deploy #8
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: deploy | |
| on: | |
| push: | |
| branches: | |
| - main | |
| workflow_dispatch: | |
| inputs: | |
| image_tag: | |
| description: 'Docker image tag to deploy' | |
| required: true | |
| default: 'main' | |
| environment: | |
| description: 'Environment to deploy too' | |
| required: true | |
| default: 'sandbox' | |
| type: choice | |
| options: | |
| - sandbox | |
| - production | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| deploy: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| path: 'source/tad/' | |
| - name: get commit hash | |
| id: get_commit_hash | |
| run: | | |
| cd source/tad/ | |
| echo "commit_hash=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT" | |
| - name: Get GHCR package hash | |
| id: get_package_hash | |
| run: | | |
| if [ "${{ github.event_name }}" == "workflow_dispatch" ]; then | |
| container_id=$(gh api --paginate -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" /orgs/MinBZK/packages/container/tad/versions | jq '.[] | select(.metadata.container.tags | contains(["${{ inputs.image_tag }}"])) | .name') | |
| echo "container_id=$container_id" >> "$GITHUB_OUTPUT" | |
| else | |
| container_id=$(gh api --paginate -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" /orgs/MinBZK/packages/container/tad/versions | jq '.[] | select(.metadata.container.tags | contains(["main"])) | .name') | |
| echo "container_id=$container_id" >> "$GITHUB_OUTPUT" | |
| fi | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Get deploy environment | |
| id: get_deploy_env | |
| run: | | |
| if [ "${{ github.event_name }}" == "workflow_dispatch" ]; then | |
| echo "env=${{ inputs.environment }}" >> "$GITHUB_OUTPUT" | |
| else | |
| echo "env=sandbox" >> "$GITHUB_OUTPUT" | |
| fi | |
| - name: Print deploy hash and environment | |
| run: | | |
| echo "Container ID: ${{ steps.get_package_hash.outputs.container_id }}" | |
| echo "Overlay: ${{ steps.get_deploy_env.outputs.env }}" | |
| echo "Version: ${{ inputs.image_tag || 'main' }}" | |
| echo "Actor: ${{ github.actor}}" | |
| echo "Commit: ${{ steps.get_commit_hash.outputs.commit_hash }}" | |
| - name: check correct name | |
| run: | | |
| if [ -z "${{steps.get_package_hash.outputs.container_id}}" ]; then | |
| echo "Variable is empty. Failing the workflow." | |
| exit 1 | |
| fi | |
| - uses: actions/checkout@v4 | |
| with: | |
| repository: 'minbzk/ai-validation-infra' | |
| ref: main | |
| token: ${{ secrets.GH_PAT }} | |
| - name: Configure Git | |
| run: | | |
| git config --global user.name "github-actions[bot]" | |
| git config --global user.email "github-actions[bot]@users.noreply.github.com" | |
| - name: Make changes to the file | |
| run: | | |
| sed -i 's/newTag: .*$/newTag: ${{inputs.image_tag || 'main' }}@${{ steps.get_package_hash.outputs.container_id }}/g' apps/tad/overlays/${{ steps.get_deploy_env.outputs.env }}/kustomization.yaml | |
| sed -i 's/commithash: .*$/commithash: ${{ steps.get_commit_hash.outputs.commit_hash }}/g' apps/tad/overlays/${{ steps.get_deploy_env.outputs.env }}/kustomization.yaml | |
| sed -i 's|minbzk.github.io/version: .*$|minbzk.github.io/version: ${{ inputs.image_tag || 'main' }} }|g' apps/tad/overlays/${{ steps.get_deploy_env.outputs.env }}/kustomization.yaml | |
| git add apps/tad/overlays/${{ steps.get_deploy_env.outputs.env }}/kustomization.yaml | |
| - name: show changes | |
| run: git diff --staged | |
| - name: push changes | |
| run: | | |
| git commit -m "Update tad overlay ${{ steps.get_deploy_env.outputs.env }} tag ${{ steps.get_package_hash.outputs.container_id }} by actor ${{ github.actor}}" | |
| git push | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GH_PAT }} | |
| - name: remove ssh key | |
| if: always() | |
| run: rm -f ~/.ssh/id_rsa |