Bump github/codeql-action in /.github/workflows in the actions group (#231)

Bumps the actions group in /.github/workflows with 1 update: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 4.34.1 to 4.35.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](3869755554...c10b8064de)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/CODEOWNERS

@@ -1 +1 @@
-* @Azure/aks-atlanta
+* @Azure/cloud-native-github-action-owners

.github/ISSUE_TEMPLATE/bugReportForm.yml

@@ -0,0 +1,36 @@
+name: Bug Report
+description: File a bug report specifying all inputs you provided for the action, we will respond to this thread with any questions.
+title: 'Bug: '
+labels: ['bug', 'triage']
+assignees: '@Azure/aks-atlanta'
+body:
+   - type: textarea
+     id: What-happened
+     attributes:
+        label: What happened?
+        description: Tell us what happened and how is it different from the expected?
+        placeholder: Tell us what you see!
+     validations:
+        required: true
+   - type: checkboxes
+     id: Version
+     attributes:
+        label: Version
+        options:
+           - label: I am using the latest version
+             required: true
+   - type: input
+     id: Runner
+     attributes:
+        label: Runner
+        description: What runner are you using?
+        placeholder: Mention the runner info (self-hosted, operating system)
+     validations:
+        required: true
+   - type: textarea
+     id: Logs
+     attributes:
+        label: Relevant log output
+        description: Run in debug mode for the most verbose logs. Please feel free to attach a screenshot of the logs
+     validations:
+        required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,6 @@
+blank_issues_enabled: false
+contact_links:
+   - name: GitHub Action "k8s-set-context" Support
+     url: https://github.com/Azure/k8s-set-context
+     security: https://github.com/Azure/k8s-set-context/blob/main/SECURITY.md
+     about: Please ask and answer questions here.

.github/ISSUE_TEMPLATE/featureRequestForm.yml

@@ -0,0 +1,13 @@
+name: Feature Request
+description: File a Feature Request form, we will respond to this thread with any questions.
+title: 'Feature Request: '
+labels: ['Feature']
+assignees: '@Azure/aks-atlanta'
+body:
+   - type: textarea
+     id: Feature_request
+     attributes:
+        label: Feature request
+        description: Provide example functionality and links to relevant docs
+     validations:
+        required: true

.github/dependabot.yml

@@ -0,0 +1,18 @@
+version: 2
+updates:
+   - package-ecosystem: npm
+     directory: /
+     schedule:
+        interval: weekly
+     groups:
+        actions:
+           patterns:
+              - '*'
+   - package-ecosystem: github-actions
+     directory: .github/workflows
+     schedule:
+        interval: weekly
+     groups:
+        actions:
+           patterns:
+              - '*'

