Infra Update v6: Modules Injection, More Provenance

.github/CODEOWNERS

@@ -0,0 +1,3 @@
+# Tommy needs to review changes to infra
+/.github/ @CodeGat
+

.github/workflows/cd.yml

@@ -10,10 +10,13 @@ on:
 jobs:
   cd:
     name: CD
-    uses: access-nri/build-cd/.github/workflows/cd.yml@v5
+    uses: access-nri/build-cd/.github/workflows/cd.yml@v6
     with:
       model: ${{ vars.NAME }}
       root-sbd: access-esm1p5
+      spack-manifest-schema-version: 1-0-7
+      config-versions-schema-version: 3-0-0
+      config-packages-schema-version: 1-0-0
     permissions:
       contents: write
       # Required because later workflows also handle on.pull_request trigger

.github/workflows/ci.yml

@@ -23,35 +23,35 @@ jobs:
   pr-ci:
     name: CI
     if: >-
-      (github.event_name == 'pull_request' && github.event.action != 'closed') ||
-      (github.event_name == 'issue_comment' && startsWith(github.event.comment.body, '!redeploy'))
-    uses: access-nri/build-cd/.github/workflows/ci.yml@v5
+      (github.event_name == 'pull_request' && github.event.action != 'closed') || (github.event_name == 'issue_comment' && startsWith(github.event.comment.body, '!redeploy'))
+    uses: access-nri/build-cd/.github/workflows/ci.yml@v6
     with:
       model: ${{ vars.NAME }}
       root-sbd: access-esm1p5
       pr: ${{ github.event_name == 'pull_request' && github.event.pull_request.number || github.event.issue.number }}
+      spack-manifest-schema-version: 1-0-7
+      config-versions-schema-version: 3-0-0
+      config-packages-schema-version: 1-0-0
     permissions:
       pull-requests: write
       contents: write
       statuses: write
     secrets: inherit
-
   pr-comment:
     name: Comment
     if: github.event_name == 'issue_comment'
-    uses: access-nri/build-cd/.github/workflows/ci-comment.yml@v5
+    uses: access-nri/build-cd/.github/workflows/ci-comment.yml@v6
     with:
       model: ${{ vars.NAME }}
       root-sbd: access-esm1p5
     permissions:
       pull-requests: write
       contents: write
     secrets: inherit
-
   pr-closed:
     name: Closed
     if: github.event_name == 'pull_request' && github.event.action == 'closed'
-    uses: access-nri/build-cd/.github/workflows/ci-closed.yml@v5
+    uses: access-nri/build-cd/.github/workflows/ci-closed.yml@v6
     with:
       root-sbd: access-esm1p5
     secrets: inherit

config/packages.json

@@ -0,0 +1,12 @@
+{
+  "$schema": "https://raw.githubusercontent.com/ACCESS-NRI/schema/main/au.org.access-nri/model/deployment/config/packages/1-0-0.json",
+  "provenance": [
+    "cice4",
+    "um7",
+    "mom5",
+    "oasis3-mct"
+  ],
+  "injection": [
+    "openmpi"
+  ]
+}

spack.yaml

@@ -47,19 +47,6 @@ spack:
   view: true
   concretizer:
     unify: true
-  modules:
-    default:
-      tcl:
-        include:
-          - access-esm1p5
-          - cice4
-          - um7
-          - mom5
-        projections:
-          access-esm1p5: '{name}/2024.12.1'
-          cice4: '{name}/access-esm1.5-2025.04.001-{hash:7}'
-          um7: '{name}/2024.10.17-{hash:7}'
-          mom5: '{name}/access-esm1.5-2025.03.002-{hash:7}'
   config:
     install_tree:
       root: $spack/../restricted/ukmo/release