Skip to content

ci: onboard PyPI publishing to Google OSS Exit Gate - #303

Open
alonsopf89 wants to merge 3 commits into
google:masterfrom
alonsopf89:oss-exit-gate-pypi
Open

alonsopf89 wants to merge 3 commits into
google:masterfrom
alonsopf89:oss-exit-gate-pypi

Conversation

@alonsopf89

Copy link
Copy Markdown

Summary

Onboards tensorstore PyPI package publishing to Google OSS Exit Gate (tensorstore/pypi).

Changes

  • Updates python-publish-package in .github/workflows/build.yml to replace the long-lived secrets.pypi_token with keyless Workload Identity Federation (projects/305452601764/locations/global/workloadIdentityPools/builders/providers/github).
  • Stages built wheels/sdists to Artifact Registry (https://us-python.pkg.dev/oss-exit-gate-prod/tensorstore--pypi/) and uploads the release manifest to gs://oss-exit-gate-prod-projects-bucket/tensorstore/pypi/manifests/.

Maintainer Action Required (PyPI Trusted Publisher)

To allow OSS Exit Gate to publish to PyPI on your behalf, please register the OSS Exit Gate service account as a Google Cloud Trusted Publisher on PyPI for tensorstore:

  • Service Account Email: tensorstore-py@oss-exit-gate-prod.iam.gserviceaccount.com

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant