Merge pull request #332 from mlcommons/implement-ksm

Fetch PAT with KSM in sync.yml

Per Arjun.. This PR from Nathan is required to sync the power checker to the inference repository.  Has been verified by Arjun.

Author: araghun

.github/workflows/inference_power_workflow.yaml

@@ -27,10 +27,17 @@ jobs:
         python3 -m pip install --upgrade pip
         python3 -m pip install cm4mlops
         cm run script --quiet --tags=get,sys-utils-cm
- 
+
+    - name: Retrieve secrets from Keeper
+      id: ksecrets
+      uses: Keeper-Security/ksm-action@master
+      with:
+        keeper-secret-config: ${{ secrets.KSM_CONFIG }}
+        secrets: |-
+          cAEVIvfzh_W2DWjhDoGiQQ/field/Access Token > env:ACCESS_TOKEN
     - name: Start power server
       run: |
-        cm run script --tags=run,mlperf,power,server --device_type=0 --screen=yes --quiet --env.CM_GH_TOKEN=${{ secrets.ACCESS_TOKEN }}
+        cm run script --tags=run,mlperf,power,server --device_type=0 --screen=yes --quiet --env.CM_GH_TOKEN=${{ env.ACCESS_TOKEN }}  # Use PAT fetched from Keeper
 
     - name: Test CM Script for MLPerf Inference ResNet50 with power
       run: |

.github/workflows/sync.yml

@@ -11,9 +11,16 @@ jobs:
     steps:
       - name: Checkout Repository
         uses: actions/checkout@master
+      - name: Retrieve secrets from Keeper
+        id: ksecrets
+        uses: Keeper-Security/ksm-action@master
+        with:
+          keeper-secret-config: ${{ secrets.KSM_CONFIG }}
+          secrets: |-
+            oISGH1N1wIEirucX9m5ung/field/Access Token > env:INFERENCE_ACCESS_TOKEN 
       - name: Run GitHub File Sync
         uses: BetaHuhn/repo-file-sync-action@v1
         with:
-          GH_PAT: ${{ secrets.INFERENCE_ACCESS_TOKEN }}
+          GH_PAT: ${{ env.INFERENCE_ACCESS_TOKEN }}  # Use PAT fetched from Keeper
           TEAM_REVIEWERS: wg-inference
           SKIP_PR: false