[ACE-1975] Consolidate deployment jobs, adjust resource limit, fix zip runner error, reduce log verbosity - #521
Merged
Conversation
…ation step to confirm ./helm/ is accessible in pod working directory
…there with --file .
osh0501
changed the title
…ssing dependency (unzip)
…ack, read rg and cluster name from repo secrets
…lling upgrades can run old and new pods concurrently
…n networks checks
osh0501
changed the title
osh0501
marked this pull request as ready for review
July 16, 2026 16:45
osh0501
requested review from
alevlasu,
bineesh-n,
cjlapao and
sai-kumar-peddireddy
as code owners
July 16, 2026 16:45
cjlapao
approved these changes
Jul 20, 2026
cjlapao
approved these changes
Jul 20, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Merged parallel jobs into a single sequential job — Previously deploy-orchestrator and deploy-catalog ran as independent parallel jobs. Combined into one
deploy-servicesjob with conditional steps to prevent namespace CPU quota conflicts (2 CPU limit). Retained conditional deployment flexibility — Can still deploy orchestrator only, catalog only, or both via deploy_orchestrator/deploy_catalog input flags.Use python3 to extract kubelogin and fix unzip error (runner does not have
unzippre-installed)Fixed
--wait/--atomicredundancy —--atomicalready implies--wait; refactored to elif to avoid specifying both flags simultaneouslyAdded --hide-notes to Helm deploy commands to reduce log verbosity.
Runtime masking added for OIDC subject and audience.
Cluster name and resource group added as repository secrets - values not exposed in logs.
Lowered CPU limits per pod in both std & prd values files so rolling upgrades can run old and new pods concurrently.
Update workflow permissions. Add actions: write to allow createWorkflowDispatch calls.
Type of change
Checklist