Skip to content

Commit 7e79c95

Browse files
atolopko-cziatolopko-czi
authored
Merge pull request #6498 from chanzuckerberg/staging
chore: prod deploy
2 parents 8fc12ae + 933d7bd commit 7e79c95

File tree

98 files changed

+2681
-1570
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

98 files changed

+2681
-1570
lines changed

‎.dockerignore

Lines changed: 1 addition & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -2,14 +2,7 @@
22
**
33

44
# Allow files and directories
5-
!/requirements.txt
6-
!/requirements-backend.txt
7-
!/requirements-processing.txt
8-
!/requirements-submissions.txt
9-
!/requirements-upload-failures.txt
10-
!/requirements-upload-success.txt
11-
!/requirements-wmg-pipeline.txt
12-
!/requirements-cellguide-pipeline.txt
5+
!/python_dependencies/**
136
!/backend/**
147
!/tests/**
158
!/scripts/**

‎.github/dependabot.yml

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
version: 2
2+
updates:
3+
- package-ecosystem: "github-actions"
4+
directory: "/"
5+
schedule:
6+
interval: "weekly"
7+
day: "sunday"
8+
- package-ecosystem: pip
9+
directory: "/python_dependencies/backend/"
10+
schedule:
11+
interval: "daily"
12+
- package-ecosystem: pip
13+
directory: "/python_dependencies/wmg/"
14+
schedule:
15+
interval: "weekly"
16+
day: "sunday"
17+
- package-ecosystem: pip
18+
directory: "/python_dependencies/upload_handler/"
19+
schedule:
20+
interval: "weekly"
21+
day: "sunday"
22+
- package-ecosystem: pip
23+
directory: "/python_dependencies/submissions/"
24+
schedule:
25+
interval: "weekly"
26+
day: "sunday"
27+
- package-ecosystem: pip
28+
directory: "/python_dependencies/cellguide_pipeline/"
29+
schedule:
30+
interval: "weekly"
31+
day: "sunday"
32+
- package-ecosystem: pip
33+
directory: "/python_dependencies/processing/"
34+
schedule:
35+
interval: "weekly"
36+
day: "sunday"
37+
- package-ecosystem: npm
38+
directory: "/frontend/"
39+
schedule:
40+
interval: "weekly"
41+
day: "sunday"

‎.github/workflows/build-images-and-create-deployment.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -35,13 +35,13 @@ jobs:
3535
runs-on: ubuntu-22.04
3636
steps:
3737
- name: Configure AWS Credentials
38-
uses: aws-actions/configure-aws-credentials@v2
38+
uses: aws-actions/configure-aws-credentials@v4
3939
with:
4040
aws-region: us-west-2
4141
role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
4242
role-duration-seconds: 1800
4343
- name: Login to ECR
44-
uses: docker/login-action@v1
44+
uses: docker/login-action@v3
4545
with:
4646
registry: ${{ secrets.ECR_REPO }}
4747
- uses: actions/checkout@v2

‎.github/workflows/clean_happy_rdev.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
runs-on: ubuntu-22.04
1616
steps:
1717
- name: Configure AWS Credentials
18-
uses: aws-actions/configure-aws-credentials@v2
18+
uses: aws-actions/configure-aws-credentials@v4
1919
with:
2020
aws-region: us-west-2
2121
role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}

