33
33
name :should-deploy
34
34
runs-on :ubuntu-latest
35
35
outputs :
36
- verdict :${{ steps.check.outputs.verdict }}
36
+ verdict :${{ steps.check.outputs.verdict }} # DEPLOY or NOOP
37
37
steps :
38
38
-name :Harden Runner
39
39
uses :step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
@@ -49,27 +49,27 @@ jobs:
49
49
-name :CHECKOUT MAIN
50
50
run :|
51
51
set -euxo pipefail
52
+ git fetch origin
52
53
git checkout main
54
+ git checkout origin/dean/releases-freeze -- scripts/should_deploy.sh
53
55
54
56
-name :Check if deploy is enabled
55
57
id :check
56
58
run :|
57
59
set -euo pipefail
58
- verdict="false"
59
- if ./scripts/should_deploy.sh; then
60
- verdict="true"
61
- fi
60
+ verdict="$(./scripts/should_deploy.sh)"
62
61
echo "verdict=$verdict" >> "$GITHUB_OUTPUT"
63
62
64
63
deploy :
65
64
name :" deploy"
66
65
runs-on :ubuntu-latest
67
66
timeout-minutes :30
68
67
needs :should-deploy
69
- if :needs.should-deploy.outputs.verdict == 'true '
68
+ if :needs.should-deploy.outputs.verdict == 'DEPLOY '
70
69
permissions :
71
70
contents :read
72
71
id-token :write
72
+ packages :write # to retag image as dogfood
73
73
steps :
74
74
-name :Harden Runner
75
75
uses :step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
@@ -107,7 +107,7 @@ jobs:
107
107
uses :fluxcd/flux2/action@6bf37f6a560fd84982d67f853162e4b3c2235edb # v2.6.4
108
108
with :
109
109
# Keep this and the github action up to date with the version of flux installed in dogfood cluster
110
- version :" 2.6.4 "
110
+ version :" 2.7.0 "
111
111
112
112
-name :Get Cluster Credentials
113
113
uses :google-github-actions/get-gke-credentials@3da1e46a907576cefaa90c484278bb5b259dd395 # v3.0.0