f0aaa6e2c1
This commit adds write-all permissions to the get-version and deploy jobs in the deploy workflow. This allows the workflow to properly interact with the repository for versioning and deployment tasks.
55 lines
1.9 KiB
YAML
55 lines
1.9 KiB
YAML
name: Deploy Python Application
|
|
|
|
on:
|
|
pull_request:
|
|
types:
|
|
- closed
|
|
branches:
|
|
- main
|
|
|
|
jobs:
|
|
get-version:
|
|
name: Determine Next Version
|
|
runs-on: ubuntu-latest
|
|
permissions: write-all
|
|
if: github.event.pull_request.merged == true
|
|
outputs:
|
|
version: ${{ steps.version.outputs.next_version }}
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Determine next version
|
|
id: version
|
|
uses: Aignosi/github_workflow_templates/.github/actions/determine-next-version@main
|
|
with:
|
|
branch_name: ${{ github.event.pull_request.head.ref }}
|
|
|
|
deploy:
|
|
name: Deploy
|
|
needs: [get-version]
|
|
permissions: write-all
|
|
uses: Aignosi/github_workflow_templates/.github/workflows/reusable-deploy.yml@feature/SIENTIAPDE-1352
|
|
with:
|
|
version: ${{ needs.get-version.outputs.version }}
|
|
project_type: 'python'
|
|
image_name: 'sientia-dataops-model-manager'
|
|
helm_chart_path: 'sientia-module'
|
|
helm_release_name: 'sientia-dataops-model-manager'
|
|
helm_namespace: 'sientia'
|
|
app_owner: 'Aignosi'
|
|
private_repos: 'sientia-dataops-library'
|
|
helm_repo_name: 'sientia'
|
|
helm_repo_url: 'https://raw.githubusercontent.com/Aignosi/sientia-dataops-helm-repo/refs/heads/main/'
|
|
helm_chart_version: '0.6.0'
|
|
helm_values_file: './values.yaml'
|
|
secrets:
|
|
AZURE_CREDENTIALS: ${{ secrets.AZURE_CREDENTIALS }}
|
|
REGISTRY_LOGIN_SERVER: ${{ secrets.REGISTRY_LOGIN_SERVER }}
|
|
REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
|
|
REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
|
|
SUSE_RKE2_KUBE_CONFIG: ${{ secrets.SUSE_RKE2_KUBE_CONFIG }}
|
|
CI_DEPS_APP_ID: ${{ secrets.CI_DEPS_APP_ID }}
|
|
CI_DEPS_PRIVATE_KEY: ${{ secrets.CI_DEPS_PRIVATE_KEY }}
|
|
HELM_REPO_USERNAME: ${{ secrets.HELM_REPO_USERNAME }}
|
|
HELM_REPO_PASSWORD: ${{ secrets.HELM_REPO_PASSWORD }}
|