1
0
mirror of synced 2026-01-03 15:05:54 -05:00
Commit Graph

543 Commits

Author SHA1 Message Date
James M. Greene
84d61c37ef Untar, append, and retar the deployment app archive (#21690) 2021-09-23 13:52:44 -05:00
Marcelo Jacobus
e4f7746d85 Fix broken crowdin sync action (#21624) 2021-09-23 08:50:47 -07:00
James M. Greene
bb4232c87a Allow env var to expand with double quotes (#21667) 2021-09-22 17:41:58 -05:00
James M. Greene
735b84a5c2 Checkout the whole default branch for the deployment preparation job (#21664)
* Checkout the whole default branch for the deployment preparation job
2021-09-22 21:29:48 +00:00
James M. Greene
e4c120dfd1 Checkout the top-level npm package manifests before configuring npm in the staging deployment workflow (#21661) 2021-09-22 15:27:30 -05:00
James M. Greene
2929e23008 Work around Actions inability to use env. in a job-level if (#21657) 2021-09-22 14:35:36 -05:00
Robert Sese
f6d85c6d64 Security: remove Docker PR build/deploy workflows (#21599)
* Remove Docker PR build/deploy workflows

* Remove supporting Docker deploy script
2021-09-17 23:17:17 +00:00
James M. Greene
b2c8af9d31 Secure early access staging deployment (#21450)
* Explicitly ensure the early access parent directories are created when cloning

* Use explicit --file flag with tar

* Remove security hole for Staging deployment by concatenating archives

* Fail the staging builds if *.js, .npmrc, or Procfile is changed in the open source repo

* docker build: extract user-code in separate directory

* Checkout PR base branch and install dependencies

* Remove one-off package installs

* Remove selective file checkout

* Don't persist git cloning credentials

It usually makes the clone of early access content fail in the later steps

* Update .github/workflows/staging-deploy-pr-docker.yml

Co-authored-by: James M. Greene <JamesMGreene@github.com>

* Update .github/workflows/staging-deploy-pr-docker.yml

Co-authored-by: James M. Greene <JamesMGreene@github.com>

* Remove debugging step

* Best practice: Use environment variables to avoid potential injection attacks if the data was user-controlled

Co-authored-by: Mike Surowiec <mikesurowiec@users.noreply.github.com>
Co-authored-by: Robert Sese <sese@github.com>
Co-authored-by: Robert Sese <robert.sese@gmail.com>
2021-09-17 22:41:13 +00:00
James M. Greene
6586056566 Only do a Staging Docker build if the branch name starts with 'docker-' (#21589) 2021-09-17 13:15:51 -05:00
James M. Greene
84f404acff Skip deploy runs that are not associated with an open PR (#21586)
'github.event.workflow_run.pull_requests' is empty if the PR that indirectly triggered it was closed before this workflow run began
2021-09-17 17:49:54 +00:00
Ramya Parimi
5edab536d2 Merge branch 'main' into ramyaparimi/close-on-invalid-label 2021-09-16 12:16:13 -05:00
James M. Greene
f1a432c31a Add debugging into the workflow_run for staging build failure notifications (#21560) 2021-09-16 10:49:37 -05:00
Ramya Parimi
a9e6e18e5a Update close-on-invalid-label.yaml 2021-09-16 06:22:07 -05:00
James M. Greene
f8dd139a38 Don't notify of failure on canceled builds (#21544)
* Only notify for staging build failures
* Only notify of docker build failures for branches starting with 'docker-'
2021-09-15 20:50:34 +00:00
James M. Greene
1c398b9016 Notify of staging build run failures from the deploy run (#21536)
* Notify of build run failures from the deploy run
2021-09-15 19:11:10 +00:00
Robert Sese
00e6831ffb Deploy workflows fixes (#21519)
* Use built-in Actions github
* Get pull number from github context
2021-09-15 16:09:34 +00:00
James M. Greene
7ae1eea3b5 Undeploy without Environment cleanup (#21530)
* Ensure we handle multiple pages of Deployments
* Do NOT delete the Environment during undeploy
* Do NOT deploy/undeploy PRs on lock/unlock events
2021-09-15 15:11:48 +00:00
Robert Sese
e6f1e4d866 Use built-in Actions github (#21516)
* Use built-in github

* Use built-in github
2021-09-14 15:57:11 -05:00
Robert Sese
af6d11544b Missing curly (#21514) 2021-09-14 14:45:15 -05:00
Mike Surowiec
5c930af422 update docubot pat naming (#21498) 2021-09-14 12:56:07 -04:00
Mike Surowiec
cb78de81f3 update DOCS_BOT -> DOCS_BOT_FR for consistent cross repo naming (#21485) 2021-09-14 15:51:50 +00:00
Ramya Parimi
88feefdc2f Update close-on-invalid-label.yaml 2021-09-14 08:41:24 -05:00
Rachael Sewell
94e3c092d3 English search sync (#21446) 2021-09-13 17:30:08 +00:00
James M. Greene
8327079a12 Revise permissions for internal board workflow (#21440)
* Only add requests to board when workflow is run internally
* Restrict GITHUB_TOKEN permissions
2021-09-13 17:09:59 +00:00
Robert Sese
6c37f45d61 Docker image deploy: set config vars (#21365)
* Add Hydro secrets as env vars

