Skip to content

fix(ci): pass image_tag to nightly deploy tests - #12637

Closed
nv-tusharma wants to merge 1 commit into
mainfrom
fix/nightly-deploy-test-image-tag
Closed

fix(ci): pass image_tag to nightly deploy tests#12637
nv-tusharma wants to merge 1 commit into
mainfrom
fix/nightly-deploy-test-image-tag

Conversation

@nv-tusharma

@nv-tusharma nv-tusharma commented Aug 4, 2026

Copy link
Copy Markdown
Collaborator

Summary

The nightly pipeline has not run since #12090 merged. Run 30894125332 ended in startup_failure — GitHub rejected the workflow file, so no jobs ran at all, not just the deploy tests:

Invalid workflow file: .github/workflows/nightly-ci.yml#L610
(Line: 610, Col: 11): Input image_tag is required, but not provided while calling.
(Line: 614, Col: 21): Invalid input, image_suffix is not defined in the referenced workflow.

Two bugs, one hiding behind the other:

  1. Wrong input name. The three deploy-test-* jobs pass image_suffix to shared-deploy-test.yml, which defines no such input — its required input is image_tag. GitHub validates reusable-workflow inputs when it instantiates the caller, which is why this takes down the whole file. All three jobs have the defect; GitHub only reports the first.

  2. Wrong value. format('{0}-nightly', <fw>-build.outputs.target_tag_plain) omits the <version>-ci-<sha>- prefix that shared-copy.yml prepends when it publishes to ACR. Even with the input named correctly, the deploy tests would have failed on image pull.

Both are fixed by consuming <fw>-copy-to-acr.outputs.image_tag — the tag actually pushed to ACR — which is what post-merge-ci.yml:877 already does. <fw>-build drops out of each needs list because <fw>-copy-to-acr already depends on it.

Nothing on the original PR could have caught this: reusable-workflow input contracts are only validated when the calling workflow is instantiated, and nightly-ci.yml never runs on a PR. Adding an actionlint pre-commit hook would catch this class statically — it reproduces the exact GitHub error offline — and will follow in a separate PR.

Validation

  • actionlint on the branch reports 0 workflow-call errors in nightly-ci.yml; on main it reports 6 (the image_tag-required and image_suffix-undefined pair for each of the vllm/sglang/trtllm jobs), matching GitHub's startup failure verbatim.
  • Input name and source now match the working post-merge-ci.yml deploy-test callers.
  • Full confirmation is the next nightly reaching the job graph instead of startup_failure.

🤖 Generated with Claude Code


Open in Devin Review

Summary by CodeRabbit

  • Bug Fixes
    • Improved nightly deployment test reliability by using the exact image tags produced during image publishing.
    • Removed unnecessary build-job dependencies from nightly deployment test workflows.

The nightly deploy-test jobs added in #12090 call shared-deploy-test.yml
with an `image_suffix` input, which that workflow does not define. Its
required input is `image_tag`. GitHub validates reusable-workflow inputs
when it instantiates the caller, so the entire nightly workflow was
rejected at startup and no jobs ran (run 30894125332, startup_failure).
Nothing on the PR could catch it: nightly-ci.yml never runs on a PR.

The value was wrong as well. `format('{0}-nightly', <fw>-build.outputs.
target_tag_plain)` omits the `<version>-ci-<sha>-` prefix that
shared-copy.yml prepends when it publishes to ACR, so the deploy tests
would have failed to pull the image even with the input named correctly.

Consume `<fw>-copy-to-acr.outputs.image_tag` instead, which is the tag
actually pushed to ACR and what post-merge-ci.yml already passes.
`<fw>-build` drops out of `needs` since `<fw>-copy-to-acr` requires it.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Signed-off-by: Tushar Sharma <tusharma@nvidia.com>
@nv-tusharma
nv-tusharma requested a review from a team as a code owner August 4, 2026 17:55

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 potential issue.

Open in Devin Review

framework: vllm
profiles: '["agg"]'
image_suffix: ${{ format('{0}-nightly', needs.vllm-build.outputs.target_tag_plain) }}
image_tag: ${{ needs.vllm-copy-to-acr.outputs.image_tag }}

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔍 Nightly copy job derives source tag from github.sha, not resolve-source-sha

The deploy tests now consume vllm-copy-to-acr.outputs.image_tag, which shared-copy.yml builds as <version>-ci-${{ github.sha }}-<target_tag_plain> (.github/workflows/shared-copy.yml:71, .github/workflows/shared-copy.yml:90). The nightly builds, however, check out needs.resolve-source-sha.outputs.source_sha rather than github.sha. If resolve-source-sha ever resolves to a commit other than the scheduled run's github.sha (e.g. pinning the last green commit), the copy step will look for an ECR tag that was never pushed and the copy — and therefore the deploy test — will fail. Worth confirming that the nightly build image tag really is keyed on github.sha; this is pre-existing but now sits directly on the deploy-test path.

Open in Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

@coderabbitai

coderabbitai Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 410ba4b0-5eb0-47ee-9122-6a500d0df3dd

📥 Commits

Reviewing files that changed from the base of the PR and between 25090d2 and 20e5c50.

📒 Files selected for processing (1)
  • .github/workflows/nightly-ci.yml

Walkthrough

The nightly workflow now makes vLLM, SGLang, and TensorRT-LLM deployment tests depend on their copy-to-ACR jobs. Each test receives the copied job’s image_tag output directly.

Changes

Nightly deployment image handoff

Layer / File(s) Summary
Deployment test job wiring
.github/workflows/nightly-ci.yml
Deployment tests now depend on copy-to-ACR jobs and pass their image_tag outputs instead of constructing image_suffix values from build outputs.

Estimated code review effort: 2 (Simple) | ~10 minutes

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning The description explains the failure, root causes, fixes, and validation, but it omits the required Related Issues section and template headings. Add the required Related Issues section and select either the linked-issue path or the confirmed no-related-issue checkbox.
✅ Passed checks (4 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly identifies the CI fix: passing the correct image_tag to nightly deploy tests.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

Comment @coderabbitai help to get the list of available commands.

@datadog-official

Copy link
Copy Markdown

🎯 Code Coverage (details)
Patch Coverage: 100.00%
Overall Coverage: 26.46% (-20.32%)

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 20e5c50 | Docs | Datadog PR Page | Give us feedback!

@nv-tusharma

Copy link
Copy Markdown
Collaborator Author

resolved via: #12642

@nv-tusharma nv-tusharma closed this Aug 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant