Skip to content

ci(release): migrate PyPI publishing to OSS Exit Gate - #32

Closed
alonsopf89 wants to merge 1 commit into
google:mainfrom
alonsopf89:feat/oss-exit-gate-migration
Closed

alonsopf89 wants to merge 1 commit into
google:mainfrom
alonsopf89:feat/oss-exit-gate-migration

Conversation

@alonsopf89

Copy link
Copy Markdown

Summary

Migrates .github/workflows/tests.yml to publish xarray-tensorstore to PyPI through the Google OSS Exit Gate pipeline (xarray-tensorstore/pypi), replacing static PyPI API token secrets with keyless Workload Identity Federation.

Changes

  • Authenticates via keyless Workload Identity Federation (google-github-actions/auth).
  • Stages built distributions to Artifact Registry (https://us-python.pkg.dev/oss-exit-gate-prod/xarray-tensorstore--pypi/) and uploads manifest.json to gs://oss-exit-gate-prod-projects-bucket/xarray-tensorstore/pypi/manifests/.

Verification

  • Internal OSS Exit Gate onboarding configuration (cl/1008994992) and Artifact Registry provisioning are submitted and active.
  • End-to-end Step 8 smoke test (xarray-tensorstore@0.3.0, publish_all: false) was executed and verified against xarray-tensorstore--pypi.

@alonsopf89 alonsopf89 closed this Oct 29, 2026
@alonsopf89
alonsopf89 force-pushed the feat/oss-exit-gate-migration branch from 2fc18af to 1dc4689 Compare October 29, 2026 02:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant