Publish To Environment breaks CI/CD pipelines

[gntpet]

Hey @freddydk,

I have just tried to use "Publish To Environment" to push changes to our 'PROD' environment.

Since that environment is not defined in the environment list & I have no environment secret defined, it takes me through "device login" path. Very smooth and handy

Then, it deploys artifacts to the environment. All good here.

But, when my CICD process runs, it suddenly picks this PROD environment and tries to deploy to it. I never asked for it, and I have no setup for it in my AL go settings.

My Al-go-settings file looks like this:

{
  "type": "PTE",
  "templateUrl": "https://github.com/microsoft/AL-Go-PTE@preview",
  "treatTestFailuresAsWarnings": true,
  "doNotRunBcptTests": true,
  "enableCodeCop": true,
  "rulesetFile": "../al.ruleset.json",
  "companyName": "TNM Automated Test",
  "runs-on": "srs-eid",   
  "githubRunner": "srs-eid",
  "environments": [
    "SRSQA"
  ],
  "DeployToSRSQA": {
    "EnvironmentType": "SaaS",
    "EnvironmentName": "SRSQA",
    "Projects": "SRS.nl",
    "Branches": [
      "main"
    ],
    "SyncMode": "ForceSync",
    "ContinuousDeployment": true,
    "runs-on": "srs-eid"
  },
  "EnableTaskScheduler": true
}

Best Regards,
Gintautas

[mazhelez]

Hey @gntpet

Using excludeEnvironments setting (see doc in AL-Go settings) will hopefully solve your issue.

[freddydk]

The reason for this is that GitHub creates the environment under environments when you run Publish to environment to that.
excludeEnvironments as Maria says or using the DeployToSRSPROD, setting "ContinuousDeployment": false should solve this.

[freddydk]

It is counterintutive though that an environment used to publish once gets picked up for continuous deployment automatically - will investigate what we can do about that.

[freddydk]

I think this should be fixed by only allowing continuous deployment to environments, where a authcontext secret exists in either GitHub or the KeyVault. If no authcontext secret exists, the deployment will fail anyway and we shouldn't try in the first place.