Skip to content

deploy

deploy #21

Workflow file for this run

name: deploy
on:
push:
branches:
- main
workflow_dispatch:
inputs:
image_tag:
description: 'Docker image tag to deploy'
required: true
default: 'main'
environment:
description: 'Environment to deploy too'
required: true
default: 'sandbox'
type: choice
options:
- sandbox
- production
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
jobs:
deploy:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
with:
path: 'source/tad/'
- name: get commit hash
id: get_commit_hash
run: |
cd source/tad/
echo "commit_hash=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"
- name: Get GHCR package hash
id: get_package_hash
run: |
if [ "${{ github.event_name }}" == "workflow_dispatch" ]; then
container_id=$(gh api --paginate -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" /orgs/MinBZK/packages/container/tad/versions | jq -r '.[] | select(.metadata.container.tags | contains(["${{ inputs.image_tag }}"])) | .name')
echo "container_id=$container_id" >> "$GITHUB_OUTPUT"
else
container_id=$(gh api --paginate -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" /orgs/MinBZK/packages/container/tad/versions | jq -r '.[] | select(.metadata.container.tags | contains(["main"])) | .name')
echo "container_id=$container_id" >> "$GITHUB_OUTPUT"
fi
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Get deploy environment
id: get_deploy_env
run: |
if [ "${{ github.event_name }}" == "workflow_dispatch" ]; then
echo "env=${{ inputs.environment }}" >> "$GITHUB_OUTPUT"
else
echo "env=sandbox" >> "$GITHUB_OUTPUT"
fi
- name: Print deploy hash and environment
run: |
echo "Container ID: ${{ steps.get_package_hash.outputs.container_id }}"
echo "Overlay: ${{ steps.get_deploy_env.outputs.env }}"
echo "Version: ${{ inputs.image_tag || 'main' }}"
echo "Actor: ${{ github.actor}}"
echo "Commit: ${{ steps.get_commit_hash.outputs.commit_hash }}"
- name: check correct name
run: |
if [ -z "${{steps.get_package_hash.outputs.container_id}}" ]; then
echo "Variable is empty. Failing the workflow."
exit 1
fi
- uses: actions/checkout@v4
with:
repository: 'minbzk/ai-validation-infra'
ref: main
token: ${{ secrets.GH_PAT }}
- name: Configure Git
run: |
git config --global user.name "github-actions[bot]"
git config --global user.email "github-actions[bot]@users.noreply.github.com"
- name: Make changes to the file
run: |
sed -i 's/newTag: .*$/newTag: ${{inputs.image_tag || 'main' }}@${{ steps.get_package_hash.outputs.container_id }}/g' apps/tad/overlays/${{ steps.get_deploy_env.outputs.env }}/kustomization.yaml
sed -i 's/commithash: .*$/commithash: ${{ steps.get_commit_hash.outputs.commit_hash }}/g' apps/tad/overlays/${{ steps.get_deploy_env.outputs.env }}/kustomization.yaml
sed -i 's|minbzk.github.io/version: .*$|minbzk.github.io/version: ${{ inputs.image_tag || 'main' }}|g' apps/tad/overlays/${{ steps.get_deploy_env.outputs.env }}/kustomization.yaml
git add apps/tad/overlays/${{ steps.get_deploy_env.outputs.env }}/kustomization.yaml
- name: show changes
run: git diff --staged
- name: push changes
run: |
git commit -m "Update tad overlay ${{ steps.get_deploy_env.outputs.env }} tag ${{ steps.get_package_hash.outputs.container_id }} by actor ${{ github.actor}}"
git push --force-with-lease
env:
GITHUB_TOKEN: ${{ secrets.GH_PAT }}