‎.github/workflows/deploy-happy-stack.yml

Lines changed: 33 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -18,29 +18,29 @@ jobs:
1818
steps:
1919
- uses: actions/setup-node@v2
2020
with:
21-
node-version: "16.14.2"
21+
node-version: "20.10.0"
2222
- name: Configure AWS Prod Credentials
23-
uses: aws-actions/configure-aws-credentials@v2
23+
uses: aws-actions/configure-aws-credentials@v4
2424
if: github.event.deployment.environment == 'prod'
2525
with:
2626
aws-region: us-west-2
2727
role-to-assume: ${{ secrets.AWS_PROD_ROLE_TO_ASSUME }}
2828
role-duration-seconds: 2700
2929
- name: Configure AWS Credentials
30-
uses: aws-actions/configure-aws-credentials@v2
30+
uses: aws-actions/configure-aws-credentials@v4
3131
if: github.event.deployment.environment != 'prod'
3232
with:
3333
aws-region: us-west-2
3434
role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
3535
role-duration-seconds: 2700
3636
# Login to ECR needed solely to be able to retrieve cached layers
3737
- name: Login to Prod ECR
38-
uses: docker/login-action@v1
38+
uses: docker/login-action@v3
3939
if: github.event.deployment.environment == 'prod'
4040
with:
4141
registry: ${{ secrets.ECR_REPO_PROD }}
4242
- name: Login to ECR
43-
uses: docker/login-action@v1
43+
uses: docker/login-action@v3
4444
with:
4545
registry: ${{ secrets.ECR_REPO }}
4646
- uses: actions/checkout@v2
@@ -90,7 +90,8 @@ jobs:
9090
with:
9191
status: ${{ job.status }}
9292
fields: repo,commit,author,eventName,workflow,job,mention
93-
mention: "here"
93+
mention: "subteam^S02K38PMTTQ"
94+
if_mention: "always"
9495
env:
9596
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK }}
9697
if: failure() && github.ref == 'refs/heads/main'
@@ -136,23 +137,23 @@ jobs:
136137
steps:
137138
- uses: actions/setup-node@v2
138139
with:
139-
node-version: "16.14.2"
140-
- uses: actions/setup-python@v4
140+
node-version: "20.10.0"
141+
- uses: actions/setup-python@v5
141142
with:
142143
python-version: "3.10"
143144
- uses: actions/checkout@v2
144145
with:
145146
ref: ${{ github.event.deployment.sha }}
146147
fetch-depth: 1
147148
- name: Configure AWS Prod Credentials
148-
uses: aws-actions/configure-aws-credentials@v2
149+
uses: aws-actions/configure-aws-credentials@v4
149150
if: github.event.deployment.environment == 'prod'
150151
with:
151152
aws-region: us-west-2
152153
role-to-assume: ${{ secrets.AWS_PROD_ROLE_TO_ASSUME }}
153154
role-duration-seconds: 2700
154155
- name: Configure AWS Credentials
155-
uses: aws-actions/configure-aws-credentials@v2
156+
uses: aws-actions/configure-aws-credentials@v4
156157
if: github.event.deployment.environment != 'prod'
157158
with:
158159
aws-region: us-west-2
@@ -217,15 +218,15 @@ jobs:
217218
steps:
218219
- uses: actions/setup-node@v3
219220
with:
220-
node-version: "16.14.2"
221+
node-version: "20.10.0"
221222
- name: Configure AWS Credentials
222-
uses: aws-actions/configure-aws-credentials@v2
223+
uses: aws-actions/configure-aws-credentials@v4
223224
with:
224225
aws-region: us-west-2
225226
role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
226227
role-duration-seconds: 1800
227228
- name: Login to ECR
228-
uses: docker/login-action@v2
229+
uses: docker/login-action@v3
229230
with:
230231
registry: ${{ secrets.ECR_REPO }}
231232
- uses: actions/checkout@v3
@@ -305,14 +306,14 @@ jobs:
305306
- upgrade
306307
steps:
307308
- name: Configure AWS Prod Credentials
308-
uses: aws-actions/configure-aws-credentials@v2
309+
uses: aws-actions/configure-aws-credentials@v4
309310
if: github.event.deployment.environment == 'prod'
310311
with:
311312
aws-region: us-west-2
312313
role-to-assume: ${{ secrets.AWS_PROD_ROLE_TO_ASSUME }}
313314
role-duration-seconds: 2700
314315
- name: Configure AWS Credentials
315-
uses: aws-actions/configure-aws-credentials@v2
316+
uses: aws-actions/configure-aws-credentials@v4
316317
if: github.event.deployment.environment != 'prod'
317318
with:
318319
aws-region: us-west-2
@@ -322,7 +323,7 @@ jobs:
322323
with:
323324
ref: ${{ github.event.deployment.sha }}
324325
fetch-depth: 1
325-
- uses: actions/setup-python@v4
326+
- uses: actions/setup-python@v5
326327
with:
327328
python-version: "3.10"
328329
- name: Run functional test
@@ -360,27 +361,27 @@ jobs:
360361
- upgrade
361362
steps:
362363
- name: Configure AWS Prod Credentials
363-
uses: aws-actions/configure-aws-credentials@v2
364+
uses: aws-actions/configure-aws-credentials@v4
364365
if: github.event.deployment.environment == 'prod'
365366
with:
366367
aws-region: us-west-2
367368
role-to-assume: ${{ secrets.AWS_PROD_ROLE_TO_ASSUME }}
368369
role-duration-seconds: 2700
369370
- name: Configure AWS Credentials
370-
uses: aws-actions/configure-aws-credentials@v2
371+
uses: aws-actions/configure-aws-credentials@v4
371372
if: github.event.deployment.environment != 'prod'
372373
with:
373374
aws-region: us-west-2
374375
role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
375376
role-duration-seconds: 2700
376377
# Login to ECR needed solely to be able to retrieve cached layers
377378
- name: Login to Prod ECR
378-
uses: docker/login-action@v1
379+
uses: docker/login-action@v3
379380
if: github.event.deployment.environment == 'prod'
380381
with:
381382
registry: ${{ secrets.ECR_REPO_PROD }}
382383
- name: Login to ECR
383-
uses: docker/login-action@v1
384+
uses: docker/login-action@v3
384385
with:
385386
registry: ${{ secrets.ECR_REPO }}
386387
- uses: actions/checkout@v2
@@ -412,7 +413,17 @@ jobs:
412413
with:
413414
status: ${{ steps.check.outputs.status }}
414415
fields: repo,commit,author,eventName,workflow,job,mention
415-
mention: "here"
416+
mention: "subteam^S02KZL4SQM6,subteam^S03MNFMGD0F"
417+
if_mention: "always"
416418
env:
417419
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK }}
418-
if: steps.check.outputs.status == 'failure' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/staging' || github.ref == 'refs/heads/prod')
420+
if: github.ref == 'refs/heads/prod'
421+
- uses: 8398a7/action-slack@v3
422+
with:
423+
status: ${{ steps.check.outputs.status }}
424+
fields: repo,commit,author,eventName,workflow,job,mention
425+
mention: "subteam^S02K38PMTTQ"
426+
if_mention: "always"
427+
env:
428+
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK }}
429+
if: steps.check.outputs.status == 'failure' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/staging')

