Skip to content

switch post-build-publish to use workflow dispatch instead of reposit… #22381

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Tofel merged 1 commit into from
May 12, 2026
+62 −46
Merged

switch post-build-publish to use workflow dispatch instead of reposit… #22381

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
42 changes: 23 additions & 19 deletions .github/workflows/build-publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -237,34 +237,38 @@ jobs:
${{ needs.docker-core.result == 'success' && format('public.ecr.aws/chainlink/chainlink:{0}|{1}', needs.docker-core.outputs.docker-manifest-tag, needs.docker-core.outputs.docker-manifest-digest) || '' }}
${{ needs.docker-ccip.result == 'success' && format('public.ecr.aws/chainlink/ccip:{0}|{1}', needs.docker-ccip.outputs.docker-manifest-tag, needs.docker-ccip.outputs.docker-manifest-digest) || '' }}

emit-pre-release-image-published-event:
name: Emit pre-release image published event
trigger-post-build-publish:
name: Trigger post-build-publish workflow
needs: [ docker-core, slack-notify ]
if: |
always() &&
needs.docker-core.result == 'success'
runs-on: ubuntu-latest
permissions:
contents: write
actions: write
steps:
- name: Emit pre-release image published event
- name: Trigger post-build-publish workflow
env:
DOCKER_MANIFEST_TAG: ${{ needs.docker-core.outputs.docker-manifest-tag }}
GITHUB_REF_NAME: ${{ github.ref_name }}
TARGET_TAG: ${{ github.ref_name }}
GH_TOKEN: ${{ github.token }}
SLACK_THREAD_TS: ${{ needs.slack-notify.outputs.slack-thread-ts }}
run: |
gh api \
--method POST \
-H "Accept: application/vnd.github+json" \
"/repos/${GITHUB_REPOSITORY}/dispatches" \
--input - <<JSON
{
"event_type": "pre-release-image-published",
"client_payload": {
"chainlink_image_tag": "${DOCKER_MANIFEST_TAG}",
"chainlink_version": "${GITHUB_REF_NAME}",
"slack_thread_ts": "${SLACK_THREAD_TS}"
}
}
JSON
set +e
view_out=$(gh workflow view post-build-publish.yml --ref "$TARGET_TAG" 2>&1)
view_status=$?
set -e
if [ "$view_status" -ne 0 ]; then
if echo "$view_out" | grep -qiE '404|not found|could not find.*workflow'; then
echo "::warning::post-build-publish.yml is not available at ref $TARGET_TAG (workflow missing on this tag). Skipping trigger."
exit 0
fi
echo "::error::Could not resolve post-build-publish workflow at ref $TARGET_TAG: ${view_out}"
exit 1
fi

gh workflow run post-build-publish.yml \
--ref "$TARGET_TAG" \
-f chainlink_version="$TARGET_TAG" \
-f chainlink_image_tag="$DOCKER_MANIFEST_TAG" \
-f slack_thread_ts="$SLACK_THREAD_TS"
66 changes: 39 additions & 27 deletions .github/workflows/post-build-publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,8 +1,20 @@
name: "Post Build, Sign and Publish Chainlink"
on:
# # to be used with pre-release tests
repository_dispatch:
types: [ pre-release-image-published ]
workflow_dispatch:
inputs:
chainlink_version:
description: "Git tag / Chainlink version (e.g. v2.30.0-rc.1)"
required: true
type: string
chainlink_image_tag:
description: "Published Docker image manifest tag"
required: true
type: string
slack_thread_ts:
description: "Optional Slack thread timestamp for job result notifications"
required: false
type: string
default: ""

