Skip to content

fix(ci): provide PD auth secret to the compose precheck #31

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
imbajin merged 1 commit into from
Sep 13, 2026
Merged

fix(ci): provide PD auth secret to the compose precheck #31

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 16 additions & 0 deletions .github/workflows/_publish_pd_store_server_reusable.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -610,6 +610,14 @@ jobs:
echo "HUGEGRAPH_ADMIN_PASSWORD=$HUGEGRAPH_ADMIN_PASSWORD" >> "$GITHUB_ENV"
export HUGEGRAPH_ADMIN_PASSWORD

# The HStore topology requires the PD REST secret during interpolation,
# so every later compose command (logs, down) needs it too. Older source
# revisions ignore it. Hex keeps it printable ASCII, as Hubble requires.
HG_PD_AUTH_SECRET_KEY="$(openssl rand -hex 24)"
echo "::add-mask::$HG_PD_AUTH_SECRET_KEY"
echo "HG_PD_AUTH_SECRET_KEY=$HG_PD_AUTH_SECRET_KEY" >> "$GITHUB_ENV"
export HG_PD_AUTH_SECRET_KEY

if [ -f "docker/docker-compose-hstore.yml" ] \
&& [ -f "docker/docker-compose.dev.yml" ]; then
# The current HugeGraph dev file is a thin HStore override. Keep the
Expand All @@ -634,6 +642,14 @@ jobs:
echo "COMPOSE_FILE=$compose_file" >> "$GITHUB_ENV"
echo "COMPOSE_DEV_FILE=$compose_dev_file" >> "$GITHUB_ENV"

# Hubble in the HStore topology mounts a gitignored properties file that
# carries the PD secret, with create_host_path: false, so it must exist
# before compose up. Older source revisions mount a tracked file instead.
if [ "$compose_file" = "docker/docker-compose-hstore.yml" ] \
&& [ -f "docker/set-hubble-pd-password.sh" ]; then
bash docker/set-hubble-pd-password.sh hstore
fi

cat > /tmp/hg-ci-patch-server-config.sh <<'PATCH_SERVER'
#!/usr/bin/env bash
set -euo pipefail
Expand Down