Adding tags for manged entities

Kong · Jul 27, 2023 · 80bff07 · 80bff07
1 parent ed14be3
commit 80bff07
Show file tree

Hide file tree

Showing 3 changed files with 18 additions and 2 deletions.
diff --git a/.github/workflows/deploy-kong-PRD.yaml b/.github/workflows/deploy-kong-PRD.yaml
@@ -36,6 +36,7 @@ jobs:
 
       - name: deck sync
         run: |
-          deck sync -s PRD/kong/kong.yaml \
+          deck sync --select-tags platform-repo-managed \
+              -s PRD/kong/kong.yaml \
               --konnect-runtime-group-name KongAir-PRD \
               --konnect-token ${{ secrets.KONNECT_PAT }}
diff --git a/.github/workflows/stage-kong-for-PRD.yaml b/.github/workflows/stage-kong-for-PRD.yaml
@@ -46,7 +46,10 @@ jobs:
         run: |
           EOF=$(dd if=/dev/urandom bs=15 count=1 status=none | base64)
           echo "DIFF<<$EOF" >> $GITHUB_ENV
-          deck diff -s PRD/kong/kong.yaml --konnect-runtime-group-name KongAir-PRD --konnect-token ${{ secrets.KONNECT_PAT }} >> $GITHUB_ENV
+          deck diff --select-tag platform-repo-managed \
+            -s PRD/kong/kong.yaml \
+            --konnect-runtime-group-name KongAir-PRD \
+            --konnect-token ${{ secrets.KONNECT_PAT }} >> $GITHUB_ENV
           echo "$EOF" >> $GITHUB_ENV
 
       - name: Create PR to stage changes for the Kong Gateway in production

diff --git a/platform/kong/patches.yaml b/platform/kong/patches.yaml
@@ -19,3 +19,15 @@ patches:
         key_claim_name: "iss"
         secret_is_base64: false
         maximum_expiration: 86400
+
+  # Tag all entities that are managed by the platform
+  # team process so we can isolate entities that may be
+  # created using other means on the system. For example,
+  # consumer credentials may be defined elsewhere and we
+  # don't want deck to sync or diff off them in this process
+  - selectors:
+    - $
+    values:
+      tags:
+        - platform-repo-managed
+