
echo "Could not access target repo on Gitea for owners: $CANDIDATE_OWNERS"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
TARGET_REMOTE_URL="https://${GITEA_HOST}/${TARGET_FULL_NAME}.git"
|
|
||||||
|
|
||||||
for auth_user in "$TOKEN_OWNER_USER" "$GITEA_USERNAME" "oauth2"; do
|
|
||||||
[ -n "$auth_user" ] || continue
|
|
||||||
AUTH_B64="$(printf '%s' "${auth_user}:${GITEA_TOKEN}" | base64 | tr -d '\n')"
|
|
||||||
if git -c http.extraHeader="Authorization: Basic ${AUTH_B64}" ls-remote "$TARGET_REMOTE_URL" >/dev/null 2>&1; then
|
|
||||||
TARGET_URL="$TARGET_REMOTE_URL"
|
|
||||||
TARGET_HTTP_AUTH_HEADER="Authorization: Basic ${AUTH_B64}"
|
|
||||||
echo "Using Gitea credential mode for ${TARGET_FULL_NAME} as ${auth_user}"
|
|
||||||
break
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
if [ -z "$TARGET_URL" ]; then
|
|
||||||
for auth_url in \
|
|
||||||
"https://${GITEA_USERNAME}:${GITEA_TOKEN}@${GITEA_HOST}/${TARGET_FULL_NAME}.git" \
|
|
||||||
"https://${GITEA_TOKEN}@${GITEA_HOST}/${TARGET_FULL_NAME}.git" \
|
|
||||||
"https://oauth2:${GITEA_TOKEN}@${GITEA_HOST}/${TARGET_FULL_NAME}.git"; do
|
|
||||||
if git ls-remote "$auth_url" >/dev/null 2>&1; then
|
|
||||||
TARGET_URL="$TARGET_REMOTE_URL"
|
|
||||||
TARGET_HTTP_AUTH_HEADER=""
|
|
||||||
echo "Using Gitea credential mode for ${TARGET_FULL_NAME}"
|
|
||||||
break
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ -z "$TARGET_URL" ]; then
|
|
||||||
echo "Resolved repo path but authentication to Gitea git remote failed"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
git remote add gitea "$TARGET_URL"
|
|
||||||
|
|
||||||
if [ -n "${TARGET_HTTP_AUTH_HEADER:-}" ]; then
|
|
||||||
git -c http.extraHeader="$TARGET_HTTP_AUTH_HEADER" fetch gitea "$BRANCH_NAME" || true
|
|
||||||
git -c http.extraHeader="$TARGET_HTTP_AUTH_HEADER" push gitea "HEAD:${BRANCH_NAME}" --force-with-lease=refs/heads/"$BRANCH_NAME"
|
|
||||||
else
|
|
||||||
git fetch gitea "$BRANCH_NAME" || true
|
|
||||||
git push gitea "HEAD:${BRANCH_NAME}" --force-with-lease=refs/heads/"$BRANCH_NAME"
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "Sync complete!"
|
|
||||||
|
|
|
||||||
Loading…
Add table
Reference in a new issue