Configure access to Namespace

This repository hosts a GitHub action that configures access to Namespace. It also installs the Namespace Cloud CLI nsc in your workflow.

Example

jobs:
deploy:
name: Ephemeral clusterruns-on: ubuntu-latest# These permissions are needed to interact with GitHub's OIDC Token endpoint.permissions:
id-token: writecontents: readsteps:
- name: Checkoutuses: actions/checkout@v3
- name: Configure access to Namespaceuses: namespacelabs/nscloud-setup@v0
- name: Create an ephemeral clusterrun: | nsc cluster create

Using Namespace GitHub Runners

Namespace GitHub Runners are already authenticated with Namespace. Hence, no token exchange is needed and id-token: write permissions can be skipped.

jobs:
deploy:
name: Ephemeral clusterruns-on: nscloudpermissions:
contents: readsteps:
- name: Checkoutuses: actions/checkout@v3
- name: Configure access to Namespaceuses: namespacelabs/nscloud-setup@v0
- name: Create an ephemeral clusterrun: | nsc cluster create

Requirements

nsc authenticates workloads by talking to GitHub's OIDC Token endpoint. Please ensure to grant id-token: write for your workflow (see example).

When Namespace GitHub Runners are used, no token exchange is needed and id-token: write permissions can be skipped (see example).