mirror of
https://github.com/andwati/telecom-platform.git
synced 2026-10-20 03:44:25 +00:00
nutcas3
cddfd41654
- Add production.yml with environment name/URL and protection rules configuration - Add required_reviewers (cto/head-of-operations/security-lead) and prevent_force_pushes setting - Add required_status_checks with strict mode for build-and-push/test-suite/security-scan/performance-tests contexts - Add deployment_restrictions limiting deployments to specific users (cto/head-of-operations/devops-lead) and platform
54 lines
1.2 KiB
YAML
54 lines
1.2 KiB
YAML
# Production Environment Configuration
|
|
name: production
|
|
url: https://telecom-platform.com
|
|
|
|
# Environment protection rules
|
|
protection_rules:
|
|
# Require approval from production team
|
|
required_reviewers:
|
|
- cto
|
|
- head-of-operations
|
|
- security-lead
|
|
|
|
# Prevent force pushes
|
|
prevent_force_pushes: true
|
|
|
|
# Require status checks
|
|
required_status_checks:
|
|
strict: true
|
|
contexts:
|
|
- build-and-push
|
|
- test-suite
|
|
- security-scan
|
|
- performance-tests
|
|
|
|
# Require branches to be up to date
|
|
require_branch_up_to_date: true
|
|
|
|
# Limit who can deploy
|
|
deployment_restrictions:
|
|
users:
|
|
- cto
|
|
- head-of-operations
|
|
- devops-lead
|
|
teams:
|
|
- platform-engineers
|
|
|
|
# Environment variables
|
|
environment_variables:
|
|
API_BASE_URL: https://api.telecom-platform.com
|
|
DATABASE_URL: postgresql://prod-user:[email protected]:5432/telecom_prod
|
|
REDIS_URL: redis://prod-redis.internal:6379
|
|
LOG_LEVEL: warn
|
|
ENVIRONMENT: production
|
|
|
|
# Secrets (configured in GitHub repository settings)
|
|
# These are referenced but not stored in the file
|
|
secrets:
|
|
- PROD_DB_PASSWORD
|
|
- PROD_API_KEY
|
|
- PROD_JWT_SECRET
|
|
- KUBECONFIG_PRODUCTION
|
|
- SSL_CERTIFICATE
|
|
- SSL_PRIVATE_KEY
|