KubeVirt CI Prow transition to GitHub App credentials

[Denis Ollier Pinas]

Hi KubeVirt contributors,

The KubeVirt CI maintenance team is preparing to modernize the Prow deployment in order to replace authentication via a bot account token with GitHub App credentials.

From the user's perspective, everything should be transparent. The only difference you should notice is that GitHub actions will be executed by the KubeVirt Prow application instead of the kubevirt-bot user.

GitHub App is the recommended and documented authentication method by the Prow project since a few years (https://github.com/kubernetes/test-infra/pull/23630).

It should provide several benefits

- improve the granularity of permissions
- increase of API quotas

- align with upstream deployment manifests

Note that some components will continue to use a bot token (for example, the cherry-picker plugin that uses forks).

To minimize the risk of unforeseen issues, the transition will be carried out very gradually, component by component, plugin by plugin...

In addition, several rehearsals will be performed on a test environment but it cannot cover all the workflows and cannot fully replicate the production environment.

As a result, the transition period could last for a long time.

Don't hesitate to reach us if you have any concerns.

Best Regards.