OSDC: Deploy production #26
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "OSDC: Deploy production" | |
| # Manual rollout for arc-cbr-production. Protected by the `osdc-production` GitHub | |
| # environment (configure required reviewers in repo Settings → Environments) — | |
| # the prod IAM role additionally trusts only tokens with | |
| # `environment:osdc-production` in the sub claim, so IAM enforces the gate too. | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| taint_nodes: | |
| description: "Taint ARC runner nodes before deploy (graceful refresh)" | |
| required: false | |
| type: boolean | |
| default: false | |
| restart_listeners: | |
| description: "Delete and recreate ARC listeners (required when controller image changes)" | |
| required: false | |
| type: boolean | |
| default: false | |
| skip_lint_test: | |
| description: "Skip `just lint` and `just test` pre-flight checks (firefighting only)" | |
| required: false | |
| type: boolean | |
| default: false | |
| concurrency: | |
| group: osdc-deploy-arc-cbr-production | |
| cancel-in-progress: false | |
| permissions: | |
| id-token: write | |
| contents: read | |
| jobs: | |
| deploy: | |
| uses: ./.github/workflows/_osdc-deploy.yml | |
| with: | |
| cluster: arc-cbr-production | |
| environment: osdc-production | |
| taint_nodes: ${{ inputs.taint_nodes }} | |
| restart_listeners: ${{ inputs.restart_listeners }} | |
| skip_lint_test: ${{ inputs.skip_lint_test }} | |
| run_smoke: true | |
| run_compactor: false | |
| run_janitor: false | |
| run_load_test: false | |
| # secrets: inherit is required for the reusable workflow to pick up | |
| # osdc-production environment secrets (META_AWS_ACC_ID, META_AWS_DEPLOY_ROLE, | |
| # CANARY_GITHUB_TOKEN). Without it, secrets.* resolves to empty strings. | |
| secrets: inherit |