Merge branch 'mnt/token' into 'master'

MNT: Job tokens don't have sufficient privileges - use dedicated API access token instead

See merge request fsl/conda/manifest-rules!15

manifest-gitlab-ci.yml

@@ -26,20 +26,31 @@ workflow:
     - when: always
 
 
-# Manifest and environment files can only be published
-# from tags, or from these branches. Attempts to run a
-# publish job from a different branch will fail.
-
-# Additionally, the test stages will only perform a
-# full test on these branches - a fast test is
-# performed on other branches. See these files for more
-# details:
-#
-#   - fsl/conda/manifest-rules:manifest_rules/test_environment.py
-#   - fsl/conda/manifest-rules:manifest_rules/deploy_files.py
 variables:
+
+  # Manifest and environment files can only be published
+  # from tags, or from these branches. Attempts to run a
+  # publish job from a different branch will fail.
+  #
+  # Additionally, the test stages will only perform a
+  # full test on these branches - a fast test is
+  # performed on other branches. See these files for more
+  # details:
+  #
+  #   - fsl/conda/manifest-rules:manifest_rules/test_environment.py
+  #   - fsl/conda/manifest-rules:manifest_rules/deploy_files.py
   PUBLISH_FROM_BRANCHES: "master external"
 
+  # The following variables must be added
+  # as GitLab CI / CD variables
+
+  # Username/password to authenticate
+  # to the internal FSL conda channel
+  FSLCONDA_USERNAME: ""
+  FSLCONDA_PASSWORD: ""
+  # GitLab API access token
+  FSL_CI_API_TOKEN:  ""
+
 
 stages:
   # Generate FSL conda environment specification

manifest_rules/__init__.py

 #!/usr/bin/env python
 
 
-__version__ = '0.3.11'
+__version__ = '0.3.12'

manifest_rules/utils.py

@@ -83,9 +83,9 @@ def get_most_recent_release():
             return len(self.components) < len(other.components)
 
     # get tag list from gitlab if possible
-    project = os.environ.get('CI_PROJECT_PATH', None)
-    server  = os.environ.get('CI_SERVER_URL',   None)
-    token   = os.environ.get('CI_JOB_TOKEN',    None)
+    project = os.environ.get('CI_PROJECT_PATH',  None)
+    server  = os.environ.get('CI_SERVER_URL',    None)
+    token   = os.environ.get('FSL_CI_API_TOKEN', None)
 
     if all ((project is not None,
              server  is not None,