Enabling GitHub Actions with Amazon S3 storage

Prerequisites

Before enabling GitHub Actions, make sure you have completed the following steps:

• Create your Amazon S3 bucket for storing artifacts generated by workflow runs. GitHub Actions 需要以下访问密钥的权限才可访问存储桶：

  • s3:PutObject
  • s3:GetObject
  • s3:ListBucketMultipartUploads
  • s3:ListMultipartUploadParts
  • s3:AbortMultipartUpload
  • s3:DeleteObject
  • s3:ListBucket
  • kms:GenerateDataKey (if Key Management Service (KMS) encryption has been enabled)

• Review the hardware requirements for GitHub Actions. For more information, see "Getting started with GitHub Actions for GitHub Enterprise Server."

• TLS must be configured for your GitHub Enterprise Server instance's domain. For more information, see "Configuring TLS."

  Note: 我们强烈建议您在 GitHub Enterprise Server 上配置 TLS，并有信任的机构签名的证书。 虽然自签名证书可以工作，但自托管的运行器需要额外的配置，不推荐用于生产环境。

• 如果您在 your GitHub Enterprise Server instance上配置了 HTTP 代理服务器 ，则必须添�  localhost 和 127.0.0.1 到 HTTP 代理排除 列表中。 有关更改代理设置的更多信息，请参阅“配置出站 Web 代理服务器”。

Enabling GitHub Actions with Amazon S3 storage

1. SSH 连接到 your GitHub Enterprise Server instance。 更多信息请参阅“访问管理 shell (SSH)。”

   $ ssh -p 122 admin@HOSTNAME

2. Run the ghe-actions-precheck command to test your blob storage configuration. 更多信息请参阅“命令行实用程序”。

3. From an administrative account on GitHub Enterprise Server, in the upper-right corner of any page, click .

   

4. If you're not already on the "Site admin" page, in the upper-left corner, click Site admin.

   

5. 在左侧边� �中，单击 管理控制台。

6. 在左侧边� �中，单击 Actions（操作）。

7. 选择 Enable GitHub Actions（启用 GitHub Actions）。

8. Under "Artifact & Log Storage", select Amazon S3, and enter your storage bucket's details:

   • AWS Service URL: The service URL for your bucket. For example, if your S3 bucket was created in the us-west-2 region, this value should be https://s3.us-west-2.amazonaws.com.

     For more information, see "AWS service endpoints" in the AWS documentation.

   • AWS S3 Bucket: The name of your S3 bucket.

   • AWS S3 Access Key and AWS S3 Secret Key: The AWS access key ID and secret key for your bucket. For more information on managing AWS access keys, see the "AWS Identity and Access Management Documentation."

   

9. 在左侧边� �下，单击 Save settings（保存设置）。

   

   Note: Saving settings in the 管理控制台 restarts system services, which could result in user-visible downtime.

10. 等待配置运行完毕。

    

Next steps

After the configuration run has successfully completed, GitHub Actions will be enabled on your GitHub Enterprise Server instance. For your next steps, such as managing GitHub Actions access permissions and adding self-hosted runners, return to "Getting started with GitHub Actions for GitHub Enterprise Server."