.github/workflows/codeql.yml

@@ -0,0 +1,91 @@
+# For most projects, this workflow file will not need changing; you simply need
+# to commit it to your repository.
+#
+# You may wish to alter this file to override the set of languages analyzed,
+# or to provide custom queries or build logic.
+#
+# ******** NOTE ********
+# We have attempted to detect the languages in your repository. Please check
+# the `language` matrix defined below to confirm you have the correct set of
+# supported CodeQL languages.
+#
+name: 'CodeQL Advanced'
+
+on:
+   push:
+      branches: ['main']
+   pull_request:
+      branches: ['main']
+   schedule:
+      - cron: '15 9 * * 0'
+
+jobs:
+   analyze:
+      name: Analyze (${{ matrix.language }})
+      # Runner size impacts CodeQL analysis time. To learn more, please see:
+      #   - https://gh.io/recommended-hardware-resources-for-running-codeql
+      #   - https://gh.io/supported-runners-and-hardware-resources
+      #   - https://gh.io/using-larger-runners (GitHub.com only)
+      # Consider using larger runners or machines with greater resources for possible analysis time improvements.
+      runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
+      permissions:
+         # required for all workflows
+         security-events: write
+
+         # required to fetch internal or private CodeQL packs
+         packages: read
+
+         # only required for workflows in private repositories
+         actions: read
+         contents: read
+
+      strategy:
+         fail-fast: false
+         matrix:
+            include:
+               - language: javascript-typescript
+                 build-mode: none
+            # CodeQL supports the following values keywords for 'language': 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'swift'
+            # Use `c-cpp` to analyze code written in C, C++ or both
+            # Use 'java-kotlin' to analyze code written in Java, Kotlin or both
+            # Use 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both
+            # To learn more about changing the languages that are analyzed or customizing the build mode for your analysis,
+            # see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning.
+            # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how
+            # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
+      steps:
+         - name: Checkout repository
+           uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+         # Initializes the CodeQL tools for scanning.
+         - name: Initialize CodeQL
+           uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v3.29.5
+           with:
+              languages: ${{ matrix.language }}
+              build-mode: ${{ matrix.build-mode }}
+              # If you wish to specify custom queries, you can do so here or in a config file.
+              # By default, queries listed here will override any specified in a config file.
+              # Prefix the list here with "+" to use these queries and those in the config file.
+
+              # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
+              # queries: security-extended,security-and-quality
+
+         # If the analyze step fails for one of the languages you are analyzing with
+         # "We were unable to automatically build your code", modify the matrix above
+         # to set the build mode to "manual" for that language. Then modify this step
+         # to build your code.
+         # ℹ️ Command-line programs to run using the OS shell.
+         # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
+         - if: matrix.build-mode == 'manual'
+           shell: bash
+           run: |
+              echo 'If you are using a "manual" build mode for one or more of the' \
+                'languages you are analyzing, replace this with the commands to build' \
+                'your code, for example:'
+              echo '  make bootstrap'
+              echo '  make release'
+              exit 1
+         - name: Perform CodeQL Analysis
+           uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v3.29.5
+           with:
+              category: '/language:${{matrix.language}}'

.github/workflows/default-labels.yml

@@ -13,7 +13,7 @@ jobs:
 
       # Steps represent a sequence of tasks that will be executed as part of the job
       steps:
-         - uses: actions/stale@v3
+         - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
            name: Setting Issue as Idle
            with:
               repo-token: ${{ secrets.GITHUB_TOKEN }}
@@ -24,7 +24,7 @@ jobs:
               operations-per-run: 100
               exempt-issue-labels: 'backlog'
 
-         - uses: actions/stale@v3
+         - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
            name: Setting PR as Idle
            with:
               repo-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/integration-tests.yml

@@ -15,12 +15,13 @@ jobs:
       steps:
          - name: Checkout Source Code
            id: checkout-code
-           uses: actions/checkout@v2
+           uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
          - name: Npm Install and Build
            id: npm-build
            run: |
               npm install
-              npm run build
+         - name: Build
+           run: npm run build
          - name: Set Context
            uses: ./
            with:

.github/workflows/prettify-code.yml

@@ -1,4 +1,4 @@
-name: 'Run prettify'
+name: 'Run Prettify'
 on:
    pull_request:
    push:
@@ -10,9 +10,16 @@ jobs:
       runs-on: ubuntu-latest
       steps:
          - name: Checkout Repository
-           uses: actions/checkout@v2
+           uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-         - name: Enforce Prettier
+         - name: Setup Node.js
-           uses: actionsx/prettier@v2
+           uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
            with:
-              args: --check .
+              node-version: 'lts/*'
+              cache: 'npm'
+
+         - name: Install Dependencies
+           run: npm ci
+
+         - name: Run Prettier Check
+           run: npx prettier --check .

.github/workflows/release-pr.yml

@@ -1,14 +1,18 @@
-name: Create release PR
+name: Release Project
 
 on:
+   push:
+      branches:
+         - main
+      paths:
+         - CHANGELOG.md
    workflow_dispatch:
-      inputs:
-         release:
-            description: 'Define release version (ex: v1, v2, v3)'
-            required: true
 
 jobs:
-   release-pr:
+   release:
-      uses: OliverMKing/javascript-release-workflow/.github/workflows/release-pr.yml@main
+      permissions:
+         actions: read
+         contents: write
+      uses: Azure/action-release-workflows/.github/workflows/release_js_project.yaml@v1
       with:
-         release: ${{ github.event.inputs.release }}
+         changelogPath: ./CHANGELOG.md

.github/workflows/unit-tests.yml

@@ -13,7 +13,7 @@ jobs:
    unit-test:
       runs-on: ubuntu-latest
       steps:
-         - uses: actions/checkout@v1
+         - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
          - name: Run Unit Tests
            run: |
               npm install

.husky/pre-commit

@@ -0,0 +1,7 @@
+npm test
+npm run format-check || {
+  echo ""
+  echo "❌ Formatting check failed."
+  echo "💡 Run 'npm run format' or 'prettier --write .' to fix formatting issues."
+  exit 1
+}

CHANGELOG.md

@@ -0,0 +1,15 @@
+# Change Log
+
+## [4.0.2] - 2025-11-13
+
+- #[164](https://github.com/Azure/k8s-set-context/pull/164) Adding optional kubeconfig encoding variable
+- Dependabot updates
+
+## [4.0.1] - 2024-09-06
+
+- #90 update dev dependencies with Typescript to 5
+- #89 Adding dependabot
+
+## [4.0.0] - 2024-02-13
+
+- #83 update to node20 as node16 is deprecated

README.md

@@ -19,7 +19,7 @@ Refer to the [action metadata file](./action.yml) for details about inputs. Note
 ### Kubeconfig approach
 
 ```yaml
-- uses: azure/k8s-set-context@v2
+- uses: azure/k8s-set-context@v4
   with:
      method: kubeconfig
      kubeconfig: <your kubeconfig>
@@ -50,7 +50,7 @@ Please refer to documentation on fetching [kubeconfig for any generic K8s cluste
 ### Service account approach
 
 ```yaml
-- uses: azure/k8s-set-context@v2
+- uses: azure/k8s-set-context@v4
   with:
      method: service-account
      k8s-url: <URL of the cluster's API server>
@@ -74,7 +74,7 @@ kubectl get secret <service-account-secret-name> -n <namespace> -o yaml
 ### Service account approach for arc cluster
 
 ```yaml
-- uses: azure/k8s-set-context@v2
+- uses: azure/k8s-set-context@v4
   with:
      method: service-account
      cluster-type: arc
@@ -86,7 +86,7 @@ kubectl get secret <service-account-secret-name> -n <namespace> -o yaml
 ### Service principal approach for arc cluster
 
 ```yaml
-- uses: azure/k8s-set-context@v2
+- uses: azure/k8s-set-context@v4
   with:
      method: service-principal
      cluster-type: arc

action.yml

@@ -13,6 +13,10 @@ inputs:
    kubeconfig:
       description: 'Contents of kubeconfig file'
       required: false
+   kubeconfig-encoding:
+      description: 'Encoding of the kubeconfig input. Accepts "plaintext" (default) or "base64".'
+      required: false
+      default: 'plaintext'
    context:
       description: 'If your kubeconfig has multiple contexts, use this field to use a specific context, otherwise the default one would be chosen'
       required: false
@@ -35,5 +39,5 @@ inputs:
 branding:
    color: 'blue'
 runs:
-   using: 'node16'
+   using: 'node24'
-   main: 'lib/run.js'
+   main: 'lib/index.js'

jest.config.js

@@ -1,20 +0,0 @@
-module.exports = {
-   restoreMocks: true,
-   clearMocks: true,
-   resetMocks: true,
-   moduleFileExtensions: ['js', 'ts'],
-   testEnvironment: 'node',
-   testMatch: ['**/*.test.ts'],
-   transform: {
-      '^.+\\.ts$': 'ts-jest'
-   },
-   verbose: true,
-   coverageThreshold: {
-      global: {
-         branches: 0,
-         functions: 40,
-         lines: 22,
-         statements: 22
-      }
-   }
-}

package.json

@@ -1,14 +1,17 @@
 {
    "name": "k8s-set-context-action",
-   "version": "1.0.0",
+   "version": "4.0.2",
    "private": true,
-   "main": "lib/run.js",
+   "main": "lib/index.js",
+   "type": "module",
    "scripts": {
-      "build": "tsc --outDir ./lib --rootDir ./src",
+      "build": "tsc --noEmit && esbuild src/run.ts --bundle --platform=node --target=node20 --format=esm --outfile=lib/index.js --banner:js=\"import { createRequire } from 'module';const require = createRequire(import.meta.url);\"",
-      "test": "jest",
+      "typecheck": "tsc --noEmit",
-      "test-coverage": "jest --coverage",
+      "test": "vitest run",
+      "test-coverage": "vitest run --coverage",
       "format": "prettier --write .",
-      "format-check": "prettier --check ."
+      "format-check": "prettier --check .",
+      "prepare": "husky"
    },
    "keywords": [
       "actions",
@@ -18,19 +21,19 @@
    "author": "GitHub",
    "license": "MIT",
    "dependencies": {
-      "@actions/core": "^1.2.6",
+      "@actions/core": "^3.0.0",
-      "@actions/exec": "^1.0.0",
+      "@actions/exec": "^3.0.0",
-      "@actions/io": "^1.1.2",
+      "@actions/io": "^3.0.2",
-      "@kubernetes/client-node": "^0.16.0",
+      "@kubernetes/client-node": "^1.4.0",
-      "js-yaml": "^4.1.0"
+      "husky": "^9.1.7",
+      "js-yaml": "^4.1.1"
    },
    "devDependencies": {
-      "@types/jest": "^28.1.2",
+      "@types/js-yaml": "^4.0.9",
-      "@types/js-yaml": "^4.0.4",
+      "@types/node": "^25.0.9",
-      "@types/node": "^16.0.0",
+      "esbuild": "^0.27.4",
-      "jest": "^28.1.1",
+      "prettier": "^3.8.0",
-      "prettier": "2.7.1",
+      "typescript": "^6.0.2",
-      "ts-jest": "^28.0.5",
+      "vitest": "^4.1.1"
-      "typescript": "4.7.4"
    }
 }

src/action.test.ts

@@ -0,0 +1,33 @@
+import {vi, describe, it, expect} from 'vitest'
+import {getRequiredInputError} from '../tests/util.js'
+import {run} from './action.js'
+
+vi.mock('fs')
+vi.mock('./utils.js')
+
+describe('Run', () => {
+   it('throws error without cluster type', async () => {
+      await expect(run()).rejects.toThrow(getRequiredInputError('cluster-type'))
+   })
+
+   it('writes kubeconfig and sets context', async () => {
+      const {getKubeconfig, setContext} = await import('./utils.js')
+      const fs = await import('fs')
+      const kubeconfig = 'kubeconfig'
+
+      process.env['INPUT_CLUSTER-TYPE'] = 'default'
+      process.env['RUNNER_TEMP'] = '/sample/path'
+
+      vi.mocked(getKubeconfig).mockResolvedValue(kubeconfig)
+      vi.mocked(setContext).mockReturnValue(kubeconfig)
+      vi.mocked(fs.writeFileSync).mockImplementation(() => {})
+      vi.mocked(fs.chmodSync).mockImplementation(() => {})
+
+      await run()
+
+      expect(getKubeconfig).toHaveBeenCalled()
+      expect(fs.writeFileSync).toHaveBeenCalled()
+      expect(fs.chmodSync).toHaveBeenCalled()
+      expect(setContext).toHaveBeenCalled()
+   })
+})

src/action.ts

@@ -0,0 +1,33 @@
+import * as core from '@actions/core'
+import * as path from 'path'
+import * as fs from 'fs'
+import {Cluster, parseCluster} from './types/cluster.js'
+import {setContext, getKubeconfig} from './utils.js'
+
+/**
+ * Sets the Kubernetes context based on supplied action inputs
+ */
+export async function run() {
+   // get inputs
+   const clusterType: Cluster | undefined = parseCluster(
+      core.getInput('cluster-type', {
+         required: true
+      })
+   )
+   const runnerTempDirectory: string = process.env['RUNNER_TEMP'] ?? ''
+   const kubeconfigPath: string = path.join(
+      runnerTempDirectory,
+      `kubeconfig_${Date.now()}`
+   )
+
+   // get kubeconfig and update context
+   const kubeconfig: string = await getKubeconfig(clusterType)
+   const kubeconfigWithContext: string = setContext(kubeconfig)
+
+   // output kubeconfig
+   core.debug(`Writing kubeconfig contents to ${kubeconfigPath}`)
+   fs.writeFileSync(kubeconfigPath, kubeconfigWithContext)
+   fs.chmodSync(kubeconfigPath, '600')
+   core.debug('Setting KUBECONFIG environment variable')
+   core.exportVariable('KUBECONFIG', kubeconfigPath)
+}

