From b27b2ee074322cc6c6b5e64d594b4b1d774830ad Mon Sep 17 00:00:00 2001
From: Niels de Vos <ndevos@redhat.com>
Date: Tue, 13 Oct 2020 11:52:31 +0200
Subject: [PATCH] ci: authenticate with GitHub API token from the environment

These script now check if GITHUB_API_TOKEN is set in the environment,
and use that for authenticating. There is no username needed when an API
token is used, but it may not be empty, so it is set to "unused".

Signed-off-by: Niels de Vos <ndevos@redhat.com>
---
 scripts/get_github_labels.py | 17 +++++++++++++++--
 scripts/get_patch_release.py | 15 ++++++++++++++-
 2 files changed, 29 insertions(+), 3 deletions(-)

diff --git a/scripts/get_github_labels.py b/scripts/get_github_labels.py
index 0a1dfb0d2..94703a07f 100755
--- a/scripts/get_github_labels.py
+++ b/scripts/get_github_labels.py
@@ -12,11 +12,16 @@ Exit codes:
  0: success
  1: any unexpected failure
  2: --has-label=<label> was passed, <label> is not set on the PR
+
+Environment:
+ GITHUB_API_TOKEN: the GitHub "personal access token" to use
 '''
 
 import argparse
-import sys
+import os
 import requests
+from requests.auth import HTTPBasicAuth
+import sys
 
 LABEL_URL_FMT = 'https://api.github.com/repos/ceph/ceph-csi/issues/%s/labels'
 '''
@@ -32,7 +37,15 @@ def get_json_labels(gh_id):
     '''
     url = LABEL_URL_FMT % gh_id
     headers = {'Accept': 'application/vnd.github.v3+json'}
-    res = requests.get(url, headers=headers)
+
+    auth = None
+    if 'GITHUB_API_TOKEN' in os.environ:
+        github_api_token = os.environ['GITHUB_API_TOKEN']
+        if github_api_token != '':
+            # the username "unused" is not relevant, needs to be non-empty
+            auth = HTTPBasicAuth('unused', github_api_token)
+
+    res = requests.get(url, headers=headers, auth=auth)
 
     # if "res.status_code != requests.codes.ok", raise an exception
     res.raise_for_status()
diff --git a/scripts/get_patch_release.py b/scripts/get_patch_release.py
index 23b809df9..b4a6b52da 100755
--- a/scripts/get_patch_release.py
+++ b/scripts/get_patch_release.py
@@ -5,11 +5,16 @@ release for a major version.
 
 Parameters:
  --version=<version>: the major version to find the latest patch release for, i.e. v1.19
+
+Environment:
+ GITHUB_API_TOKEN: the GitHub "personal access token" to use
 '''
 
 import argparse
-import sys
+import os
 import requests
+from requests.auth import HTTPBasicAuth
+import sys
 
 RELEASE_URL = 'https://api.github.com/repos/kubernetes/kubernetes/releases'
 '''
@@ -24,6 +29,14 @@ def get_json_releases():
     obtained.
     '''
     headers = {'Accept': 'application/vnd.github.v3+json'}
+
+    auth = None
+    if 'GITHUB_API_TOKEN' in os.environ:
+        github_api_token = os.environ['GITHUB_API_TOKEN']
+        if github_api_token != '':
+            # the username "unused" is not relevant, needs to be non-empty
+            auth = HTTPBasicAuth('unused', github_api_token)
+
     res = requests.get(RELEASE_URL, headers=headers)
 
     # if "res.status_code != requests.codes.ok", raise an exception