deps(ci): update deployer, use post_rollout and oc_version (#607) #234
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Merge to Main | |
| on: | |
| push: | |
| branches: [main] | |
| paths-ignore: | |
| - ".github/ISSUE_TEMPLATE/*" | |
| - "**.md" | |
| workflow_dispatch: | |
| env: | |
| NAME: fom | |
| concurrency: | |
| group: ${{ github.workflow }} | |
| cancel-in-progress: true | |
| jobs: | |
| deploy-test: | |
| name: TEST Deploys | |
| environment: test | |
| env: | |
| ZONE: test | |
| runs-on: ubuntu-22.04 | |
| timeout-minutes: 10 | |
| strategy: | |
| matrix: | |
| name: [api, admin, db, init, public] | |
| include: | |
| - name: api | |
| file: api/openshift.deploy.yml | |
| oc_version: "4.13" | |
| overwrite: true | |
| parameters: | |
| -p OC_NAMESPACE=a4b31c-test | |
| -p URL=fom-test.nrs.gov.bc.ca | |
| -p [email protected] | |
| -p DB_TESTDATA=true | |
| -p AWS_USER_POOLS_WEB_CLIENT_ID="k3b9ip1vf85o4tkqvu5g4adgj" | |
| -p LOGOUT_CHAIN_URL="https://logontest7.gov.bc.ca/clp-cgi/logoff.cgi?retnow=1&returl=https://test.loginproxy.gov.bc.ca/auth/realms/standard/protocol/openid-connect/logout?redirect_uri=" | |
| post_rollout: oc create job "certbot-manual-$(date +%s)" --from=cronjob/certbot | |
| - name: admin | |
| file: admin/openshift.deploy.yml | |
| overwrite: true | |
| parameters: -p URL=fom-test.nrs.gov.bc.ca | |
| - name: db | |
| file: db/openshift.deploy.yml | |
| overwrite: false | |
| - name: init | |
| file: libs/openshift.init.yml | |
| overwrite: false | |
| - name: public | |
| file: public/openshift.deploy.yml | |
| overwrite: true | |
| parameters: -p URL=fom-test.nrs.gov.bc.ca | |
| steps: | |
| - uses: bcgov-nr/[email protected] | |
| with: | |
| file: ${{ matrix.file }} | |
| oc_namespace: ${{ vars.OC_NAMESPACE }} | |
| oc_server: ${{ vars.OC_SERVER }} | |
| oc_token: ${{ secrets.OC_TOKEN }} | |
| oc_version: ${{ matrix.oc_version }} | |
| overwrite: ${{ matrix.overwrite }} | |
| penetration_test: false | |
| parameters: | |
| -p PROMOTE=${{ github.repository }}/${{ matrix.name }}:${{ env.ZONE }} | |
| -p ZONE=${{ env.ZONE }} ${{ matrix.parameters }} | |
| post_rollout: ${{ matrix.post_rollout }} | |
| deploy-prod: | |
| name: PROD Deploys | |
| needs: [deploy-test] | |
| environment: prod | |
| env: | |
| ZONE: prod | |
| runs-on: ubuntu-22.04 | |
| timeout-minutes: 10 | |
| strategy: | |
| matrix: | |
| name: [api, admin, db, init, public] | |
| include: | |
| - name: api | |
| file: api/openshift.deploy.yml | |
| oc_version: "4.13" | |
| overwrite: true | |
| parameters: | |
| -p OC_NAMESPACE=a4b31c-prod | |
| -p URL=fom.nrs.gov.bc.ca | |
| -p AWS_USER_POOLS_WEB_CLIENT_ID="4bu2n8at3m32a2fqnvd4t06la1" | |
| -p LOGOUT_CHAIN_URL="https://logon7.gov.bc.ca/clp-cgi/logoff.cgi?retnow=1&returl=https://loginproxy.gov.bc.ca/auth/realms/standard/protocol/openid-connect/logout?redirect_uri=" | |
| post_rollout: oc create job "certbot-manual-$(date +%s)" --from=cronjob/certbot | |
| - name: admin | |
| file: admin/openshift.deploy.yml | |
| overwrite: true | |
| parameters: -p URL=fom.nrs.gov.bc.ca | |
| - name: db | |
| file: db/openshift.deploy.yml | |
| overwrite: false | |
| - name: init | |
| file: libs/openshift.init.yml | |
| overwrite: false | |
| - name: public | |
| file: public/openshift.deploy.yml | |
| overwrite: true | |
| parameters: -p URL=fom.nrs.gov.bc.ca | |
| steps: | |
| - uses: bcgov-nr/[email protected] | |
| with: | |
| file: ${{ matrix.file }} | |
| oc_namespace: ${{ vars.OC_NAMESPACE }} | |
| oc_server: ${{ vars.OC_SERVER }} | |
| oc_token: ${{ secrets.OC_TOKEN }} | |
| oc_version: ${{ matrix.oc_version }} | |
| overwrite: ${{ matrix.overwrite }} | |
| penetration_test: false | |
| parameters: | |
| -p PROMOTE=${{ github.repository }}/${{ matrix.name }}:test | |
| -p ZONE=${{ env.ZONE }} ${{ matrix.parameters }} | |
| post_rollout: ${{ matrix.post_rollout }} | |
| image-promotions: | |
| name: Promote images to PROD | |
| needs: [deploy-prod] | |
| runs-on: ubuntu-22.04 | |
| strategy: | |
| matrix: | |
| component: [api, admin, db, public] | |
| steps: | |
| - uses: shrink/actions-docker-registry-tag@v4 | |
| with: | |
| registry: ghcr.io | |
| repository: ${{ github.repository }}/${{ matrix.component }} | |
| target: test | |
| tags: prod |