Container Compute Service:Use GitHub events in Knative

Step 1: Create a GitHub token

GitHubSource uses two tokens with distinct roles:

• accessToken: A GitHub personal access token that allows GitHubSource to call the GitHub API and register webhooks on your behalf.

• secretToken: A secret string you generate. GitHub signs each webhook payload with this token, and Knative uses it to verify that incoming events are authentic.

Create a personal access token

1. Go to Personal access tokens in your GitHub settings and create a token named GitHubSource Sample. Select the following scopes:

   

   

   • repo:public_repo — allows GitHubSource to receive events from your public repositories

   • admin:repo_hook — allows GitHubSource to create webhooks in those repositories

   Important

   Copy and save the token immediately. GitHub will not display it again after you leave the page.

2. Generate a random string to use as the secretToken:

   head -c 8 /dev/urandom | base64

3. Create a file named githubsecret.yaml with the following content. Replace personal_access_token_value with your personal access token and asdfasfdsaf with the string generated in the previous step. The following is an example of a filled-in Secret, where GitHubSourceSample is the access token name and rVzY0DQ5AM8= is a sample base64-encoded secretToken:

   apiVersion: v1
   kind: Secret
   metadata:
     name: githubsecret
   type: Opaque
   stringData:
     accessToken: GitHubSourceSample
     secretToken: rVzY0DQ5AM8=

   Replace the placeholder values with your own:

   apiVersion: v1
   kind: Secret
   metadata:
     name: githubsecret
   type: Opaque
   stringData:
     accessToken: personal_access_token_value
     secretToken: asdfasfdsaf

4. Apply the Secret to the default namespace:

   kubectl apply -f githubsecret.yaml --namespace default

Step 2: Create a GitHub event source

1. Create a file named github-source.yaml with the following content. Replace <YOUR USER> with your GitHub username and <YOUR REPO> with your repository name.

   apiVersion: sources.eventing.knative.dev/v1alpha1
   kind: GitHubSource
   metadata:
     name: githubsourcesample
   spec:
     eventTypes:
       - pull_request
     ownerAndRepository: <YOUR USER>/<YOUR REPO>
     accessToken:
       secretKeyRef:
         name: githubsecret
         key: accessToken
     secretToken:
       secretKeyRef:
         name: githubsecret
         key: secretToken
     sink:
       apiVersion: serving.knative.dev/v1alpha1
       kind: Service
       name: github-event-display

2. Apply the GitHubSource to the default namespace:

   kubectl --namespace default apply -f github-source.yaml

What's next

To use EventBridge event sources instead of GitHub, see Use the event-driven capabilities of EventBridge in Knative.