Read commit ref from file

This commit moves the metallb commit ref to
hack/metallb_ref.txt and thus we don't need a
special token with extra permissions.

.github/workflows/bump_metallb.yml

@@ -1,7 +1,7 @@
 name: Periodic MetalLB Bump
 on:
   schedule:
-    - cron: "0 1 * * *"
+    - cron: "*/5 * * * *"
 jobs:
   bump-metallb-and-create-pr:
     runs-on: ubuntu-latest
@@ -52,7 +52,7 @@ jobs:
         if: ${{ steps.check-for-changes.outputs.has_changes == 'true'}}
         uses: peter-evans/create-pull-request@v5
         with:
-          token: ${{ secrets.PAT }}
+          token: ${{ secrets.GITHUB_TOKEN }}
           commit-message: |
             Bump MetalLB
 

.github/workflows/metallb_e2e.yml

@@ -44,12 +44,17 @@ jobs:
         run: |
           make manifests
           git diff --exit-code
+      - name: Read metallb ref
+          id: metallb_ref
+          uses: juliangruber/read-file-action@v1
+          with:
+            path: ./hack/metallb_ref.txt
       - name: Checkout MetalLB
         uses: actions/checkout@v2
         with:
           repository: metallb/metallb
           path: metallb
-          ref: 1424dbaef1313b8bb20df136e8eacd2dbacdae02
+          ref: "${{ steps.metallb_ref.outputs.content }}"
       - name: Checkout MetalLB v0.12
         uses: actions/checkout@v2
         with:

hack/bump_metallb.sh

@@ -1,4 +1,4 @@
 #!/bin/bash
 
 HASH=`git ls-remote https://github.com/metallb/metallb | grep refs/heads/main | cut -f 1`
-sed -i "s/export METALLB_COMMIT_ID=.*/export METALLB_COMMIT_ID=\"$HASH\"/g" hack/common.sh
+echo $HASH > hack/metallb_ref.txt

hack/common.sh

@@ -17,7 +17,7 @@ export PATH=$PATH:$GOPATH/bin
 
 mkdir -p _cache
 
-export METALLB_COMMIT_ID="1424dbaef1313b8bb20df136e8eacd2dbacdae02"
+export METALLB_COMMIT_ID=$(cat hack/metallb_ref.txt)
 export METALLB_PATH=_cache/metallb
 
 export METALLB_SC_FILE=$(dirname "$0")/securityContext.yaml

hack/generate-metallb-manifests.sh

@@ -24,9 +24,6 @@ curl ${FRR_MANIFESTS_URL} -o _cache/${FRR_MANIFESTS_FILE}
 # Generate metallb-frr rbac manifests
 yq e '. | select(.kind == "Role" or .kind == "ClusterRole" or .kind == "RoleBinding" or .kind == "ClusterRoleBinding" or .kind == "ServiceAccount")' _cache/${FRR_MANIFESTS_FILE} > config/metallb_rbac/${FRR_MANIFESTS_FILE}
 
-# Update MetalLB's E2E lane to clone the same commit as the manifests.
-yq e --inplace ".jobs.main.steps[] |= select(.name==\"Checkout MetalLB\").with.ref=\"${METALLB_COMMIT_ID}\"" .github/workflows/metallb_e2e.yml
-
 fetch_metallb
 
 # we want to preserve the metallb crd

hack/metallb_ref.txt

@@ -0,0 +1 @@
+1424dbaef1313b8bb20df136e8eacd2dbacdae02