SMOODEV-1791: SmooaiNextEdge auto-validates the us-east-1 viewer cert… #18
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| # Publishes @smooai/deploy to npm. The package ships TypeScript source | |
| # (files: ["src"], main: src/index.ts) — consumers compile it, same as the | |
| # path-dep dev model. Uses the org-level SMOOAI_NPM_TOKEN secret (visibility ALL). | |
| on: | |
| workflow_dispatch: | |
| push: | |
| tags: ['v*'] | |
| jobs: | |
| publish-npm: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| defaults: | |
| run: | |
| working-directory: sst | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: pnpm/action-setup@v4 | |
| with: | |
| version: 10 | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: 22 | |
| registry-url: 'https://registry.npmjs.org' | |
| - name: Install | |
| run: pnpm install --no-frozen-lockfile | |
| # NOTE: typecheck is intentionally NOT run here — the construct's | |
| # ambient `sst`/`$util` globals require `pnpm sst install` (the | |
| # `.sst/platform` types), which is a CI concern separate from | |
| # publishing. The package ships verified source; add a proper | |
| # PR-checks workflow (with `sst install`) for the type gate. | |
| - name: Publish to npm | |
| run: pnpm publish --access public --no-git-checks | |
| env: | |
| NODE_AUTH_TOKEN: ${{ secrets.SMOOAI_NPM_TOKEN }} | |
| # Publishes the reusable `smooai-next` Helm chart to GHCR as an OCI artifact | |
| # (oci://ghcr.io/smooai/charts/smooai-next:<version>). Consumers reference it | |
| # from cdk8s (`cdk8s.Helm`) / ArgoCD. helm is pre-installed on ubuntu runners. | |
| publish-helm: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| packages: write | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Login to GHCR (Helm OCI registry) | |
| run: echo "${{ secrets.GITHUB_TOKEN }}" | helm registry login ghcr.io -u ${{ github.actor }} --password-stdin | |
| - name: Package + push smooai-next chart | |
| run: | | |
| set -euo pipefail | |
| helm package helm/smooai-next | |
| CHART_TGZ=$(ls smooai-next-*.tgz) | |
| echo "Pushing $CHART_TGZ → oci://ghcr.io/smooai/charts" | |
| helm push "$CHART_TGZ" oci://ghcr.io/smooai/charts |