* Set app config-vars

* Add config vars previously used via app.json
2021-09-10 21:58:49 +00:00
James M. Greene
0dfab8f3df Use @docs-bot for deployment environment cleanup (#21441)
* Restrict stale app cleanup to GITHUB_TOKEN
* Use DOCS_BOT token for stale environment cleanup
2021-09-10 16:47:39 -05:00
James M. Greene
a436395a55 Skip staging deployments for closed PRs (#21425) 2021-09-10 19:47:35 +00:00
James M. Greene
a85a08cb30 Explicitly state Staging workflow permissions (#21428)
* Remove use of Secrets in Staging Build workflows... the open source repo cannot allow them for forked PRs

* Add explicit permissions matrices for all Staging workflows
2021-09-10 19:17:47 +00:00
James M. Greene
b507b67493 Script+workflow to remove stale staging deployment environments (#21399)
* Add a script to remove stale staging deployment environments from GitHub
* Add second job to cleanup GitHub deployment environments
* Specify GITHUB_TOKEN permissions matrix
* Stop marking staging deployments as transient
* Update staging undeployment mechanism to clean-up deployment environments on PR merge
* Define a stale PR as one that was merged or has been closed for more than 2 hours
* Rename workflow file
2021-09-10 14:43:01 +00:00
Ramya Parimi
600590728a Merge branch 'main' into ramyaparimi/close-on-invalid-label 2021-09-10 06:43:18 -05:00
Rachael Sewell
55397df156 update status for deploy timeout (#21349) 2021-09-09 23:13:57 +00:00
Robert Sese
d1ecb446d7 Scale after image release (#21398) 2021-09-09 20:08:28 +00:00
Sarah Edwards
869631cd37 Increase workflow frequency (#21389) 2021-09-09 18:55:29 +00:00
Rachael Sewell
7741796956 Update repo-freeze-reminders.yml (#21387) 2021-09-09 17:25:33 +00:00
Robert Sese
87db4aee2f Docker image deploy: scale Heroku app size (#21369)
* Scale Heroku app size

* Make Heroku key a job level env var
2021-09-09 17:17:17 +00:00
Rachael Sewell
4afdd80f2d Update sync-search-indices.yml (#21375) 2021-09-08 19:59:19 -07:00
Rachael Sewell
038cba325f observer FREEZE variable in search sync workflow (#21372) 2021-09-08 14:58:34 -07:00
Ramya Parimi
1c2c440b1a fix pr close 2021-09-08 10:50:28 -05:00
Mike Surowiec
3c0e4e03b8 fix: pin workflow node-version to 16.8.x (#21361) 2021-09-08 11:08:53 -04:00
Robert Sese
2af1259f27 Docker image deploy fixes: more timeout minutes, Heroku API secret name (#21344)
* Increase timeout-minutes

* Fix secret name
2021-09-07 15:53:13 -04:00
Robert Sese
e4109e5561 Set env vars for image deploy (#21340)
* Set necessary env variables

* Don't need PR_URL
2021-09-07 18:03:20 +00:00
Matt Pollard
586133a2ac Remove old broken link report from Docs Content's first responder project board (#21325) 2021-09-07 17:16:55 +00:00
Ramya Parimi
b4b2a3ae08 Merge branch 'main' into ramyaparimi/close-on-invalid-label 2021-09-07 10:49:24 -05:00
Ramya Parimi
60fdce01a6 Update .github/workflows/close-on-invalid-label.yaml
Co-authored-by: James M. Greene <JamesMGreene@github.com>
2021-09-07 10:28:06 -05:00
Ramya Parimi
9e00885199 Update .github/workflows/close-on-invalid-label.yaml
Co-authored-by: James M. Greene <JamesMGreene@github.com>
2021-09-07 10:27:37 -05:00
Ramya Parimi
5e9f566e82 Merge branch 'ramyaparimi/close-on-invalid-label' of https://github.com/github/docs-internal into ramyaparimi/close-on-invalid-label 2021-09-07 10:26:24 -05:00
Ramya Parimi
c4d099e292 prettier 2021-09-07 10:24:36 -05:00
Ramya Parimi
846dac866c Update .github/workflows/close-on-invalid-label.yaml
Co-authored-by: James M. Greene <JamesMGreene@github.com>
2021-09-07 10:23:46 -05:00
Robert Sese
060119bdd7 Require helper scripts (#21322) 2021-09-07 10:07:02 -05:00
Ramya Parimi
9aa2880ddf Update .github/workflows/close-on-invalid-label.yaml
Co-authored-by: Steve Guntrip <12534592+stevecat@users.noreply.github.com>
2021-09-07 06:39:09 -05:00