Deploy Kubernetes Cluster #33
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy Kubernetes Cluster | |
| on: workflow_dispatch | |
| permissions: | |
| id-token: write | |
| contents: read | |
| # https://docs.github.com/en/actions/deployment/deploying-to-your-cloud-provider/deploying-to-azure/deploying-to-azure-kubernetes-service | |
| # https://docs.github.com/en/actions/publishing-packages/about-packaging-with-github-actions | |
| jobs: | |
| deploy-bicep: | |
| name: Deploy Bicep | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Login to Azure | |
| uses: azure/login@v1 | |
| with: | |
| client-id: ${{ secrets.AZURE_CLIENT_ID }} | |
| tenant-id: ${{ secrets.AZURE_TENANT_ID }} | |
| subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }} | |
| enable-AzPSSession: true | |
| - name: Azure Resource Group Deployment | |
| uses: azure/powershell@v1 | |
| env: | |
| SUBSCRIPTION: ${{ secrets.AZURE_SUBSCRIPTION }} | |
| RESOURCEGROUP: ${{ secrets.AZURE_RG }} | |
| ADMINS: ${{ secrets.ADMIN_GROUP_ID }} | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| azPSVersion: "latest" | |
| inlineScript: | | |
| $Results = New-AzResourceGroupDeployment -Name "aks-$(Get-Date -f yyyyMMddThhmmss)" -ResourceGroupName $Env:RESOURCEGROUP -TemplateFile ./infrastructure/Cluster.bicep -TemplateParameterObject @{ adminId = $Env:ADMINS } | |
| $Results | Out-Host | |
| #! Get the cluster credentials | |
| Get-AzAksCluster -ResourceGroupName $Env:RESOURCEGROUP | Import-AzAksCredential -Force | |
| #! Update the client ID from the deployment output | |
| $kustomize = Get-Content "./clusters/poshcode/flux-system/kustomization.yaml" | |
| $kustomize = $kustomize -replace "azure.workload.identity/client-id: .*$", "azure.workload.identity/client-id: $($Results.Outputs.fluxIdClientId)" | |
| $kustomize | Set-Content "./clusters/poshcode/flux-system/kustomization.yaml" | |
| git config --global user.name 'Workflow' | |
| git config --global user.email '[email protected]' | |
| git commit -am "Update Flux Client ID" | |
| git push | |
| #! Bootstrap Flux | |
| # ./Initialize-Flux.ps1 |