Skip to content

Harden DNS security, billing consistency and service recovery #317

Harden DNS security, billing consistency and service recovery

Harden DNS security, billing consistency and service recovery #317

name: Build and Push Orchestrator Service
on:
push:
branches:
- main
tags:
- "v*"
paths:
- "apps/orchestrator-service/**"
- "apps/shared/pkg/database/**"
- "apps/shared/pkg/docker/**"
- "apps/shared/pkg/email/**"
- "apps/shared/pkg/health/**"
- "apps/shared/pkg/logger/**"
- "apps/shared/pkg/middleware/**"
- "apps/shared/pkg/orchestrator/**"
- "apps/shared/pkg/platform/**"
- "apps/shared/pkg/registry/**"
- "apps/shared/pkg/services/organizations/**"
- "apps/shared/proto/obiente/cloud/deployments/**"
- "apps/shared/proto/obiente/cloud/notifications/**"
- "packages/proto/proto/obiente/cloud/deployments/**"
- "packages/proto/proto/obiente/cloud/notifications/**"
- "apps/shared/go.mod"
- "apps/shared/go.sum"
- ".github/workflows/build-orchestrator-service.yml"
- ".github/workflows/reusable-container-build.yml"
- "tools/deployment-preflight/base_images.py"
pull_request:
branches:
- main
paths:
- "apps/orchestrator-service/**"
- "apps/shared/pkg/database/**"
- "apps/shared/pkg/docker/**"
- "apps/shared/pkg/email/**"
- "apps/shared/pkg/health/**"
- "apps/shared/pkg/logger/**"
- "apps/shared/pkg/middleware/**"
- "apps/shared/pkg/orchestrator/**"
- "apps/shared/pkg/platform/**"
- "apps/shared/pkg/registry/**"
- "apps/shared/pkg/services/organizations/**"
- "apps/shared/proto/obiente/cloud/deployments/**"
- "apps/shared/proto/obiente/cloud/notifications/**"
- "packages/proto/proto/obiente/cloud/deployments/**"
- "packages/proto/proto/obiente/cloud/notifications/**"
- "apps/shared/go.mod"
- "apps/shared/go.sum"
- ".github/workflows/build-orchestrator-service.yml"
- ".github/workflows/reusable-container-build.yml"
- "tools/deployment-preflight/base_images.py"
workflow_dispatch:
permissions:
contents: read
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
jobs:
validate:
name: Validate Orchestrator Service
if: github.event_name == 'pull_request'
permissions:
contents: read
uses: ./.github/workflows/reusable-container-build.yml
with:
service-name: orchestrator-service
display-name: Orchestrator Service
publish: false
publish:
name: Publish Orchestrator Service
if: github.event_name != 'pull_request'
permissions:
contents: read
packages: write
uses: ./.github/workflows/reusable-container-build.yml
with:
service-name: orchestrator-service
display-name: Orchestrator Service
publish: true
secrets: inherit