deploy-dev.yml

name: 01.Deploy Dev Environment

on:
  push:
    branches:
    - main
    paths-ignore:
    - CHANGELOG.md
    - .pre-commit-config.yaml
    - .conventional-changelog.mjs
    - .release-it.json
    - security-dashboard/**
    - helm/secdash/**
    - terraform/**

env:
  GITHUB_REGISTRY: ghcr.io

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  build-push-app:
    runs-on: ubuntu-22.04
    timeout-minutes: 10
    permissions:
      contents: read
      packages: write

    steps:
    - uses: hmarr/debug-action@f7318c783045ac39ed9bb497e22ce835fdafbfe6
    - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b

    - name: Setup Tools
      uses: ./.github/actions/setup-tools

    - name: Build and Push
      uses: egose/actions/docker-build-push@fc10f2556d8e479a692a1560eea078dacf12f68a
      with:
        registry-url: ${{ env.GITHUB_REGISTRY }}
        registry-username: ${{ github.actor }}
        registry-password: ${{ secrets.GITHUB_TOKEN }}
        image-name: bcgov/pltsvc
        docker-context: .
        docker-file: Dockerfile
        docker-args: |
          deployment_tag=${{ github.sha }}
        metadata-tags: |
          type=ref,event=branch
          type=sha,format=long,prefix=,suffix=

  build-push-pre-prisma:
    runs-on: ubuntu-22.04
    timeout-minutes: 10
    permissions:
      contents: read
      packages: write

    steps:
    - uses: hmarr/debug-action@f7318c783045ac39ed9bb497e22ce835fdafbfe6
    - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b

    - name: Setup Tools
      uses: ./.github/actions/setup-tools

    - name: Build and Push
      uses: egose/actions/docker-build-push@fc10f2556d8e479a692a1560eea078dacf12f68a
      with:
        registry-url: ${{ env.GITHUB_REGISTRY }}
        registry-username: ${{ github.actor }}
        registry-password: ${{ secrets.GITHUB_TOKEN }}
        image-name: bcgov/pltsvc-pre-prisma
        docker-context: .
        docker-file: Dockerfile.db
        metadata-tags: |
          type=ref,event=branch
          type=sha,format=long,prefix=,suffix=

  build-push-pre-data-migrations:
    runs-on: ubuntu-22.04
    timeout-minutes: 10
    permissions:
      contents: read
      packages: write

    steps:
    - uses: hmarr/debug-action@f7318c783045ac39ed9bb497e22ce835fdafbfe6
    - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b

    - name: Setup Tools
      uses: ./.github/actions/setup-tools

    - name: Build and Push
      uses: egose/actions/docker-build-push@fc10f2556d8e479a692a1560eea078dacf12f68a
      with:
        registry-url: ${{ env.GITHUB_REGISTRY }}
        registry-username: ${{ github.actor }}
        registry-password: ${{ secrets.GITHUB_TOKEN }}
        image-name: bcgov/pltsvc-pre-data-migrations
        docker-context: data-migrations
        docker-file: data-migrations/Dockerfile
        metadata-tags: |
          type=ref,event=branch
          type=sha,format=long,prefix=,suffix=

  build-push-email:
    runs-on: ubuntu-22.04
    timeout-minutes: 10
    permissions:
      contents: read
      packages: write

    steps:
    - uses: hmarr/debug-action@f7318c783045ac39ed9bb497e22ce835fdafbfe6
    - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b

    - name: Setup Tools
      uses: ./.github/actions/setup-tools

    - name: Build and Push
      uses: egose/actions/docker-build-push@fc10f2556d8e479a692a1560eea078dacf12f68a
      with:
        registry-url: ${{ env.GITHUB_REGISTRY }}
        registry-username: ${{ github.actor }}
        registry-password: ${{ secrets.GITHUB_TOKEN }}
        image-name: bcgov/pltsvc-email
        docker-context: .
        docker-file: Dockerfile.email
        metadata-tags: |
          type=ref,event=branch
          type=sha,format=long,prefix=,suffix=

  build-push-m365proxy:
    runs-on: ubuntu-22.04
    timeout-minutes: 5
    permissions:
      contents: read
      packages: write

    steps:
    - uses: hmarr/debug-action@f7318c783045ac39ed9bb497e22ce835fdafbfe6
    - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b

    - name: Build and Push
      uses: egose/actions/docker-build-push@fc10f2556d8e479a692a1560eea078dacf12f68a
      with:
        registry-url: ${{ env.GITHUB_REGISTRY }}
        registry-username: ${{ github.actor }}
        registry-password: ${{ secrets.GITHUB_TOKEN }}
        image-name: bcgov/pltsvc-localdev-m365proxy
        docker-context: localdev/m365proxy
        docker-file: localdev/m365proxy/Dockerfile
        metadata-tags: |
          type=ref,event=branch
          type=sha,format=long,prefix=,suffix=

  build-push-nats-provision:
    runs-on: ubuntu-22.04
    timeout-minutes: 10
    permissions:
      contents: read
      packages: write

    steps:
    - uses: hmarr/debug-action@f7318c783045ac39ed9bb497e22ce835fdafbfe6
    - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b

    - name: Setup Tools
      uses: ./.github/actions/setup-tools

    - name: Build and Push
      uses: egose/actions/docker-build-push@fc10f2556d8e479a692a1560eea078dacf12f68a
      with:
        registry-url: ${{ env.GITHUB_REGISTRY }}
        registry-username: ${{ github.actor }}
        registry-password: ${{ secrets.GITHUB_TOKEN }}
        image-name: bcgov/pltsvc-localdev-nats-provision
        docker-context: localdev/nats-provision
        docker-file: localdev/nats-provision/Dockerfile
        metadata-tags: |
          type=ref,event=branch
          type=sha,format=long,prefix=,suffix=

  deploy:
    needs: [build-push-app, build-push-pre-prisma, build-push-pre-data-migrations, build-push-email, build-push-m365proxy, build-push-nats-provision]
    runs-on: ubuntu-22.04
    timeout-minutes: 5
    permissions:
      contents: read
    environment:
      name: dev
      url: https://dev-pltsvc.apps.silver.devops.gov.bc.ca

    steps:
    - uses: hmarr/debug-action@f7318c783045ac39ed9bb497e22ce835fdafbfe6
    - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b

    - name: Authenticate and set context
      uses: redhat-actions/oc-login@dfbd9912672664f9df2023c1c16e07bcf306043c
      with:
        openshift_server_url: ${{ secrets.OPENSHIFT_SERVER }}
        openshift_token: ${{ secrets.OPENSHIFT_TOKEN }}
        namespace: ${{ vars.OPENSHIFT_NAMESPACE }}
        insecure_skip_tls_verify: true

    - name: Deploy apps with Helm chart
      run: |
        make upgrade \
        NAMESPACE=${{ vars.OPENSHIFT_NAMESPACE }} \
        IMAGE_TAG=${{ github.sha }}
      working-directory: ./helm/main