apunkt/omnigraph
1
0
Fork 0
mirror of https://github.com/ModernRelay/omnigraph.git synced 2026-06-09 01:35:18 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add manual-dispatch Package workflow for CodeBuild image builds

Browse source 
Invokes the shared omnigraph-package reusable workflow twice per run —
once with default features, once with --features aws — producing two
ECR tags per source commit:

  <sha>         (default features)
  <sha>-aws     (--features aws → SecretsManagerTokenSource)

Manual-dispatch only for now. Neither release.yml nor release-edge.yml
currently invokes the CodeBuild-backed packaging path; this gives
operators a way to produce on-demand image variants without wiring
packaging into the tag/push cadence.

Prerequisites:
- Repo vars AWS_REGION, AWS_ROLE_TO_ASSUME, AWS_CODEBUILD_PACKAGE_PROJECT,
  AWS_ARTIFACT_BUCKET must be set.
- Shared workflow must support the `features` and `image_tag_suffix`
  inputs.

Uses @main as the shared-workflow ref until a versioned tag is cut.
This commit is contained in:
andrew 2026-04-18 16:29:43 +03:00
parent 4c298bab12
commit 807c1ba4dc
1 changed files with 57 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

57
.github/workflows/package.yml vendored Normal file
View file

@ -0,0 +1,57 @@
name: Package
# Builds both the default and aws-feature omnigraph-server images and pushes
# them to ECR. Invoked manually via workflow_dispatch — not wired to tags or
# main pushes today.
#
# Prerequisites:
# - Repo vars AWS_REGION, AWS_ROLE_TO_ASSUME, AWS_CODEBUILD_PACKAGE_PROJECT,
# AWS_ARTIFACT_BUCKET are set.
# - The shared workflow at ModernRelay/.github supports the `features` and
# `image_tag_suffix` inputs (ModernRelay/.github PR #2 or later).
#
# Each invocation produces two ECR tags per source commit:
# - <source_sha> (default features)
# - <source_sha>-aws (--features aws)
on:
workflow_dispatch:
inputs:
source_ref:
description: Git ref to package (branch, tag, or SHA). Defaults to the workflow's own ref.
required: false
type: string
default: ""
jobs:
package_default:
name: Package default build
uses: ModernRelay/.github/.github/workflows/omnigraph-package.yml@main
permissions:
id-token: write
contents: read
attestations: write
with:
repository: ${{ github.repository }}
source_ref: ${{ inputs.source_ref != '' && inputs.source_ref || github.sha }}
aws_region: ${{ vars.AWS_REGION }}
aws_role_to_assume: ${{ vars.AWS_ROLE_TO_ASSUME }}
aws_codebuild_package_project: ${{ vars.AWS_CODEBUILD_PACKAGE_PROJECT }}
aws_artifact_bucket: ${{ vars.AWS_ARTIFACT_BUCKET }}
package_aws:
name: Package aws-feature build
uses: ModernRelay/.github/.github/workflows/omnigraph-package.yml@main
permissions:
id-token: write
contents: read
attestations: write
with:
repository: ${{ github.repository }}
source_ref: ${{ inputs.source_ref != '' && inputs.source_ref || github.sha }}
aws_region: ${{ vars.AWS_REGION }}
aws_role_to_assume: ${{ vars.AWS_ROLE_TO_ASSUME }}
aws_codebuild_package_project: ${{ vars.AWS_CODEBUILD_PACKAGE_PROJECT }}
aws_artifact_bucket: ${{ vars.AWS_ARTIFACT_BUCKET }}
features: aws
image_tag_suffix: "-aws"