diff --git a/.github/workflows/platform-dev-secrets.yml b/.github/workflows/platform-dev-secrets.yml deleted file mode 100644 index e379e02400d3..000000000000 --- a/.github/workflows/platform-dev-secrets.yml +++ /dev/null @@ -1,47 +0,0 @@ -name: Platform development secrets - -# One-off, dispatch-only. cmux-platform-development serves NEXT Cloud's CloudDO routes (the CloudDO -# move into cmux-platform) and needs the same JWT_PRIVATE_JWK as cmux-api-development plus a Freestyle -# key. The cmux-next-development environment holds the only readable copies, so this job pipes them -# (stdin, never logged) into the Worker's secrets. It writes no other secret and prints no value. -# Runs only from feat-cmux-next (the environment's branch policy). Same pattern as the staging step in -# backend.yml that keeps cmux-platform-staging's JWT_PRIVATE_JWK equal to cmux-api-staging's. -# GitHub registers dispatch workflows only from the default branch (main), so this also runs on the -# push that lands it on feat-cmux-next (path-filtered to this file). Delete it after use. -on: - push: - branches: [feat-cmux-next] - paths: [.github/workflows/platform-dev-secrets.yml] - workflow_dispatch: - -permissions: - contents: read - -concurrency: - group: platform-dev-secrets - cancel-in-progress: false - -jobs: - put: - if: github.ref == 'refs/heads/feat-cmux-next' - runs-on: ${{ vars.LINUX_RUNNER || 'blacksmith-4vcpu-ubuntu-2404' }} - environment: cmux-next-development - timeout-minutes: 10 - steps: - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 - with: - node-version: "24" - - name: Put JWT_PRIVATE_JWK and CLOUD_FREESTYLE_API_KEY on cmux-platform-development - env: - CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }} - CLOUDFLARE_ACCOUNT_ID: 0c1675e0def6de1ab3a50a4e17dc5656 - JWT_PRIVATE_JWK: ${{ secrets.JWT_PRIVATE_JWK }} - FREESTYLE_API_KEY: ${{ secrets.FREESTYLE_API_KEY }} - run: | - set -euo pipefail - cd "$RUNNER_TEMP" - [ -n "$JWT_PRIVATE_JWK" ] || { echo "::error::cmux-next-development has no JWT_PRIVATE_JWK"; exit 1; } - [ -n "$FREESTYLE_API_KEY" ] || { echo "::error::cmux-next-development has no FREESTYLE_API_KEY"; exit 1; } - printf '%s' "$JWT_PRIVATE_JWK" | npx -y wrangler@4.156.0 secret put JWT_PRIVATE_JWK --name cmux-platform-development - printf '%s' "$FREESTYLE_API_KEY" | npx -y wrangler@4.156.0 secret put CLOUD_FREESTYLE_API_KEY --name cmux-platform-development - npx -y wrangler@4.156.0 secret list --name cmux-platform-development | grep '"name"' diff --git a/tests/test_ci_linux_single_size.py b/tests/test_ci_linux_single_size.py index edaf09a45640..dcaaedc734fc 100644 --- a/tests/test_ci_linux_single_size.py +++ b/tests/test_ci_linux_single_size.py @@ -52,7 +52,6 @@ "ci-fast-guards.yml": 1, "ci-guard-attribution.yml": 1, "ci-guards.yml": 5, - "platform-dev-secrets.yml": 1, "ci-health-report.yml": 1, "ci-hosted-queue-rescue.yml": 1, "ci-queue-janitor.yml": 1,