‎.github/workflows/lint-pr.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,6 @@ jobs:
1414
main:
1515
runs-on: ubuntu-latest
1616
steps:
17-
- uses: amannn/action-semantic-pull-request@v5.2.0
17+
- uses: amannn/action-semantic-pull-request@v5.4.0
1818
env:
1919
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/pull-latest-ontology-mappings.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
runs-on: ubuntu-22.04
1616
steps:
1717
- name: Configure AWS Credentials
18-
uses: aws-actions/configure-aws-credentials@v2
18+
uses: aws-actions/configure-aws-credentials@v4
1919
with:
2020
aws-region: us-west-2
2121
role-to-assume: ${{ secrets.AWS_PROD_ROLE_TO_ASSUME }}

‎.github/workflows/push-processing-base.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ jobs:
3636
uses: docker/setup-buildx-action@v1
3737

3838
- name: Login to Registry
39-
uses: docker/login-action@v1
39+
uses: docker/login-action@v3
4040
with:
4141
registry: ghcr.io
4242
username: ${{ github.repository_owner }}

‎.github/workflows/push-rdev.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -39,13 +39,13 @@ jobs:
3939
image_tag: ${{ steps.push_images.outputs.image_tag }}
4040
steps:
4141
- name: Configure AWS Credentials
42-
uses: aws-actions/configure-aws-credentials@v2
42+
uses: aws-actions/configure-aws-credentials@v4
4343
with:
4444
aws-region: us-west-2
4545
role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
4646
role-duration-seconds: 1800
4747
- name: Login to ECR
48-
uses: docker/login-action@v1
48+
uses: docker/login-action@v3
4949
with:
5050
registry: ${{ secrets.ECR_REPO }}
5151
- uses: actions/checkout@v2

0 commit comments

Comments
 (0)