| allowed_environments | Allowed environments participating in releases for RMK commands. | yes | develop,staging |
| cluster_provider_credentials | Credentials in JSON format for different environments and cluster providers.
Example:
cluster_provider_credentials: |
{
"develop": {
"cluster_providers": {
"aws": {
"AWS_ACCESS_KEY_ID": "<aws_access_key_id>",
"AWS_SECRET_ACCESS_KEY": "<aws_secret_access_key>",
"AWS_REGION": "us-east-1"
},
"azure": {
"AZURE_CLIENT_ID": "<azure_client_id>",
"AZURE_CLIENT_SECRET": "<azure_client_secret>",
"AZURE_LOCATION": "eastus",
"AZURE_SUBSCRIPTION_ID": "<azure_subscription_id>",
"AZURE_TENANT_ID": "<azure_tenant_id>"
},
"gcp": {
"GOOGLE_APPLICATION_CREDENTIALS": {
"type": "service_account",
"project_id": "<google_project_id>",
"private_key_id": "<google_private_key_id>",
"private_key": "-----BEGIN PRIVATE KEY-----<example_cert>-----END PRIVATE KEY-----",
"client_email": "example@example.iam.gserviceaccount.com",
"client_id": "<google_client_id>",
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
"token_uri": "https://oauth2.googleapis.com/token",
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/example%40example.iam.gserviceaccount.com",
"universe_domain": "googleapis.com"
},
"GCP_REGION": "us-east1"
},
"onprem": {
"ONPREM_SSH_INIT_SERVER_HOST": "<ssh_init_server_[host|ip]>",
"ONPREM_SSH_PRIVATE_KEY": "<ssh_private_key>",
"ONPREM_SSH_USER": "<ssh_user>"
}
}
},
"production": {
"cluster_providers": {
"aws": {
"AWS_ACCESS_KEY_ID": "<aws_access_key_id>",
"AWS_SECRET_ACCESS_KEY": "<aws_secret_access_key>",
"AWS_REGION": "us-east-1"
},
"azure": {
"AZURE_CLIENT_ID": "<azure_client_id>",
"AZURE_CLIENT_SECRET": "<azure_client_secret>",
"AZURE_LOCATION": "eastus",
"AZURE_SUBSCRIPTION_ID": "<azure_subscription_id>",
"AZURE_TENANT_ID": "<azure_tenant_id>"
},
"gcp": {
"GOOGLE_APPLICATION_CREDENTIALS": {
"type": "service_account",
"project_id": "<google_project_id>",
"private_key_id": "<google_private_key_id>",
"private_key": "-----BEGIN PRIVATE KEY-----<example_cert>-----END PRIVATE KEY-----",
"client_email": "example@example.iam.gserviceaccount.com",
"client_id": "<google_client_id>",
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
"token_uri": "https://oauth2.googleapis.com/token",
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/example%40example.iam.gserviceaccount.com",
"universe_domain": "googleapis.com"
},
"GCP_REGION": "us-east1"
},
"onprem": {
"ONPREM_SSH_INIT_SERVER_HOST": "<ssh_init_server_[host|ip]>",
"ONPREM_SSH_PRIVATE_KEY": "<ssh_private_key>",
"ONPREM_SSH_USER": "<ssh_user>"
}
}
},
"staging": {
"cluster_providers": {
"aws": {
"AWS_ACCESS_KEY_ID": "<aws_access_key_id>",
"AWS_SECRET_ACCESS_KEY": "<aws_secret_access_key>",
"AWS_REGION": "us-east-1"
},
"azure": {
"AZURE_CLIENT_ID": "<azure_client_id>",
"AZURE_CLIENT_SECRET": "<azure_client_secret>",
"AZURE_LOCATION": "eastus",
"AZURE_SUBSCRIPTION_ID": "<azure_subscription_id>",
"AZURE_TENANT_ID": "<azure_tenant_id>"
},
"gcp": {
"GOOGLE_APPLICATION_CREDENTIALS": {
"type": "service_account",
"project_id": "<google_project_id>",
"private_key_id": "<google_private_key_id>",
"private_key": "-----BEGIN PRIVATE KEY-----<example_cert>-----END PRIVATE KEY-----",
"client_email": "example@example.iam.gserviceaccount.com",
"client_id": "<google_client_id>",
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
"token_uri": "https://oauth2.googleapis.com/token",
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/example%40example.iam.gserviceaccount.com",
"universe_domain": "googleapis.com"
},
"GCP_REGION": "us-east1"
},
"onprem": {
"ONPREM_SSH_INIT_SERVER_HOST": "<ssh_init_server_[host|ip]>",
"ONPREM_SSH_PRIVATE_KEY": "<ssh_private_key>",
"ONPREM_SSH_USER": "<ssh_user>"
}
}
}
}
| yes | — |
| github_custom_ref | Custom Git ref (e.g. refs/heads/branch-name) used to override GITHUB_REF for dynamic checkouts. | no | "" |
| github_custom_ref_name | Custom branch name (e.g. branch-name) used to override GITHUB_REF_NAME in matrix jobs or custom workflows. | no | "" |
| github_token_repo_full_access | GitHub token with full access permissions to repositories (used by installer script and RMK). | yes | — |
| rmk_cluster_provider | Cluster provider. Allowed values are "aws", "azure", "gcp", "onprem". | yes | aws |
| rmk_command | RMK command to run. Allowed values are "destroy", "helmfile_validate", "project_update", "provision", "release_destroy", "release_sync", "release_update". | yes | — |
| rmk_destroy_labels | List of labels when running release destroy in RMK (only if rmk_command=destroy|release_destroy).
Labels are not used if rmk_destroy_skip_release_destroy=true and rmk_command=destroy.
Example:
rmk_destroy_labels: |
scope=kodjin
app=fhir-server-api
| no | "" |
| rmk_destroy_skip_release_destroy | Whether to skip release destroy when running destroy in RMK (only if rmk_command=destroy). | no | false |
| rmk_download_url | URL of the download script for RMK installation.
Example:
rmk_download_url: https://edenlabllc-rmk.s3.eu-north-1.amazonaws.com/rmk/s3-installer
| no | https://edenlabllc-rmk.s3.eu-north-1.amazonaws.com/rmk/s3-installer |
| rmk_project_dependency_name | Dependency name. Allows using a set of RMK commands to project dependency version update to project.yaml file (only if rmk_command=project_update). | no | — |
| rmk_project_dependency_version | Dependency version. Allows using a set of RMK commands to project dependency version update to project.yaml file (only if rmk_command=project_update). | no | — |
| rmk_provision_skip_release_sync | Whether to skip release sync when running provision in RMK (only if rmk_command=provision). | no | false |
| rmk_release_repository_full_name | Image repository full name of application (includes registry URL and repository_name, only if rmk_command=release_update). | no | — |
| rmk_release_version | Current application version (only if rmk_command=release_update). | no | — |
| rmk_slack_channel | Channel name for Slack notification (required if rmk_slack_notifications=true). | no | "" |
| rmk_slack_message_details | Additional information in the body of the Slack message (only if rmk_slack_notifications=true).
Example:
rmk_slack_message_details: |
GitHub Actions Build URL: <github.server_url>/<github.repository>/actions/runs/<github.run_id>
GitHub Actions Build Number: <github.run_number>
| no | "" |
| rmk_slack_notifications | Enable Slack notifications. | no | false |
| rmk_slack_webhook | URL for Slack webhook (required if rmk_slack_notifications=true). | no | "" |
| rmk_sync_labels | List of labels when running sync in RMK (only if rmk_command=provision|release_sync).
Labels are not used if rmk_provision_skip_release_sync=true and rmk_command=provision.
Example:
rmk_sync_labels: |
scope=kodjin
app=fhir-server-api
| no | "" |
| rmk_update_skip_deploy | Whether to skip deploy and commit only when running release update in RMK (only if rmk_command=release_update). | no | false |
| rmk_version | RMK version. | no | latest |