Setup Plural
ActionsTags
(2)Github action to install and configure the plural CLI and local authentication. Can be used to use the CLI in github actions workflows, or to provide the auth information for subsequent plural-related github actions like pluralsh/trigger-pull-request or pluralsh/trigger-pipeline.
email:
description: The user email to log in with via OIDC federated credential. This is the preferred and most secure method of authentication
required: false
consoleToken:
description: 'Plural Console authentication token'
required: false
consoleUrl:
description: 'Plural Console endpoint'
required: false
config: # this is going to be deprecated, and only relevant for authenticating to app.plural.sh, not an individual Plural Console instance.
description: Plural CLI Config File (you should prefer using OIDC federated credentials for authentication)
required: false
vsn:
description: the plural cli version to use
required: false
default: '0.12.14'
plat:
description: the cli platform to specify
required: false
default: 'amd64'- name: Authenticate
id: plural
uses: pluralsh/setup-plural@v2
with:
consoleUrl: https://my.console.cloud.plural.sh
email: [email protected] # the email bound to your OIDC federated credentialsIf you want to authenticate to a Plural Console instance from Github Actions, we strongly recommend you utilize federated credentials. These have the following benefits:
- Don't require you to configure any secrets which contain auth tokens
- Guaranteed short-lifespan tokens
- Can configured additional scopes for what the action can actually do. If you use the
pullRequestscope it can only trigger plural pr automations for instance.
This not only makes the integration much more secure, it's also frankly easier to manage, especially at scale since you don't need to worry about burdens like secret management and rotation.
Here's a basic example:
apiVersion: deployments.plural.sh/v1alpha1
kind: FederatedCredential
metadata:
name: gh-actions
spec:
issuer: https://token.actions.githubusercontent.com
user: [email protected] # the user you want the federated credential to bind to.
scopes:
- createPullRequest
claimsLike:
# repo:pluralsh/console:ref:refs/heads/genstage-stack-gs-reconciler
sub: "repo:pluralsh/console:ref:refs/heads/main
Setup Plural is not certified by GitHub. It is provided by a third-party and is governed by separate terms of service, privacy policy, and support documentation.
Tags
(2)Setup Plural is not certified by GitHub. It is provided by a third-party and is governed by separate terms of service, privacy policy, and support documentation.