Skip to content

Latest commit

 

History

History
18 lines (12 loc) · 1.05 KB

RELEASING.md

File metadata and controls

18 lines (12 loc) · 1.05 KB

Relesing

Releases are made through the GitHub UI. Create a new tag for your release, using the format <year>.<month>.<count>.

You also need to update the pc-test-gha-tags-release Federated Identity Credential on the PC Test GitHub Actions Deployment App Registration to match the new tag.

az ad app federated-credential update --federated-credential-id "pc-test-gha-tags-release" --id "$CLIENT_ID" --parameters '{"issuer": "https://token.actions.githubusercontent.com", "subject": "repo:microsoft/planetary-computer-tasks:ref:refs/tags/$TAG", "description": "Federated credential for Github Actions to deploy to Azure from microsoft/planetary-computer-tasks with any tag", "audiences": ["api://AzureADTokenExchange"]}'

where $TAG is something like 2024.6.1.

This identity has been granted the necessary Azure RBAC permissions to do the deployment.

az role assignment create --role "Key Vault Secrets Officer" --assignee "$CLIENT_ID" --scope "$KEYVAULT_ID"