Skip to content

ci: auto-deploy on merge to main via Workload Identity Federation#25

Merged
Pyronewbic merged 1 commit intomainfrom
dev
May 10, 2026
Merged

ci: auto-deploy on merge to main via Workload Identity Federation#25
Pyronewbic merged 1 commit intomainfrom
dev

Conversation

@Pyronewbic
Copy link
Copy Markdown
Owner

Summary

  • Auto-deploy to Cloud Run when PR merges to main
  • Workload Identity Federation: no stored credentials, GitHub JWT trusted by GCP
  • Test workflow runs on PR only (no duplication)
  • Deploy service account: casecomp-deploy with Cloud Run + Cloud Build roles

Flow

push to dev → PR to main (tests run) → merge → auto-deploy

Test plan

  • GCP service account created with required roles
  • Workload Identity Pool + OIDC provider configured
  • Repo-scoped: only Pyronewbic/casecomp can authenticate
  • Tests pass on this PR
  • Deploy triggers on merge

@Pyronewbic Pyronewbic merged commit 9c92b42 into main May 10, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant