Merge pull request #2020 from pikasTech/fix/agentrun-private-pr-auth

fix: 投影 Artificer 私有仓 GitHub 凭据

config/agentrun.yaml

@@ -313,6 +313,7 @@ controlPlane:
         localPostgresExpectedAbsent: true
       toolCredentials:
         - extends: controlPlane.templates.toolCredentials.githubPr
+        - extends: controlPlane.templates.toolCredentials.githubRepositoryOverridePikaoa
         - extends: controlPlane.templates.toolCredentials.unideskSsh
         - extends: controlPlane.templates.toolCredentials.githubSsh
       secrets:
@@ -462,6 +463,7 @@ controlPlane:
           providerCredential:
             profile: dsflash-go
         - extends: controlPlane.templates.secrets.githubPrRawToken
+        - extends: controlPlane.templates.secrets.githubRepositoryOverridePikaoaToken
         - extends: controlPlane.templates.secrets.unideskSshToken
         - extends: controlPlane.templates.secrets.githubSshPrivateKey
         - extends: controlPlane.templates.secrets.githubSshKnownHosts
@@ -534,6 +536,19 @@ controlPlane:
           kind: env
           envName: GH_TOKEN
           secretKey: GH_TOKEN
+      githubRepositoryOverridePikaoa:
+        id: github-repository-override-pikaoa
+        tool: github
+        purpose: repository-override-pikainc-pikaoa
+        secretRef:
+          namespace: agentrun-v02
+          name: agentrun-v02-tool-github-repository-overrides
+          keys:
+            - PIKAINC_PIKAOA_GH_TOKEN
+        projection:
+          kind: env
+          envName: UNIDESK_GH_TOKEN_PIKAINC_PIKAOA
+          secretKey: PIKAINC_PIKAOA_GH_TOKEN
       unideskSsh:
         id: unidesk-ssh
         tool: unidesk-ssh
@@ -570,6 +585,15 @@ controlPlane:
           namespace: agentrun-v02
           name: agentrun-v01-tool-github-pr
           key: GH_TOKEN
+      githubRepositoryOverridePikaoaToken:
+        id: tool-github-repository-override-pikaoa-token
+        sourceRef: /root/.unidesk/.env/pikainc-selfmedia-gh-token.txt
+        sourceKey: GH_TOKEN
+        sourceFormat: raw-token
+        targetRef:
+          namespace: agentrun-v02
+          name: agentrun-v02-tool-github-repository-overrides
+          key: PIKAINC_PIKAOA_GH_TOKEN
       unideskSshToken:
         id: tool-unidesk-ssh-token
         sourceRef: /root/.unidesk/.state/docker-compose.env

config/unidesk-cli.yaml

@@ -21,18 +21,13 @@ github:
         sourceRef: pikainc-selfmedia-gh-token.txt
         sourceKey: GH_TOKEN
         format: raw-token
+        projectedEnv: UNIDESK_GH_TOKEN_PIKAINC_PIKAOA
       - repository: pikainc/selfmedia
         priority: before-env
         root: /root/.unidesk/.env
         sourceRef: pikainc-selfmedia-gh-token.txt
         sourceKey: GH_TOKEN
         format: raw-token
-      - repository: pikainc/pikaoa
-        priority: before-env
-        root: /root/.unidesk/.env
-        sourceRef: pikainc-selfmedia-gh-token.txt
-        sourceKey: GH_TOKEN
-        format: raw-token
   prMerge:
     unknownRetry:
       maxAttempts: 5