From 291069814008044ebe71027801b70a3aacbc6454 Mon Sep 17 00:00:00 2001 From: seaerchin Date: Tue, 26 Nov 2024 13:24:48 +0800 Subject: [PATCH] chore: add uat workflow --- .github/workflows/deploy_uat.yml | 47 ++++++++++++++++++++++++++++++++ 1 file changed, 47 insertions(+) create mode 100644 .github/workflows/deploy_uat.yml diff --git a/.github/workflows/deploy_uat.yml b/.github/workflows/deploy_uat.yml new file mode 100644 index 0000000000..c9c1823ba8 --- /dev/null +++ b/.github/workflows/deploy_uat.yml @@ -0,0 +1,47 @@ +name: Deploy to uat + +concurrency: + group: ${{ github.ref }} + cancel-in-progress: true + +on: + push: + branches: + - uat + +# NOTE: This is actually using our federated isomer-staging account +jobs: + deploy_staging: + name: Deploy app to uat + uses: ./.github/workflows/aws_deploy.yml + # NOTE: deploy in `staging` env to set env specific secrets + with: + aws-region: "ap-southeast-1" + aws-account-id: "343218177745" + cicd-role: "arn:aws:iam::343218177745:role/isomer-next-infra-github-oidc-role-d2e1bd3" + ecr-repository: "isomer-next-infra-uat-ecr" + ecs-cluster-name: "studio-uat-ecs" + ecs-service-name: "studio-uat-ecs-service" + ecs-container-name: "studio" + ecs-container-port: 3000 + environment: "uat" + shortEnv: "uat" + codedeploy-appspec-path: .aws/deploy/appspec.json + ecs-task-definition-path: .aws/deploy/task-definition.json + codedeploy-application: "studio-uat-ecs-app" + codedeploy-deployment-group: "studio-uat-ecs-dg" + ecs-task-role: studio-uat-ecs-task-role + ecs-task-exec-role: studio-uat-ecs-task-exec-role + app-url: "https://uat-studio.isomer.gov.sg" + app-name: "Isomer Studio (UAT)" + app-version: ${{ github.sha }} + app-enable-sgid: false + app-s3-region: "ap-southeast-1" + app-s3-assets-bucket-name: "isomer-next-infra-uat-assets-private-e728930" + app-s3-assets-domain-name: "isomer-user-content-uat.by.gov.sg" + app-growthbook-client-key: "sdk-x4jkIJGr4TizR8qK" + app-intercom-app-id: "jv2tjc3g" + + secrets: + DD_API_KEY: ${{ secrets.DD_API_KEY_GITHUB_ACTIONS }} + RDS_READER_ENDPOINT: ${{ secrets.RDS_READER_ENDPOINT }}