blob: 6459ac7ad42f8612a64019265d87473fd402083f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
|
name: Apex + preview worker deploy
on:
push:
branches: [rolling]
paths: ["workers/**"]
pull_request:
paths: ["workers/**"]
workflow_dispatch: {}
concurrency:
# PR runs group per PR number (not head ref — same-named branches from
# different forks would otherwise share a group) so pushes to the same PR
# queue/cancel independently of the rolling deploy group.
group: apex-deploy-${{ github.event_name == 'pull_request' && github.event.pull_request.number || github.ref_name }}
# false (not true): a mid-job cancel can leave the apex/preview worker pair
# half-updated; queuing subsequent runs is safe.
cancel-in-progress: false
permissions:
contents: read
jobs:
test:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with: { node-version: 22 }
- run: cd workers && npm ci && npx vitest run
deploy-canary:
needs: test
if: github.event_name != 'pull_request'
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with: { node-version: 22 }
- name: Preflight — every service-binding target must already exist (Task 1.8)
env:
CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN_DOCS }}
CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
run: |
set -eu
cd workers && npm ci
missing=0
for w in vyos-docs-rolling-en vyos-docs-v15-en vyos-docs-v14-en vyos-docs-legacy; do
for suffix in "" "-candidate"; do
npx wrangler deployments list --name "$w$suffix" --json >/dev/null 2>&1 \
|| { echo "::error::binding target $w$suffix does not exist — run workers/bootstrap.sh first (Task 1.8)"; missing=1; }
done
done
exit $missing
- name: Deploy apex (canary) + preview
env:
CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN_DOCS }}
CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
run: |
cd workers && npm ci
npx wrangler deploy --config apex/wrangler.jsonc --env canary \
--var APEX_BUILD_SHA:'${{ github.sha }}'
npx wrangler deploy --config preview/wrangler.jsonc
deploy-production:
needs: deploy-canary
if: github.event_name != 'pull_request'
runs-on: ubuntu-latest
environment: docs-production # requires reviewer approval (§7.2)
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with: { node-version: 22 }
- name: Deploy apex (production)
env:
CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN_DOCS }}
CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
run: |
cd workers && npm ci
npx wrangler deploy --config apex/wrangler.jsonc --env production \
--var APEX_BUILD_SHA:'${{ github.sha }}'
|