src/kubeconfigs/arc.test.ts

@@ -1,8 +1,11 @@
-import * as actions from '@actions/exec'
+import {vi, describe, test, it, expect, beforeEach} from 'vitest'
 import * as io from '@actions/io'
-import {getRequiredInputError} from '../../tests/util'
+import {getRequiredInputError} from '../../tests/util.js'
-import {getArcKubeconfig, KUBECONFIG_LOCATION} from './arc'
+import {getArcKubeconfig, KUBECONFIG_LOCATION} from './arc.js'
-import * as az from './azCommands'
+import * as az from './azCommands.js'
+
+vi.mock('@actions/io')
+vi.mock('./azCommands.js')
 
 describe('Arc kubeconfig', () => {
    test('it throws error without resource group', async () => {
@@ -28,11 +31,11 @@ describe('Arc kubeconfig', () => {
          process.env['INPUT_RESOURCE-GROUP'] = group
          process.env['INPUT_CLUSTER-NAME'] = name
 
-         jest.spyOn(io, 'which').mockImplementation(async () => path)
+         vi.mocked(io.which).mockResolvedValue(path)
-         jest.spyOn(az, 'runAzCliCommand').mockImplementation(async () => {})
+         vi.mocked(az.runAzCliCommand).mockResolvedValue(undefined)
-         jest
+         vi.mocked(az.runAzKubeconfigCommandBlocking).mockResolvedValue(
-            .spyOn(az, 'runAzKubeconfigCommandBlocking')
+            kubeconfig
-            .mockImplementation(async () => kubeconfig)
+         )
       })
 
       it('throws an error without method', async () => {

src/kubeconfigs/arc.ts

@@ -1,8 +1,8 @@
 import * as core from '@actions/core'
 import * as io from '@actions/io'
-import {Method, parseMethod} from '../types/method'
+import {Method, parseMethod} from '../types/method.js'
 import * as path from 'path'
-import {runAzCliCommand, runAzKubeconfigCommandBlocking} from './azCommands'
+import {runAzCliCommand, runAzKubeconfigCommandBlocking} from './azCommands.js'
 
 const RUNNER_TEMP: string = process.env['RUNNER_TEMP'] || ''
 export const KUBECONFIG_LOCATION: string = path.join(

src/kubeconfigs/azCommands.test.ts

@@ -1,14 +1,17 @@
+import {vi, describe, test, expect, beforeEach} from 'vitest'
 import * as actions from '@actions/exec'
-import {runAzCliCommand} from './azCommands'
+import {runAzCliCommand} from './azCommands.js'
+
+vi.mock('@actions/exec')
 
 describe('Az commands', () => {
    test('it runs an az cli command', async () => {
       const path = 'path'
       const args = ['args']
 
-      jest.spyOn(actions, 'exec').mockImplementation(async () => 0)
+      vi.mocked(actions.exec).mockResolvedValue(0)
 
-      expect(await runAzCliCommand(path, args))
+      await runAzCliCommand(path, args)
-      expect(actions.exec).toBeCalledWith(path, args, {})
+      expect(actions.exec).toHaveBeenCalledWith(path, args, {})
    })
 })

src/kubeconfigs/azCommands.ts

@@ -1,6 +1,5 @@
 import * as fs from 'fs'
-import {ExecOptions} from '@actions/exec/lib/interfaces'
+import {ExecOptions, exec} from '@actions/exec'
-import {exec} from '@actions/exec'
 import {spawn} from 'child_process'
 
 const AZ_TIMEOUT_SECONDS: number = 120

src/kubeconfigs/default.test.ts

@@ -1,6 +1,7 @@
+import {vi, describe, test, expect, beforeEach, afterEach} from 'vitest'
 import * as fs from 'fs'
-import {getRequiredInputError} from '../../tests/util'
+import {getRequiredInputError} from '../../tests/util.js'
-import {createKubeconfig, getDefaultKubeconfig} from './default'
+import {createKubeconfig, getDefaultKubeconfig} from './default.js'
 
 describe('Default kubeconfig', () => {
    test('it creates a kubeconfig with proper format', () => {
@@ -50,6 +51,11 @@ describe('Default kubeconfig', () => {
          process.env['INPUT_METHOD'] = 'default'
       })
 
