-
Notifications
You must be signed in to change notification settings - Fork 11
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
To main #816
Conversation
Bug fix "Cannot read properties of null (reading 'login')" in mips de…
Use Docker and deploy to Staging K8s
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Requesting changes since GH workflows are missing some env vars that would cause them to fail.
- name: Configure AWS credentials | ||
uses: aws-actions/configure-aws-credentials@v4 | ||
with: | ||
aws-access-key-id: ${{ secrets.STAGING_AWS_ACCESS_KEY_ID }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You can try to use iam role to deploy since the organisation secret are already available.
# staging
role-to-assume: ${{ secrets.GA_OIDC_EKS_STAGING }}
role-session-name: MIPSSTAGING
aws-region: ${{ env.AWS_REGION }}
# prod
role-to-assume: ${{ secrets.GA_OIDC_EKS_PROD }}
role-session-name: MIPSPROD
aws-region: ${{ env.AWS_REGION }}
also don't forget to add the following for the pipeline
permissions:
id-token: write
contents: read
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Will tackle it as part of the existing ticket in the Backlog
- name: Deploying Service to Kubernetes with Helm | ||
id: deploy | ||
if: ${{ !contains(github.event.head_commit.message , '[skip deploy]') }} | ||
uses: bitovi/[email protected] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
1.2.9 is the latest now.
- name: Configure AWS credentials | ||
uses: aws-actions/configure-aws-credentials@v4 | ||
with: | ||
aws-access-key-id: ${{ secrets.PROD_AWS_ACCESS_KEY_ID }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
same here.
- name: Deploying Service to Kubernetes with Helm | ||
id: deploy | ||
if: ${{ !contains(github.event.head_commit.message , '[skip deploy]') }} | ||
uses: bitovi/[email protected] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
1.2.9 is the latest
password: ${{ secrets.SSH_PASS }} | ||
source: "./backend" | ||
target: "/var/warehouse/makerdao-mips-develop" | ||
aws-access-key-id: ${{ secrets.STAGING_AWS_ACCESS_KEY_ID }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
same here
password: ${{ secrets.SSH_PASS }} | ||
source: "./backend" | ||
target: "/var/warehouse/makerdao-mips" | ||
aws-access-key-id: ${{ secrets.PROD_AWS_ACCESS_KEY_ID }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
same here
- name: Deploying Service to Kubernetes with Helm | ||
id: deploy | ||
if: ${{ !contains(github.event.head_commit.message , '[skip deploy]') }} | ||
uses: bitovi/[email protected] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
1.2.9 is the latest.
env: | ||
NODE_ENV: | ||
type: kv | ||
value: production |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
As per your Dockerfile, is it supposed to be prod
instead of production
?
Get
main
branch up to date with the recent changes - deploying to our infra instead of Dspot. Then going forward we'll be able to deploy toprod
env frommain
branch, and tostaging
fromdevelop
.