fix(router): abort router-transform on proactive invalid_grant instead of retrying (INT-6779) #26213
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: builds | |
| on: | |
| release: | |
| types: [ created ] | |
| push: | |
| branches: | |
| - master | |
| - main | |
| pull_request: | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.head_ref || github.sha }} | |
| cancel-in-progress: true | |
| permissions: | |
| id-token: write # allows the JWT to be requested from GitHub's OIDC provider | |
| contents: read # This is required for actions/checkout | |
| jobs: | |
| oss: | |
| uses: ./.github/workflows/docker-build-dockerhub.yml | |
| with: | |
| image_names: | | |
| ["rudderlabs/develop-rudder-server", "rudderlabs/rudder-server,enable=${{ github.ref == 'refs/heads/master' || github.event_name == 'release' }}"] | |
| dockerfile: Dockerfile | |
| tags: | | |
| type=ref,event=branch | |
| type=raw,value=1-alpine,enable=${{ github.event_name == 'release' && !github.event.release.prerelease }} | |
| type=raw,value=latest,enable=${{ github.event_name == 'release' && !github.event.release.prerelease }} | |
| type=raw,value=pr-${{ github.event.pull_request.number }},enable=${{ github.event_name == 'pull_request' }} | |
| type=semver,pattern={{version}} | |
| type=semver,pattern={{major}}.{{minor}} | |
| type=semver,pattern={{major}} | |
| secrets: | |
| DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }} | |
| DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }} | |
| enterprise-ecr: | |
| uses: ./.github/workflows/docker-build-ecr.yml | |
| with: | |
| image_names: | | |
| ["rudderstack/develop-rudder-server-enterprise", "rudderstack/rudder-server-enterprise,enable=${{ github.ref == format('refs/heads/{0}', 'master') || github.event_name == 'release' }}"] | |
| dockerfile: Dockerfile | |
| tags: | | |
| type=ref,event=branch | |
| type=raw,value=latest,enable=${{ github.event_name == 'release' }} | |
| type=raw,value=pr-${{ github.event.pull_request.number }},enable=${{ github.event_name == 'pull_request' }} | |
| type=semver,pattern={{version}} | |
| type=semver,pattern={{major}}.{{minor}} | |
| type=semver,pattern={{major}} | |
| aws_ecr_iam_role_arn: ${{ vars.AWS_ECR_IAM_ROLE_ARN }} | |
| aws_ecr_region: ${{ vars.AWS_ECR_REGION }} | |
| secrets: | |
| ENTERPRISE_TOKEN: ${{ secrets.ENTERPRISE_TOKEN }} | |
| enterprise-ecr-race: | |
| uses: ./.github/workflows/docker-build-ecr.yml | |
| with: | |
| image_names: | | |
| ["rudderstack/develop-rudder-server-enterprise", "rudderstack/rudder-server-enterprise,enable=${{ github.ref == 'refs/heads/master' || github.event_name == 'release' }}"] | |
| dockerfile: Dockerfile | |
| tags: | | |
| type=ref,event=branch,suffix=-race | |
| type=raw,value=pr-${{ github.event.pull_request.number }}-race,enable=${{ github.event_name == 'pull_request' }} | |
| type=semver,pattern={{version}}-race | |
| type=semver,pattern={{major}}.{{minor}}-race | |
| aws_ecr_iam_role_arn: ${{ vars.AWS_ECR_IAM_ROLE_ARN }} | |
| aws_ecr_region: ${{ vars.AWS_ECR_REGION }} | |
| race: true | |
| secrets: | |
| ENTERPRISE_TOKEN: ${{ secrets.ENTERPRISE_TOKEN }} | |
| sbsvc-ecr: | |
| uses: ./.github/workflows/docker-build-ecr.yml | |
| with: | |
| image_names: | | |
| ["rudderstack/develop-suppression-backup-service", "rudderstack/suppression-backup-service,enable=${{ github.ref == 'refs/heads/master' || github.event_name == 'release' }}"] | |
| dockerfile: ./suppression-backup-service/Dockerfile | |
| tags: | | |
| type=ref,event=branch | |
| type=raw,value=latest,enable=${{ github.event_name == 'release' }} | |
| type=raw,value=pr-${{ github.event.pull_request.number }},enable=${{ github.event_name == 'pull_request' }} | |
| type=semver,pattern={{version}} | |
| type=semver,pattern={{major}}.{{minor}} | |
| type=semver,pattern={{major}} | |
| aws_ecr_iam_role_arn: ${{ vars.AWS_ECR_IAM_ROLE_ARN }} | |
| aws_ecr_region: ${{ vars.AWS_ECR_REGION }} | |
| dispatch-release: | |
| if: github.event_name == 'release' | |
| needs: [enterprise-ecr, enterprise-ecr-race, sbsvc-ecr] | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - name: Extract release version | |
| id: extract_version | |
| shell: bash | |
| env: | |
| TAG_NAME: ${{ github.event.release.tag_name }} | |
| run: | | |
| version="${TAG_NAME#v}" | |
| echo "version=${version}" >> $GITHUB_OUTPUT | |
| - name: Create app token for cross-repo dispatch | |
| id: app-dispatch-token | |
| uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 | |
| with: | |
| app-id: ${{ vars.RELEASE_APP_ID }} | |
| private-key: ${{ secrets.RELEASE_PRIVATE_KEY }} | |
| permission-contents: write | |
| repositories: rudderstack-operator,rudder-devops | |
| - name: Trigger dispatch event - Enterprise | |
| if: ${{ !github.event.release.prerelease }} | |
| uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 # v3.0.0 | |
| with: | |
| token: ${{ steps.app-dispatch-token.outputs.token }} | |
| repository: rudderlabs/rudderstack-operator | |
| event-type: release-rudder-server | |
| client-payload: | | |
| { | |
| "version": "${{ steps.extract_version.outputs.version }}", | |
| "deployment": "enterprise" | |
| } | |
| - name: Trigger dispatch event - Multitenant | |
| if: ${{ !github.event.release.prerelease }} | |
| uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 # v3.0.0 | |
| with: | |
| token: ${{ steps.app-dispatch-token.outputs.token }} | |
| repository: rudderlabs/rudderstack-operator | |
| event-type: release-rudder-server | |
| client-payload: | | |
| { | |
| "version": "${{ steps.extract_version.outputs.version }}", | |
| "deployment": "multitenant" | |
| } | |
| - name: Trigger dispatch event - Hosted | |
| uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 # v3.0.0 | |
| with: | |
| token: ${{ steps.app-dispatch-token.outputs.token }} | |
| repository: rudderlabs/rudder-devops | |
| event-type: release-server-hosted | |
| client-payload: | | |
| { | |
| "version": "${{ steps.extract_version.outputs.version }}" | |
| } | |
| - name: Trigger dispatch event - Staging | |
| if: ${{ github.event.release.prerelease }} | |
| uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 # v3.0.0 | |
| with: | |
| token: ${{ steps.app-dispatch-token.outputs.token }} | |
| repository: rudderlabs/rudderstack-operator | |
| event-type: release-rudder-server | |
| client-payload: | | |
| { | |
| "version": "${{ steps.extract_version.outputs.version }}", | |
| "deployment": "staging" | |
| } |