permissions: {}

Expand All @@ -14,21 +26,21 @@ jobs:
steps:
- name: Validate trigger
env:
CHAINLINK_IMAGE_TAG: ${{ github.event.client_payload.chainlink_image_tag }}
CHAINLINK_VERSION: ${{ github.event.client_payload.chainlink_version }}
CHAINLINK_IMAGE_TAG: ${{ github.event.inputs.chainlink_image_tag }}
CHAINLINK_VERSION: ${{ github.event.inputs.chainlink_version }}
run: |
echo "Image Tag: $CHAINLINK_IMAGE_TAG"
echo "Chainlink Version: $CHAINLINK_VERSION"
Comment thread
Tofel marked this conversation as resolved.
if [ -z "$CHAINLINK_IMAGE_TAG" ]; then
echo "Chainlink image tag is required, but 'client_payload.chainlink_image_tag' is empty"
echo "chainlink_image_tag is required but empty"
exit 1
fi
if [ -z "$CHAINLINK_VERSION" ]; then
echo "Chainlink Version is required, but 'client_payload.chainlink_version' is empty"
echo "chainlink_version is required but empty"
exit 1
fi
if [[ "$CHAINLINK_VERSION" != v* ]]; then
echo "This workflow can only be used with semver tags, 'chainlink_version' must begin with 'v', got: $CHAINLINK_VERSION"
echo "chainlink_version must begin with 'v' (semver tag), got: $CHAINLINK_VERSION"
exit 1
fi
echo "Trigger validated successfully"
Expand All @@ -53,7 +65,7 @@ jobs:
logs-directory: "./devenv/tests/ocr2/logs"
ctf-log-level: "debug"
strip-image-suffix: "v"
tag-version-ceiling: ${{ github.event.client_payload.chainlink_version }}
tag-version-ceiling: ${{ github.event.inputs.chainlink_version }}
secrets: inherit

cre-compat:
Expand All @@ -75,7 +87,7 @@ jobs:
logs-directory: "./system-tests/tests/smoke/cre/logs"
ctf-log-level: "debug"
strip-image-suffix: "v"
tag-version-ceiling: ${{ github.event.client_payload.chainlink_version }}
tag-version-ceiling: ${{ github.event.inputs.chainlink_version }}
secrets: inherit

legacy-system-tests:
Expand All @@ -87,9 +99,9 @@ jobs:
uses: ./.github/workflows/legacy-system-tests.yml
with:
ecr: "public"
chainlink_version: ${{ github.event.client_payload.chainlink_version }}
chainlink_version: ${{ github.event.inputs.chainlink_version }}
chainlink_image_repository_path: "chainlink/chainlink"
chainlink_image_tag: ${{ github.event.client_payload.chainlink_image_tag }}
chainlink_image_tag: ${{ github.event.inputs.chainlink_image_tag }}
secrets: inherit

cre-smoke-tests:
Expand All @@ -102,9 +114,9 @@ jobs:
uses: ./.github/workflows/cre-system-tests.yaml
with:
ecr: "public"
chainlink_version: ${{ github.event.client_payload.chainlink_version }}
chainlink_version: ${{ github.event.inputs.chainlink_version }}
chainlink_image_repository_path: "chainlink/chainlink"
chainlink_image_tag: ${{ github.event.client_payload.chainlink_image_tag }}
chainlink_image_tag: ${{ github.event.inputs.chainlink_image_tag }}
secrets: inherit

cre-regression-tests:
Expand All @@ -117,17 +129,17 @@ jobs:
uses: ./.github/workflows/cre-regression-system-tests.yaml
with:
ecr: "public"
chainlink_version: ${{ github.event.client_payload.chainlink_version }}
chainlink_version: ${{ github.event.inputs.chainlink_version }}
chainlink_image_repository_path: "chainlink/chainlink"
chainlink_image_tag: ${{ github.event.client_payload.chainlink_image_tag }}
chainlink_image_tag: ${{ github.event.inputs.chainlink_image_tag }}
secrets: inherit