+      afterEach(() => {
+         delete process.env['INPUT_KUBECONFIG']
+         delete process.env['INPUT_KUBECONFIG-ENCODING']
+      })
+
       test('it throws error without kubeconfig', () => {
          expect(() => getDefaultKubeconfig()).toThrow(
             getRequiredInputError('kubeconfig')
@@ -62,6 +68,33 @@ describe('Default kubeconfig', () => {
 
          expect(getDefaultKubeconfig()).toBe(kc)
       })
+
+      test('returns kubeconfig as plaintext when encoding is plaintext', () => {
+         const kc = 'example kc'
+         process.env['INPUT_KUBECONFIG'] = kc
+         process.env['INPUT_KUBECONFIG-ENCODING'] = 'plaintext'
+
+         expect(getDefaultKubeconfig()).toBe(kc)
+      })
+
+      test('it gets default config through base64 kubeconfig input', () => {
+         const kc = 'example kc'
+         const base64Kc = Buffer.from(kc, 'utf-8').toString('base64')
+         process.env['INPUT_KUBECONFIG'] = base64Kc
+         process.env['INPUT_KUBECONFIG-ENCODING'] = 'base64'
+
+         expect(getDefaultKubeconfig()).toBe(kc)
+      })
+
+      test('it throws error for unknown kubeconfig-encoding', () => {
+         const kc = 'example kc'
+         process.env['INPUT_KUBECONFIG'] = kc
+         process.env['INPUT_KUBECONFIG-ENCODING'] = 'foobar'
+
+         expect(() => getDefaultKubeconfig()).toThrow(
+            "Invalid kubeconfig-encoding: 'foobar'. Must be 'plaintext' or 'base64'."
+         )
+      })
    })
 
    test('it defaults to default method', () => {

src/kubeconfigs/default.ts

@@ -1,8 +1,8 @@
 import * as core from '@actions/core'
 import * as jsyaml from 'js-yaml'
 import {KubeConfig} from '@kubernetes/client-node'
-import {K8sSecret, parseK8sSecret} from '../types/k8sSecret'
+import {K8sSecret, parseK8sSecret} from '../types/k8sSecret.js'
-import {Method, parseMethod} from '../types/method'
+import {Method, parseMethod} from '../types/method.js'
 
 /**
  * Gets the kubeconfig based on provided method for a default Kubernetes cluster
@@ -44,7 +44,27 @@ export function getDefaultKubeconfig(): string {
       }
       default: {
          core.debug('Setting context using kubeconfig')
-         return core.getInput('kubeconfig', {required: true})
+         enum Encoding {
+            Base64 = 'base64',
+            Plaintext = 'plaintext'
+         }
+
+         const rawKubeconfig = core.getInput('kubeconfig', {required: true})
+         const encoding =
+            core.getInput('kubeconfig-encoding')?.toLowerCase() ||
+            Encoding.Plaintext
+
+         if (encoding !== Encoding.Base64 && encoding !== Encoding.Plaintext) {
+            throw new Error(
+               `Invalid kubeconfig-encoding: '${encoding}'. Must be 'plaintext' or 'base64'.`
+            )
+         }
+         const kubeconfig =
+            encoding === Encoding.Base64
+               ? Buffer.from(rawKubeconfig, 'base64').toString('utf-8')
+               : rawKubeconfig
+
+         return kubeconfig
       }
    }
 }

