Skip to content

Conversation

@brucehoff
Copy link
Contributor

@brucehoff brucehoff commented Sep 16, 2025

OIDC integration allowing developer forks of Synapse repo to access Synapse dev' account

depends on Sage-Bionetworks/aws-infra#437 and assumes a tag on that repo' of v0.10.4

@brucehoff brucehoff requested a review from a team as a code owner September 16, 2025 23:46
@dpulls
Copy link

dpulls bot commented Sep 16, 2025

⚠️ Dpulls not installed on repository sage-bionetworks/aws-infra. Checkout our quickstart for how to install.

1 similar comment
@dpulls
Copy link

dpulls bot commented Sep 16, 2025

⚠️ Dpulls not installed on repository sage-bionetworks/aws-infra. Checkout our quickstart for how to install.

- owner: "Sage-Bionetworks"
name: "Synapse-Repository-Services"
branches: ["*"]
- owner: "brucehoff"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do developers need to deploy from their forks? Could each developer have a branch on the origin repo instead?

Also, I don't know much about the platform build process, but if these are all deploying to the same EC2 then I worry about developers breaking the build with parallel deploys, or one failed build blocking all other developers.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@ConsoleCatzirl Great questions. The goal is NOT to deploy infrastructure (though there are AWS elements deployed along the way) but rather to run a build in AWS CodePipeline. I.e. the GitHub workflow-based builds, run in developer's forks prior to opening a PR, will be run in CodePipeline instead of on the old Jenkins server. With that understanding here are the answers to your questions:

Do developers need to deploy from their forks?

Developers will we running builds on their forks prior to creating pull requests. To do this, the GitHub workflow needs to create a CodePipeline and also to run a private copy of the Synapse back end, using the Synapse Stack Builder. So developers will be "deploying from their forks" only those AWS elements needed to run their builds.

Could each developer have a branch on the origin repo instead?

The use is for running builds prior to creating a PR or merging into the origin (upstream ) repo'.

if these are all deploying to the same EC2...

Each of the parallel builds will use private/dedicated AWS elements (a dedicated CodePipeline and a dedicated copy of the Synapse back end). Using dedicated copies of the Synapse back end is the team's approach to running builds today.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah, thanks, this makes a lot more sense knowing that it's running a build in CodePipeline.

@ConsoleCatzirl ConsoleCatzirl requested a review from a team September 17, 2025 18:12
- owner: "Sage-Bionetworks"
name: "Synapse-Repository-Services"
branches: ["*"]
- owner: "brucehoff"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah, thanks, this makes a lot more sense knowing that it's running a build in CodePipeline.

@brucehoff brucehoff merged commit 0ba7f60 into Sage-Bionetworks-IT:master Sep 17, 2025
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants