Merge pull request #9 from jupyter/update-nbviewer #6
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Deploy | |
# only allow one deploy workflow to be running at a time | |
# serializes multiple outstanding deploys if PRs are merged before the last deploy finishes | |
# ref: https://docs.github.com/en/actions/reference/workflow-syntax-for-github-actions#concurrency | |
concurrency: deploy | |
# Only trigger the workflow when pushing to main | |
on: | |
push: | |
branches: | |
- main | |
paths-ignore: | |
- "*.md" | |
- .pre-commit-config.yaml | |
- .github/** | |
- "!.github/workflows/cd.yml" | |
# Global environment variables | |
env: | |
KUBECTL_VERSION: "v1.29.15" | |
HELM_VERSION: "v3.12.0" | |
KUBECONFIG: secrets/ovh-kubeconfig.yaml | |
NBVIEWER_VERSION: "e6591a2c29cd150b4881fd23ba865100bcd63634" | |
NBVIEWER_CHART: nbviewer/helm-chart/nbviewer | |
jobs: | |
# In this dedicated job to deploy our staging environment we build and push | |
# images that the jobs to deploy to the production environments depend on. | |
deploy: | |
runs-on: ubuntu-24.04 | |
steps: | |
- name: Checkout repo | |
uses: actions/checkout@v5 | |
with: | |
fetch-depth: 0 | |
- name: Checkout nbviewer | |
uses: actions/checkout@v5 | |
with: | |
repository: jupyter/nbviewer | |
ref: ${{ env.NBVIEWER_VERSION }} | |
path: nbviewer | |
- name: Setup Python | |
uses: actions/setup-python@v5 | |
with: | |
python-version: "3.13" | |
cache: pip | |
- name: Install dependencies | |
run: | | |
pip install --upgrade setuptools pip | |
pip install --upgrade -r requirements.txt | |
- name: Install kubectl | |
uses: azure/setup-kubectl@v4 | |
with: | |
version: ${{ env.KUBECTL_VERSION }} | |
- name: Install and setup helm | |
run: | | |
curl -sf https://raw.githubusercontent.com/helm/helm/master/scripts/get-helm-3 | DESIRED_VERSION=${HELM_VERSION} bash | |
- name: Unlock git-crypt secrets | |
uses: sliteteam/github-action-git-crypt-unlock@f99c0c6b60bb7ec30dcec033a8f0a3b3d48f21e1 | |
env: | |
GIT_CRYPT_KEY: ${{ secrets.GIT_CRYPT_KEY }} | |
- name: deploy | |
run: | | |
bash deploy.sh | |
- name: test | |
run: | | |
pytest |