Closed joepavitt closed 4 months ago
Am I right in saying that we can (and do) now deploy MQTT brokers with the staging environments tagged deploy:pr
?
With #3668 now merged, what configuration/button needs to be clicked to enable this?
A Required review
deployment protection rule within FlowFuse/helm
repo needs to be unchecked.
We're also going to auto-add deploy:pr
tag to all PRs going forward - as first iteration.
Future iteration:
Just a note about testing things like the dependbot PRs for SSO packages.
This will also require us to ensure that all dependbot PRs are tested on pre-staging envs.
Testing this in a pre-staging test environment will be tricky as it will require a lot of work to configure the pre-staging environment to work with e.g. Google SSO.
Testing this in a pre-staging test environment will be tricky as it will require a lot of work to configure the pre-staging environment to work with e.g. Google SSO.
In this case Ben - what's the proposed workflow, assuming we haven open PR, what would we need to do in order to test that in a staging environment, without the auto-deploy to production being triggered?
@joepavitt to be honest that's probably a @knolleary question, I've never setup the SSO stuff (and it probably requires admin access to the g-suite tools or us hositng our own test keyclock instance)
IMO acceptance tests executed against a staging environment should catch this kind of errors.
https://github.com/FlowFuse/CloudProject/issues/387 contains some concerns about moving forward with this.
@ppawlowski whilst the concerns are valid, I don't want this blocking the merge on main.
I would like to move forward with production builds on merge with main
@joepavitt flowfuse npm package, as well as the container image used for the deployment to both environments, are built on each push to the main
branch.
Can you clarify what you mean by flowfuse npm package? We aren't updating version numbers, etc, so not releasing?
We just want to be updating production FF Cloud?
Also, is your message saying that's the case as of now, or that was already the case as of a few days ago?
On each merge to main
in the Flowfuse/flowfuse repo, the following things happen:
nightly
tag by this pipeline.nightly
) to build a fresh container imageAccording to the git log, this approach was introduced ~7 months ago.
Thanks @ppawlowski - it's not documented anywhere in our handbook, so wasn't aware of the details. I'm happy to put them in, will add you as a reviewer
I can see the latest builds triggered by main
here: https://www.npmjs.com/package/@flowfuse/flowfuse?activeTab=versions
I'm not then clear on what's triggering:
The resulting image is used to perform deployment on both staging and production environments.
Those builds were an hour ago, and production still hasn't reflected those changes.
@hardillb has pointed out we still have a manual approval step as per: https://github.com/FlowFuse/helm/actions/runs/8849960781
This is now live - closing
Description
Blockers:
Nice to haves:
Follow Ups
main
and notmaintenance
branch