-
Notifications
You must be signed in to change notification settings - Fork 0
118 lines (103 loc) · 3.36 KB
/
deploy.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
name: "Deploy"
concurrency:
group: ${{ github.head_ref || github.run_id }}
cancel-in-progress: true
on:
push:
branches:
- main
pull_request:
branches:
- main
merge_group:
permissions:
packages: write
pull-requests: write
jobs:
lint:
name: Lint
uses: ./.github/workflows/lint.yml
rspec:
name: RSpec
uses: ./.github/workflows/rspec.yml
all-checks-passed:
name: All checks passed
needs: [lint, rspec]
runs-on: ubuntu-latest
steps:
- run: "echo 'Linting and tests passed, this branch is ready to be merged'"
docker:
name: Build and push Docker image
runs-on: ubuntu-latest
outputs:
docker-image-tag: ${{ steps.build-docker-image.outputs.tag }}
steps:
- uses: actions/checkout@v4
- uses: DFE-Digital/github-actions/build-docker-image@master
id: build-docker-image
with:
docker-repository: ghcr.io/dfe-digital/ecf2
github-token: ${{ secrets.GITHUB_TOKEN }}
deploy-review:
name: Deploy review
concurrency: deploy_review_${{ github.event.pull_request.number }}
if: github.event_name == 'pull_request' && contains(github.event.pull_request.labels.*.name, 'Deploy')
needs: [docker]
runs-on: ubuntu-latest
environment:
name: review
steps:
- uses: actions/checkout@v4
- uses: ./.github/actions/deploy-environment-to-aks
id: deploy
with:
environment: review
docker-image-tag: ${{ needs.docker.outputs.docker-image-tag }}
azure-credentials: ${{ secrets.AZURE_CREDENTIALS }}
pull-request-number: ${{ github.event.pull_request.number }}
- name: Post sticky pull request comment
if: github.event_name == 'pull_request'
uses: marocchino/sticky-pull-request-comment@v2
with:
message: |
Review app deployed to ${{ steps.deploy.outputs.url }}
deploy-nonprod:
name: Deploy to ${{ matrix.environment }} environment
runs-on: ubuntu-latest
if: github.ref == 'refs/heads/main' && github.event_name == 'push'
concurrency: deploy_${{ matrix.environment }}
needs: [docker, all-checks-passed]
strategy:
max-parallel: 1
matrix:
environment: [staging, migration, sandbox]
environment:
name: ${{ matrix.environment }}
url: ${{ steps.deploy.outputs.environment_url }}
outputs:
environment_url: ${{ steps.deploy.outputs.environment_url }}
steps:
- uses: actions/checkout@v4
- uses: ./.github/actions/deploy-environment-to-aks
id: deploy
with:
environment: ${{ matrix.environment }}
docker-image-tag: ${{ needs.docker.outputs.docker-image-tag }}
azure-credentials: ${{ secrets.AZURE_CREDENTIALS }}
statuscake-api-token: ${{ secrets.STATUSCAKE_API_TOKEN }}
deploy-production:
name: Deploy production
needs: [deploy-nonprod]
runs-on: ubuntu-latest
if: github.ref == 'refs/heads/main'
environment:
name: production
steps:
- uses: actions/checkout@v4
- uses: ./.github/actions/deploy-environment-to-aks
id: deploy
with:
environment: production
docker-image-tag: ${{ needs.docker.outputs.docker-image-tag }}
azure-credentials: ${{ secrets.AZURE_CREDENTIALS }}
statuscake-api-token: ${{ secrets.STATUSCAKE_API_TOKEN }}