src/run.test.ts

@@ -1,30 +0,0 @@
-import {getRequiredInputError} from '../tests/util'
-import {run} from './run'
-import fs from 'fs'
-import * as utils from './utils'
-
-describe('Run', () => {
-   it('throws error without cluster type', async () => {
-      await expect(run()).rejects.toThrow(getRequiredInputError('cluster-type'))
-   })
-
-   it('writes kubeconfig and sets context', async () => {
-      const kubeconfig = 'kubeconfig'
-
-      process.env['INPUT_CLUSTER-TYPE'] = 'default'
-      process.env['RUNNER_TEMP'] = '/sample/path'
-
-      jest
-         .spyOn(utils, 'getKubeconfig')
-         .mockImplementation(async () => kubeconfig)
-      jest.spyOn(fs, 'writeFileSync').mockImplementation(() => {})
-      jest.spyOn(fs, 'chmodSync').mockImplementation(() => {})
-      jest.spyOn(utils, 'setContext').mockImplementation(() => kubeconfig)
-
-      expect(await run())
-      expect(utils.getKubeconfig).toHaveBeenCalled()
-      expect(fs.writeFileSync).toHaveBeenCalled()
-      expect(fs.chmodSync).toHaveBeenCalled()
-      expect(utils.setContext).toHaveBeenCalled()
-   })
-})

src/run.ts

@@ -1,36 +1,5 @@
+import {run} from './action.js'
 import * as core from '@actions/core'
-import * as path from 'path'
-import * as fs from 'fs'
-import {Cluster, parseCluster} from './types/cluster'
-import {setContext, getKubeconfig} from './utils'
-
-/**
- * Sets the Kubernetes context based on supplied action inputs
- */
-export async function run() {
-   // get inputs
-   const clusterType: Cluster | undefined = parseCluster(
-      core.getInput('cluster-type', {
-         required: true
-      })
-   )
-   const runnerTempDirectory: string = process.env['RUNNER_TEMP']
-   const kubeconfigPath: string = path.join(
-      runnerTempDirectory,
-      `kubeconfig_${Date.now()}`
-   )
-
-   // get kubeconfig and update context
-   const kubeconfig: string = await getKubeconfig(clusterType)
-   const kubeconfigWithContext: string = setContext(kubeconfig)
-
-   // output kubeconfig
-   core.debug(`Writing kubeconfig contents to ${kubeconfigPath}`)
-   fs.writeFileSync(kubeconfigPath, kubeconfigWithContext)
-   fs.chmodSync(kubeconfigPath, '600')
-   core.debug('Setting KUBECONFIG environment variable')
-   core.exportVariable('KUBECONFIG', kubeconfigPath)
-}
 
 // Run the application
 run().catch(core.setFailed)

src/types/cluster.test.ts

@@ -1,8 +1,9 @@
-import {Cluster, parseCluster} from './cluster'
+import {describe, test, expect} from 'vitest'
+import {Cluster, parseCluster} from './cluster.js'
 
 describe('Cluster type', () => {
    test('it has required values', () => {
-      const vals = <any>Object.values(Cluster)
+      const vals = Object.values(Cluster) as string[]
       expect(vals.includes('arc')).toBe(true)
       expect(vals.includes('generic')).toBe(true)
    })

src/types/cluster.ts

@@ -8,9 +8,10 @@ export enum Cluster {
  * @param str The cluster type (case insensitive)
  * @returns The Cluster enum or undefined if it can't be parsed
  */
-export const parseCluster = (str: string): Cluster | undefined =>
+export const parseCluster = (str: string): Cluster | undefined => {
-   Cluster[
+   const key = Object.keys(Cluster).find(
-      Object.keys(Cluster).filter(
+      (k) =>
-         (k) => Cluster[k].toString().toLowerCase() === str.toLowerCase()
+         Cluster[k as keyof typeof Cluster].toLowerCase() === str.toLowerCase()
-      )[0] as keyof typeof Cluster
+   ) as keyof typeof Cluster | undefined
-   ]
+   return key !== undefined ? Cluster[key] : undefined
+}

src/types/k8sSecret.test.ts

@@ -1,4 +1,5 @@
-import {parseK8sSecret, K8sSecret} from './k8sSecret'
+import {describe, test, expect} from 'vitest'
+import {parseK8sSecret} from './k8sSecret.js'
 
 describe('K8sSecret type', () => {
    describe('Parsing from any', () => {

src/types/method.test.ts

@@ -1,8 +1,9 @@
-import {Method, parseMethod} from './method'
+import {describe, test, expect} from 'vitest'
+import {Method, parseMethod} from './method.js'
 
 describe('Method type', () => {
    test('it has required values', () => {
-      const vals = <any>Object.values(Method)
+      const vals = Object.values(Method) as string[]
       expect(vals.includes('kubeconfig')).toBe(true)
       expect(vals.includes('service-account')).toBe(true)
       expect(vals.includes('service-principal')).toBe(true)

