github-copier/env-cloudrun.yaml at main · grove-platform/github-copier · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
# Cloud Run environment variables
# Format: KEY: "VALUE" (no env_variables wrapper needed)
# Note: PORT is automatically set by Cloud Run, don't override it

# Org-specific values (GITHUB_APP_ID, INSTALLATION_ID) are passed via
# --set-env-vars in the deploy step using GitHub Actions secrets.
# Do NOT commit org-specific values here.

# Config Repository (where main config file is stored)
CONFIG_REPO_OWNER: "grove-platform"
CONFIG_REPO_NAME: "github-copier"
CONFIG_REPO_BRANCH: "main"

# Secret Manager References (short names — resolved at runtime via SecretPath())
PEM_NAME: "CODE_COPIER_PEM"
WEBHOOK_SECRET_NAME: "webhook-secret"
MONGO_URI_SECRET_NAME: "mongo-uri"

# Application Settings
WEBSERVER_PATH: "/events"
MAIN_CONFIG_FILE: ".copier/main.yaml"
USE_MAIN_CONFIG: "true"
DEPRECATION_FILE: "deprecated_examples.json"

# Committer Information
COMMITTER_NAME: "GitHub Copier App"
COMMITTER_EMAIL: "bot@mongodb.com"

# Google Cloud Configuration
GOOGLE_CLOUD_PROJECT_ID: "github-copy-code-examples"
COPIER_LOG_NAME: "code-copier-log"

# Feature Flags
AUDIT_ENABLED: "true"
METRICS_ENABLED: "true"

# Operator dashboard at https://<service>/operator/
# Access is gated by each user's GitHub PAT: they authenticate with their
# personal token, and their permission on OPERATOR_AUTH_REPO determines role
# (admin/maintain → operator, write/triage/read → writer).
OPERATOR_UI_ENABLED: "true"
OPERATOR_AUTH_REPO: "grove-platform/github-copier"
OPERATOR_REPO_SLUG: "grove-platform/github-copier"
#
# Optional: OPERATOR_RELEASE_GITHUB_TOKEN, OPERATOR_RELEASE_TARGET_BRANCH
#
# AI rule suggester — calls Anthropic via the Grove Foundry APIM gateway so
# Cloud Run can reach it without standing up a model-serving VM. The gateway
# key is loaded from Secret Manager via ANTHROPIC_API_KEY_SECRET_NAME (create
# the secret once with `gcloud secrets create anthropic-api-key --data-file=...`).
# Operators can still switch the active model (haiku / sonnet / opus) from
# the UI without a redeploy.
LLM_PROVIDER: "anthropic"
LLM_BASE_URL: "https://grove-gateway-prod.azure-api.net/grove-foundry-prod/anthropic"
LLM_MODEL: "claude-haiku-4-5"
ANTHROPIC_API_KEY_SECRET_NAME: "anthropic-api-key"
#
# To use a local Ollama instance instead (e.g. in a dev environment with a
# reachable Ollama VM), comment out the three lines above and use:
# LLM_PROVIDER: "ollama"
# LLM_BASE_URL: "http://ollama.internal:11434"
# LLM_MODEL: "qwen2.5-coder:7b"