From 85fe4663b1ae6331b53948a1d2a7683ba0f4420b Mon Sep 17 00:00:00 2001
From: Bruno Domingues <bruno.domingues@aignosi.com.br>
Date: Fri, 11 Sep 2026 10:36:06 -0300
Subject: [PATCH] SIENTIAPDE-2068: feat(cicd): migrate laborious-worker deploy
 to Flow B (legacy only)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Delete release.yml (tarball-only, no deploy job).
- Add deploy.yml calling reusable-deploy-dataops.yml, bumping only the
  legacy runtime's GITHUB_BRANCH via the new profile/profile_env_list_path
  mechanism — basic is left untouched for now. workflow_dispatch has no
  inputs.
- Add require-chart-ref-label.yml.
---
 .github/workflows/deploy.yml                  | 35 +++++++++++++++++++
 .github/workflows/release.yml                 | 25 -------------
 .github/workflows/require-chart-ref-label.yml | 16 +++++++++
 3 files changed, 51 insertions(+), 25 deletions(-)
 create mode 100644 .github/workflows/deploy.yml
 delete mode 100644 .github/workflows/release.yml
 create mode 100644 .github/workflows/require-chart-ref-label.yml

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
new file mode 100644
index 0000000..a0451c9
--- /dev/null
+++ b/.github/workflows/deploy.yml
@@ -0,0 +1,35 @@
+name: Deploy DataOps Worker
+
+on:
+  pull_request:
+    types: [closed]
+    branches: [main, 'release/**', 'feature/**']
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  id-token: write
+  pull-requests: read
+
+jobs:
+  deploy:
+    name: Deploy
+    if: github.event_name == 'workflow_dispatch' || github.event.pull_request.merged == true
+    uses: Aignosi/github_workflow_templates/.github/workflows/reusable-deploy-dataops.yml@main
+    with:
+      branch_name: ${{ github.event.pull_request.head.ref }}
+      project_name: 'laborious'
+      chart_name: 'laborious-worker'
+      # Only the "legacy" runtime, for now (card 13 correction) — laborious-worker has two
+      # Deployments (basic, legacy). basic's GITHUB_BRANCH lives in the chart base (.global.env)
+      # and is deliberately left untouched here. legacy's own override exists ONLY at the profile
+      # level — profiles/gcp.yaml's laborious-worker.runtimes.legacy.env, not the chart base at
+      # all — hence profile/profile_env_list_path below instead of env_list_path.
+      profile: 'gcp'
+      profile_env_list_path: '[".runtimes.legacy.env"]'
+      update_version_in: '["pyproject"]'
+      create_tarball: ${{ github.event_name == 'pull_request' }}
+      mirror: true
+      bump_chart: true
+      deploy: true
+    secrets: inherit
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
deleted file mode 100644
index e051ea9..0000000
--- a/.github/workflows/release.yml
+++ /dev/null
@@ -1,25 +0,0 @@
-name: Create Release on Merge to Main
-
-on:
-  pull_request:
-    types: [closed]
-    branches:
-      - main
-  workflow_dispatch:
-    inputs:
-      version:
-        description: 'Version to release'
-        required: false
-        type: string
-
-jobs:
-  release:
-    if: |
-      (github.event_name == 'pull_request' && github.event.pull_request.merged == true) ||
-      github.event_name == 'workflow_dispatch'
-    uses: Aignosi/github_workflow_templates/.github/workflows/dataops-module-release.yml@main
-    permissions: write-all
-    with:
-      project_name: 'laborious'
-      release_version: ${{ github.event.inputs.version || '' }}
-    secrets: inherit
\ No newline at end of file
diff --git a/.github/workflows/require-chart-ref-label.yml b/.github/workflows/require-chart-ref-label.yml
new file mode 100644
index 0000000..20f8be3
--- /dev/null
+++ b/.github/workflows/require-chart-ref-label.yml
@@ -0,0 +1,16 @@
+name: Require chart-ref label
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, labeled, unlabeled]
+    branches:
+      - main
+      - 'release/**'
+      - 'feature/**'
+
+permissions:
+  pull-requests: write
+
+jobs:
+  require-chart-ref-label:
+    uses: Aignosi/github_workflow_templates/.github/workflows/require-chart-ref-label.yml@main