History

Authorize org membership from the local mirror (#2026)

Rhys Sullivan committed 1 month ago

Commit a6cdcf11 parent be7752145 files · +3003 −487Browse files

Showing the changes to .github (1 of 45 files). Show all

Unified · Split

.github/workflows/deploy.yml+13−0
@@ -54,6 +54,19 @@ jobs: · 53 unmodified lines
5454 CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
5555 CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
5656
57+ # The build below authorizes every request from the local membership
58+ # mirror. This runs the mirror backfill if it has not completed, drains
59+ # the WorkOS events stream itself if the reconciler has not recently
60+ # (it does not wait on the cron, which this same deploy may be the one
61+ # to ship), and FAILS the deploy if the mirror is still not ready — see
62+ # scripts/ensure-workos-mirror-ready.ts.
63+ - name: Backfill and verify the membership mirror
64+ run: bun run scripts/ensure-workos-mirror-ready.ts
65+ working-directory: apps/cloud
66+ env:
67+ DATABASE_URL: ${{ secrets.DATABASE_URL }}
68+ WORKOS_API_KEY: ${{ secrets.WORKOS_API_KEY }}
69+
5770 deploy-cloud:
5871 name: Deploy cloud
5972 runs-on: blacksmith-4vcpu-ubuntu-2404