Skip to content

ci(release): migrate PyPI publishing to OSS Exit Gate - #251

Open
alonsopf89 wants to merge 1 commit into
google:masterfrom
alonsopf89:feat/oss-exit-gate-migration
Open

alonsopf89 wants to merge 1 commit into
google:masterfrom
alonsopf89:feat/oss-exit-gate-migration

Conversation

@alonsopf89

Copy link
Copy Markdown

Summary

Migrates .github/workflows/conda-build.yml to publish ml-metadata to PyPI through the Google OSS Exit Gate pipeline (ml-metadata/pypi), replacing static PyPI API token secrets with keyless Workload Identity Federation.

Changes

  • Authenticates via keyless Workload Identity Federation (google-github-actions/auth).
  • Stages built distributions to Artifact Registry (https://us-python.pkg.dev/oss-exit-gate-prod/ml-metadata--pypi/) and uploads manifest.json to gs://oss-exit-gate-prod-projects-bucket/ml-metadata/pypi/manifests/.

Verification

  • Internal OSS Exit Gate onboarding configuration (cl/1008566107) and Artifact Registry provisioning are submitted and active.
  • End-to-end Step 8 smoke test (ml-metadata@1.21.0, publish_all: false) was executed and verified against ml-metadata--pypi.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

⌂ Proxy