src/types/method.ts

@@ -9,9 +9,10 @@ export enum Method {
  * @param str The method (case insensitive)
  * @returns The Method enum or undefined if it can't be parsed
  */
-export const parseMethod = (str: string): Method | undefined =>
+export const parseMethod = (str: string): Method | undefined => {
-   Method[
+   const key = Object.keys(Method).find(
-      Object.keys(Method).filter(
+      (k) =>
-         (k) => Method[k].toString().toLowerCase() === str.toLowerCase()
+         Method[k as keyof typeof Method].toLowerCase() === str.toLowerCase()
-      )[0] as keyof typeof Method
+   ) as keyof typeof Method | undefined
-   ]
+   return key !== undefined ? Method[key] : undefined
+}

src/utils.test.ts

@@ -1,25 +1,26 @@
+import {vi, describe, test, expect} from 'vitest'
 import fs from 'fs'
-import * as arc from './kubeconfigs/arc'
+import * as arc from './kubeconfigs/arc.js'
-import * as def from './kubeconfigs/default'
+import * as def from './kubeconfigs/default.js'
-import {Cluster} from './types/cluster'
+import {Cluster} from './types/cluster.js'
-import {getKubeconfig, setContext} from './utils'
+import {getKubeconfig, setContext} from './utils.js'
 
 describe('Utils', () => {
    describe('get kubeconfig', () => {
       test('it gets arc kubeconfig when type is arc', async () => {
          const arcKubeconfig = 'arckubeconfig'
-         jest
+         vi.spyOn(arc, 'getArcKubeconfig').mockImplementation(
-            .spyOn(arc, 'getArcKubeconfig')
+            async () => arcKubeconfig
-            .mockImplementation(async () => arcKubeconfig)
+         )
 
          expect(await getKubeconfig(Cluster.ARC)).toBe(arcKubeconfig)
       })
 
       test('it defaults to default kubeconfig', async () => {
          const defaultKubeconfig = 'arckubeconfig'
-         jest
+         vi.spyOn(def, 'getDefaultKubeconfig').mockImplementation(
-            .spyOn(def, 'getDefaultKubeconfig')
+            () => defaultKubeconfig
-            .mockImplementation(() => defaultKubeconfig)
+         )
 
          expect(await getKubeconfig(undefined)).toBe(defaultKubeconfig)
          expect(await getKubeconfig(Cluster.GENERIC)).toBe(defaultKubeconfig)

src/utils.ts

@@ -1,9 +1,9 @@
 import * as core from '@actions/core'
 import * as fs from 'fs'
 import {KubeConfig} from '@kubernetes/client-node'
-import {getDefaultKubeconfig} from './kubeconfigs/default'
+import {getDefaultKubeconfig} from './kubeconfigs/default.js'
-import {getArcKubeconfig} from './kubeconfigs/arc'
+import {getArcKubeconfig} from './kubeconfigs/arc.js'
-import {Cluster} from './types/cluster'
+import {Cluster} from './types/cluster.js'
 
 /**
  * Gets the kubeconfig based on Kubernetes cluster type

tsconfig.json

@@ -1,8 +1,14 @@
 {
    "compilerOptions": {
-      "target": "ES6",
+      "target": "ES2020",
-      "module": "commonjs",
+      "module": "NodeNext",
-      "esModuleInterop": true
+      "moduleResolution": "NodeNext",
+      "rootDir": "./src",
+      "outDir": "./lib",
+      "noImplicitAny": false,
+      "skipLibCheck": true,
+      "noEmit": true,
+      "types": ["node", "vitest/globals"]
    },
-   "exclude": ["node_modules", "tests", "src/**/*.test.ts"]
+   "exclude": ["node_modules", "**/*.test.ts", "vitest.config.ts", "tests/"]
 }

vitest.config.ts

@@ -0,0 +1,10 @@
+import {defineConfig} from 'vitest/config'
+
+export default defineConfig({
+   test: {
+      globals: true,
+      environment: 'node',
+      include: ['**/*.test.ts'],
+      clearMocks: true
+   }
+})