add deploy workflow #2321
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| branches: | |
| - main | |
| types: | |
| - labeled | |
| - synchronize | |
| - reopened | |
| - opened | |
| - converted_to_draft | |
| env: | |
| CONTAINER_REGISTRY: ghcr.io | |
| jobs: | |
| docker: | |
| name: Docker build and push | |
| if: contains(github.event.pull_request.labels.*.name, 'deploy') || contains(github.event.pull_request.labels.*.name, 'deploy_v2') || github.event_name != 'pull_request' | |
| runs-on: ubuntu-latest | |
| outputs: | |
| docker_image: ${{ steps.dockerimage.outputs.docker_image_tag }} | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: ./.github/workflows/actions/build-docker | |
| id: dockerimage | |
| with: | |
| github_username: ${{ github.actor }} | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| deploy_review: | |
| name: Deploy to review environment | |
| concurrency: deploy_review_${{ github.event.pull_request.number }} | |
| needs: [docker] | |
| runs-on: ubuntu-latest | |
| if: contains(github.event.pull_request.labels.*.name, 'deploy') | |
| environment: | |
| name: review | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: ./.github/workflows/actions/deploy-environment | |
| id: deploy | |
| with: | |
| environment_name: review | |
| docker_image: ${{ needs.docker.outputs.docker_image }} | |
| azure_credentials: ${{ secrets.AZURE_CREDENTIALS }} | |
| terraform_vars: workspace_variables/review.tfvars.json | |
| pr_id: ${{ github.event.pull_request.number }} | |
| - name: Post sticky pull request comment | |
| if: github.event_name == 'pull_request' | |
| uses: marocchino/sticky-pull-request-comment@v2 | |
| with: | |
| message: | | |
| Review app deployed to ${{ steps.deploy.outputs.environment_url }} | |
| deploy_v2_review: | |
| name: Deploy to review_aks environment | |
| concurrency: deploy_v2_review_${{ github.event.pull_request.number }} | |
| needs: [docker] | |
| runs-on: ubuntu-latest | |
| if: contains(github.event.pull_request.labels.*.name, 'deploy_v2') | |
| environment: | |
| name: review_aks | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: ./.github/workflows/actions/deploy_v2 | |
| id: deploy_v2 | |
| with: | |
| environment: review_aks | |
| docker_image: ${{ needs.docker.outputs.docker_image }} | |
| azure-credentials: ${{ secrets.AZURE_CREDENTIALS }} | |
| arm-access-key: ${{ secrets.ARM_ACCESS_KEY }} | |
| pr-id: ${{ github.event.pull_request.number }} | |
| - name: Post sticky pull request comment | |
| if: github.event_name == 'pull_request' | |
| uses: marocchino/sticky-pull-request-comment@v2 | |
| with: | |
| message: | | |
| AKS review app deployed to ${{ steps.deploy_v2.outputs.environment_url }} | |
| deploy_v2_dev: | |
| name: Deploy to development_aks environment | |
| concurrency: deploy_v2_development | |
| needs: [docker] | |
| runs-on: ubuntu-latest | |
| continue-on-error: true | |
| if: github.ref == 'refs/heads/main' && github.event_name == 'push' | |
| environment: | |
| name: development_aks | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: ./.github/workflows/actions/deploy_v2 | |
| id: deploy_v2 | |
| with: | |
| environment: development_aks | |
| docker_image: ${{ needs.docker.outputs.docker_image }} | |
| azure-credentials: ${{ secrets.AZURE_CREDENTIALS }} | |
| arm-access-key: ${{ secrets.ARM_ACCESS_KEY }} | |
| - uses: ./.github/workflows/actions/smoke-test-v2 | |
| id: smoke-test | |
| with: | |
| environment: development | |
| azure_credentials: ${{ secrets.AZURE_CREDENTIALS }} | |
| deploy_nonprod: | |
| name: Deploy to ${{ matrix.environment }} environment | |
| runs-on: ubuntu-latest | |
| if: github.ref == 'refs/heads/main' && github.event_name == 'push' | |
| concurrency: deploy_${{ matrix.environment }} | |
| needs: [docker] | |
| strategy: | |
| max-parallel: 1 | |
| matrix: | |
| environment: [dev, test, preprod] | |
| environment: | |
| name: ${{ matrix.environment }} | |
| url: ${{ steps.deploy.outputs.environment_url }} | |
| outputs: | |
| environment_url: ${{ steps.deploy.outputs.environment_url }} | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Docker image tag | |
| id: image | |
| run: | | |
| echo ::set-output name=tag::$CONTAINER_REGISTRY/$(echo $GITHUB_REPOSITORY | tr '[:upper:]' '[:lower:]'):$GITHUB_SHA | |
| env: | |
| CONTAINER_REGISTRY: ${{ env.CONTAINER_REGISTRY }} | |
| shell: bash | |
| - uses: ./.github/workflows/actions/deploy-environment | |
| id: deploy | |
| with: | |
| environment_name: ${{ matrix.environment }} | |
| docker_image: ${{ steps.image.outputs.tag }} | |
| azure_credentials: ${{ secrets.AZURE_CREDENTIALS }} | |
| terraform_vars: workspace_variables/${{ matrix.environment }}.tfvars.json | |
| - uses: ./.github/workflows/actions/smoke-test | |
| id: smoke-test | |
| with: | |
| environment: ${{ matrix.environment }} | |
| azure_credentials: ${{ secrets.AZURE_CREDENTIALS }} | |
| deploy_production: | |
| name: Deploy to production environment | |
| runs-on: ubuntu-latest | |
| if: github.ref == 'refs/heads/main' && github.event_name == 'push' | |
| environment: | |
| name: production | |
| url: ${{ steps.deploy.outputs.environment_url }} | |
| concurrency: deploy_production | |
| needs: [docker, deploy_nonprod] | |
| outputs: | |
| environment_url: ${{ steps.deploy.outputs.environment_url }} | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Docker image tag | |
| id: image | |
| run: | | |
| echo ::set-output name=tag::$CONTAINER_REGISTRY/$(echo $GITHUB_REPOSITORY | tr '[:upper:]' '[:lower:]'):$GITHUB_SHA | |
| env: | |
| CONTAINER_REGISTRY: ${{ env.CONTAINER_REGISTRY }} | |
| shell: bash | |
| - uses: ./.github/workflows/actions/deploy-environment | |
| id: deploy | |
| with: | |
| environment_name: production | |
| docker_image: ${{ steps.image.outputs.tag }} | |
| azure_credentials: ${{ secrets.AZURE_CREDENTIALS }} | |
| terraform_vars: workspace_variables/production.tfvars.json |