Adding a wrapper workflow to call the deploy tests

Signed-off-by: pvijayakrish <[email protected]>

Author: pvijayakrish

.github/workflows/container-validation-backends.yml

@@ -25,13 +25,10 @@ concurrency:
     group: docker-build-test-${{ github.ref_name == 'main' && github.run_id || github.ref_name }}
     cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
-env_anchor: &secure_env
-  environment: ${{ github.event_name == 'workflow_call' && 'protected-deploy' || '' }}
-
 jobs:
   changed-files:
     runs-on: ubuntu-latest
-    <<: *secure_env
+    environment: ${{ github.event_name == 'workflow_call' && 'protected-deploy' || '' }}
     outputs:
       has_code_changes: ${{ steps.filter.outputs.has_code_changes }}
     steps:
@@ -45,7 +42,7 @@ jobs:
 
   backend-status-check:
     runs-on: ubuntu-latest
-    <<: *secure_env
+    environment: ${{ github.event_name == 'workflow_call' && 'protected-deploy' || '' }}
     needs: [vllm, sglang, trtllm, operator]
     if: always()
     steps:
@@ -56,7 +53,7 @@ jobs:
   operator:
     needs: changed-files
     if: needs.changed-files.outputs.has_code_changes == 'true'
-    <<: *secure_env
+    environment: ${{ github.event_name == 'workflow_call' && 'protected-deploy' || '' }}
     strategy:
       fail-fast: false
       matrix:
@@ -137,7 +134,7 @@ jobs:
   vllm:
     needs: changed-files
     if: needs.changed-files.outputs.has_code_changes == 'true'
-    <<: *secure_env
+    environment: ${{ github.event_name == 'workflow_call' && 'protected-deploy' || '' }}
     strategy:
       fail-fast: false
       matrix:
@@ -207,7 +204,7 @@ jobs:
   sglang:
     needs: changed-files
     if: needs.changed-files.outputs.has_code_changes == 'true'
-    <<: *secure_env
+    environment: ${{ github.event_name == 'workflow_call' && 'protected-deploy' || '' }}
     strategy:
       fail-fast: false
       matrix:
@@ -275,7 +272,7 @@ jobs:
   trtllm:
     needs: changed-files
     if: needs.changed-files.outputs.has_code_changes == 'true'
-    <<: *secure_env
+    environment: ${{ github.event_name == 'workflow_call' && 'protected-deploy' || '' }}
     strategy:
       fail-fast: false
       matrix:
@@ -343,7 +340,7 @@ jobs:
   deploy-test-fault-tolerance:
     runs-on: cpu-amd-m5-2xlarge
     if: needs.changed-files.outputs.has_code_changes == 'true'
-    <<: *secure_env
+    environment: ${{ github.event_name == 'workflow_call' && 'protected-deploy' || '' }}
     needs: [changed-files, operator, vllm, trtllm, sglang]
     permissions:
       contents: read
@@ -487,7 +484,7 @@ jobs:
   # Upload metrics for this workflow and all its jobs
   upload-workflow-metrics:
     name: Upload Workflow Metrics
-    <<: *secure_env
+    environment: ${{ github.event_name == 'workflow_call' && 'protected-deploy' || '' }}
     runs-on: gitlab
     if: always()  # Always run, even if other jobs fail
     needs: [backend-status-check]  # Wait for the status check which waits for all build jobs
@@ -539,7 +536,7 @@ jobs:
     runs-on: cpu-amd-m5-2xlarge
     # TODO: Uncomment this when we have a way to test the deploy-operator job in CI.
     #if: needs.changed-files.outputs.has_code_changes == 'true'
-    <<: *secure_env
+    environment: ${{ github.event_name == 'workflow_call' && 'protected-deploy' || '' }}
     if: inputs.run_deploy_operator
     needs: [changed-files, operator, vllm, sglang, trtllm]
     env:
@@ -619,7 +616,7 @@ jobs:
     # TODO: Uncomment this when we have a way to test the deploy-test-vllm job in CI.
     #if: needs.changed-files.outputs.has_code_changes == 'true'
     if: inputs.run_deploy_operator
-    <<: *secure_env
+    environment: ${{ github.event_name == 'workflow_call' && 'protected-deploy' || '' }}
     needs: [changed-files, deploy-operator, vllm]
     permissions:
       contents: read
@@ -776,7 +773,7 @@ jobs:
     # TODO: Uncomment this when we have a way to test the deploy-test-sglang job in CI.
     #if: needs.changed-files.outputs.has_code_changes == 'true'
     if: inputs.run_deploy_operator
-    <<: *secure_env
+    environment: ${{ github.event_name == 'workflow_call' && 'protected-deploy' || '' }}
     needs: [changed-files, deploy-operator, sglang]
     permissions:
       contents: read
@@ -800,7 +797,7 @@ jobs:
     # TODO: Uncomment this when we have a way to test the deploy-test-trtllm job in CI.
     #if: needs.changed-files.outputs.has_code_changes == 'true'
     if: inputs.run_deploy_operator
-    <<: *secure_env
+    environment: ${{ github.event_name == 'workflow_call' && 'protected-deploy' || '' }}
     needs: [changed-files, deploy-operator, trtllm]
     permissions:
       contents: read
@@ -826,7 +823,7 @@ jobs:
     # TODO: Uncomment the below if statement when we have a way to test the cleanup job in CI.
     # if: always()
     if: inputs.run_deploy_operator
-    <<: *secure_env
+    environment: ${{ github.event_name == 'workflow_call' && 'protected-deploy' || '' }}
     needs: [changed-files, deploy-operator, deploy-test-trtllm, deploy-test-sglang, deploy-test-vllm]
     steps:
     - name: Output Node Name