# Slack notifications
# Only executed, if the slack thread timestamp is provided in the event payload.
# Only executed if slack_thread_ts was provided on workflow_dispatch.
df1-compat-notify:
runs-on: ubuntu-latest
needs: [ df1-compat ]
if: always() && github.event.client_payload.slack_thread_ts
if: always() && github.event.inputs.slack_thread_ts
permissions:
contents: read
steps:
Expand All @@ -145,14 +157,14 @@ jobs:
job_name: "Data Feeds v1 Upgrade Test"
run_url: ${{ format('{0}/{1}/actions/runs/{2}', github.server_url,
github.repository, github.run_id) }}
slack_thread_ts: ${{ github.event.client_payload.slack_thread_ts }}
slack_thread_ts: ${{ github.event.inputs.slack_thread_ts }}
slack_channel_id: ${{ secrets.SLACK_CHANNEL_RELEASE_NOTIFICATIONS }}
slack_bot_token: ${{ secrets.SLACK_BOT_TOKEN_RELENG }}

cre-compat-notify:
runs-on: ubuntu-latest
needs: [ cre-compat ]
if: always() && github.event.client_payload.slack_thread_ts
if: always() && github.event.inputs.slack_thread_ts
permissions:
contents: read
steps:
Expand All @@ -169,14 +181,14 @@ jobs:
job_name: "CRE Upgrade Test"
run_url: ${{ format('{0}/{1}/actions/runs/{2}', github.server_url,
github.repository, github.run_id) }}
slack_thread_ts: ${{ github.event.client_payload.slack_thread_ts }}
slack_thread_ts: ${{ github.event.inputs.slack_thread_ts }}
slack_channel_id: ${{ secrets.SLACK_CHANNEL_RELEASE_NOTIFICATIONS }}
slack_bot_token: ${{ secrets.SLACK_BOT_TOKEN_RELENG }}

legacy-system-tests-notify:
runs-on: ubuntu-latest
needs: [ legacy-system-tests ]
if: always() && github.event.client_payload.slack_thread_ts
if: always() && github.event.inputs.slack_thread_ts
permissions:
contents: read
steps:
Expand All @@ -193,14 +205,14 @@ jobs:
job_name: "Legacy Smoke Tests"
run_url: ${{ format('{0}/{1}/actions/runs/{2}', github.server_url,
github.repository, github.run_id) }}
slack_thread_ts: ${{ github.event.client_payload.slack_thread_ts }}
slack_thread_ts: ${{ github.event.inputs.slack_thread_ts }}
slack_channel_id: ${{ secrets.SLACK_CHANNEL_RELEASE_NOTIFICATIONS }}
slack_bot_token: ${{ secrets.SLACK_BOT_TOKEN_RELENG }}

cre-smoke-tests-notify:
runs-on: ubuntu-latest
needs: [ cre-smoke-tests ]
if: always() && github.event.client_payload.slack_thread_ts
if: always() && github.event.inputs.slack_thread_ts
permissions:
contents: read
steps:
Expand All @@ -217,14 +229,14 @@ jobs:
job_name: "CRE Smoke Tests"
run_url: ${{ format('{0}/{1}/actions/runs/{2}', github.server_url,
github.repository, github.run_id) }}
slack_thread_ts: ${{ github.event.client_payload.slack_thread_ts }}
slack_thread_ts: ${{ github.event.inputs.slack_thread_ts }}
slack_channel_id: ${{ secrets.SLACK_CHANNEL_RELEASE_NOTIFICATIONS }}
slack_bot_token: ${{ secrets.SLACK_BOT_TOKEN_RELENG }}

cre-regression-tests-notify:
runs-on: ubuntu-latest
needs: [ cre-regression-tests ]
if: always() && github.event.client_payload.slack_thread_ts
if: always() && github.event.inputs.slack_thread_ts
permissions:
contents: read
steps:
Expand All @@ -241,6 +253,6 @@ jobs:
job_name: "CRE Regression Tests"
run_url: ${{ format('{0}/{1}/actions/runs/{2}', github.server_url,
github.repository, github.run_id) }}
slack_thread_ts: ${{ github.event.client_payload.slack_thread_ts }}
slack_thread_ts: ${{ github.event.inputs.slack_thread_ts }}
slack_channel_id: ${{ secrets.SLACK_CHANNEL_RELEASE_NOTIFICATIONS }}
slack_bot_token: ${{ secrets.SLACK_BOT_TOKEN_RELENG }}
Loading