env-setup-deploy-secrets.yml

name: Env Setup - Deploy SIMS Secrets to Openshift
run-name: Env Setup - Deploy SIMS secrets to Openshift from ${{ inputs.gitRef }} to ${{ inputs.environment }}

on:
  workflow_dispatch:
    inputs:
      environment:
        description: "Environment"
        required: true
        type: environment
      gitRef:
        description: "Build Ref"
        required: true
        default: ""

jobs:
  updateSecrets:
    name: Deploy secrets to Openshift
    runs-on: ubuntu-latest
    environment: ${{ inputs.environment }}
    env:
      NAMESPACE: ${{ secrets.OPENSHIFT_ENV_NAMESPACE }}
      SECRET_NAME: ${{ secrets.OPENSHIFT_SIMS_CREDS_NAME }}
      BCeID_WEB_SERVICE_ONLINE_SERVICE_ID: ${{ secrets.BCeID_WEB_SERVICE_ONLINE_SERVICE_ID }}
      BCeID_WEB_SERVICE_REQUESTER_USER_GUID: ${{ secrets.BCeID_WEB_SERVICE_REQUESTER_USER_GUID }}
      BCeID_WEB_SERVICE_AUTH_USER_NAME: ${{ secrets.BCeID_WEB_SERVICE_AUTH_USER_NAME }}
      BCeID_WEB_SERVICE_AUTH_USER_PASSWORD: ${{ secrets.BCeID_WEB_SERVICE_AUTH_USER_PASSWORD }}
      CRA_REQUEST_FOLDER: ${{ secrets.CRA_REQUEST_FOLDER }}
      CRA_RESPONSE_FOLDER: ${{ secrets.CRA_RESPONSE_FOLDER }}
      CRA_PROGRAM_AREA_CODE: ${{ secrets.CRA_PROGRAM_AREA_CODE }}
      CRA_ENVIRONMENT_CODE: ${{ secrets.CRA_ENVIRONMENT_CODE }}
      ATBC_USERNAME: ${{ secrets.ATBC_USERNAME }}
      ATBC_PASSWORD: ${{ secrets.ATBC_PASSWORD }}
      ATBC_APP: ${{ secrets.ATBC_APP }}
      ESDC_REQUEST_FOLDER: ${{ secrets.ESDC_REQUEST_FOLDER }}
      ESDC_RESPONSE_FOLDER: ${{ secrets.ESDC_RESPONSE_FOLDER }}
      ESDC_ENVIRONMENT_CODE: ${{ secrets.ESDC_ENVIRONMENT_CODE }}
      SFAS_RECEIVE_FOLDER: ${{ secrets.SFAS_RECEIVE_FOLDER }}
      SFAS_SEND_FOLDER: ${{ vars.SFAS_SEND_FOLDER }}
      SIMS_DB_NAME: ${{ secrets.SIMS_DB_NAME }}
      INSTITUTION_REQUEST_FOLDER: ${{ secrets.INSTITUTION_REQUEST_FOLDER }}
      INSTITUTION_RESPONSE_FOLDER: ${{ vars.INSTITUTION_RESPONSE_FOLDER }}
      GC_NOTIFY_URL: ${{ secrets.GC_NOTIFY_URL }}
      GC_NOTIFY_API_KEY: ${{ secrets.GC_NOTIFY_API_KEY }}
      ZEEBE_ADDRESS: ${{ secrets.ZEEBE_ADDRESS }}
      ZEEBE_CLIENT_ID: ${{ secrets.ZEEBE_CLIENT_ID }}
      ZEEBE_CLIENT_SECRET: ${{ secrets.ZEEBE_CLIENT_SECRET }}
      CAMUNDA_OAUTH_URL: ${{ secrets.CAMUNDA_OAUTH_URL }}
      ZEEBE_GRPC_WORKER_LONGPOLL_SECONDS: ${{ secrets.ZEEBE_GRPC_WORKER_LONGPOLL_SECONDS }}
      CAS_BASE_URL: ${{ secrets.CAS_BASE_URL }}
      CAS_CLIENT_ID: ${{ secrets.CAS_CLIENT_ID }}
      CAS_CLIENT_SECRET: ${{ secrets.CAS_CLIENT_SECRET }}
      S3_ACCESS_KEY_ID: ${{ secrets.S3_ACCESS_KEY_ID }}
      S3_SECRET_ACCESS_KEY: ${{ secrets.S3_SECRET_ACCESS_KEY }}
      S3_ENDPOINT: ${{ secrets.S3_ENDPOINT }}
      S3_DEFAULT_BUCKET: ${{ secrets.S3_DEFAULT_BUCKET }}
      S3_REGION: ${{ secrets.S3_REGION }}
    steps:
      - name: Checkout Target Branch
        uses: actions/checkout@v4
        with:
          ref: ${{ inputs.gitRef }}
      - name: Install CLI tools from OpenShift Mirror
        uses: redhat-actions/openshift-tools-installer@v1
        with:
          oc: "4"
      - name: Log in to OpenShift
        run: |
          oc login --token=${{ secrets.SA_TOKEN }} --server=${{ vars.OPENSHIFT_CLUSTER_URL }}
      - name: Update secrets
        working-directory: "./devops/"
        run: |
          make init-secrets