Merge #319
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Merge | |
| on: | |
| workflow_run: | |
| workflows: [PR Closed] | |
| types: [completed] | |
| workflow_dispatch: | |
| concurrency: | |
| group: ${{ github.workflow }} | |
| cancel-in-progress: true | |
| jobs: | |
| init-test: | |
| name: TEST Init | |
| environment: test | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: OpenShift Init | |
| uses: bcgov-nr/action-deployer-openshift@v3.0.1 | |
| with: | |
| oc_namespace: ${{ vars.OC_NAMESPACE }} | |
| oc_server: ${{ vars.OC_SERVER }} | |
| oc_token: ${{ secrets.OC_TOKEN }} | |
| file: common/openshift.init.yml | |
| overwrite: true | |
| parameters: | |
| -p AWS_KINESIS_STREAM='${{ secrets.AWS_KINESIS_STREAM }}' | |
| -p AWS_KINESIS_ROLE_ARN='${{ secrets.AWS_KINESIS_ROLE_ARN }}' | |
| -p AWS_ACCESS_KEY_ID=${{ secrets.AWS_ACCESS_KEY_ID }} | |
| -p AWS_ACCESS_KEY_SECRET='${{ secrets.AWS_ACCESS_KEY_SECRET }}' | |
| -p ORACLE_DB_USER=${{ secrets.DB_USER }} | |
| -p ORACLE_DB_PASSWORD='${{ secrets.ORACLE_DB_PASSWORD }}' | |
| -p ORACLE_DB_HOST='${{ secrets.ORACLE_DB_HOST }}' | |
| -p ORACLE_DB_SERVICE='${{ secrets.ORACLE_DB_SERVICE }}' | |
| -p POSTGRES_DB_PASSWORD='${{ secrets.POSTGRES_DB_PASSWORD }}' | |
| -p FORESTCLIENTAPI_KEY='${{ secrets.FORESTCLIENTAPI_KEY }}' | |
| -p VITE_USER_POOLS_WEB_CLIENT_ID=${{ vars.VITE_USER_POOLS_WEB_CLIENT_ID }} | |
| -p VITE_USER_POOLS_ID=${{ vars.VITE_USER_POOLS_ID }} | |
| -p ZONE=test | |
| deploys-test: | |
| name: TEST Deployments | |
| needs: [init-test] | |
| environment: test | |
| runs-on: ubuntu-latest | |
| permissions: | |
| issues: write | |
| strategy: | |
| matrix: | |
| name: [database, backend, frontend, fluentbit] | |
| include: | |
| - name: database | |
| overwrite: false | |
| file: database/openshift.deploy.yml | |
| - name: backend | |
| verification_path: actuator/health | |
| file: backend/openshift.deploy.yml | |
| overwrite: true | |
| timeout: 15m | |
| parameters: | |
| -p RESULTS_ENV_OPENSEARCH=test | |
| -p AWS_COGNITO_ISSUER_URI=https://cognito-idp.${{ vars.AWS_REGION }}.amazonaws.com/${{ vars.VITE_USER_POOLS_ID }} | |
| -p DASHBOARD_JOB_IDIR_USERS=${{ vars.DASHBOARD_JOB_IDIR_USERS }} | |
| -p WMS_LAYERS_WHITELIST_USERS=${{ vars.WMS_LAYERS_WHITELIST_USERS }} | |
| - name: frontend | |
| file: frontend/openshift.deploy.yml | |
| overwrite: true | |
| parameters: | |
| -p FAM_ROUTE=test | |
| - name: fluentbit | |
| file: common/openshift.fluentbit.yml | |
| overwrite: true | |
| steps: | |
| - uses: bcgov-nr/action-deployer-openshift@v3.0.1 | |
| with: | |
| file: ${{ matrix.file }} | |
| oc_namespace: ${{ vars.OC_NAMESPACE }} | |
| oc_server: ${{ vars.OC_SERVER }} | |
| oc_token: ${{ secrets.OC_TOKEN }} | |
| overwrite: ${{ matrix.overwrite }} | |
| parameters: | |
| -p ZONE=test -p TAG=test | |
| ${{ matrix.parameters }} | |
| timeout: ${{ matrix.timeout || '10m' }} | |
| verification_path: ${{ matrix.verification_path }} | |
| init-prod: | |
| name: PROD Init | |
| needs: [deploys-test] | |
| environment: prod | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: OpenShift Init | |
| uses: bcgov-nr/action-deployer-openshift@v3.0.1 | |
| with: | |
| oc_namespace: ${{ vars.OC_NAMESPACE }} | |
| oc_server: ${{ vars.OC_SERVER }} | |
| oc_token: ${{ secrets.OC_TOKEN }} | |
| file: common/openshift.init.yml | |
| overwrite: true | |
| parameters: | |
| -p AWS_KINESIS_STREAM='${{ secrets.AWS_KINESIS_STREAM }}' | |
| -p AWS_KINESIS_ROLE_ARN='${{ secrets.AWS_KINESIS_ROLE_ARN }}' | |
| -p AWS_ACCESS_KEY_ID=${{ secrets.AWS_ACCESS_KEY_ID }} | |
| -p AWS_ACCESS_KEY_SECRET='${{ secrets.AWS_ACCESS_KEY_SECRET }}' | |
| -p ORACLE_DB_USER=${{ secrets.DB_USER }} | |
| -p ORACLE_DB_PASSWORD='${{ secrets.ORACLE_DB_PASSWORD }}' | |
| -p ORACLE_DB_HOST='${{ secrets.ORACLE_DB_HOST }}' | |
| -p ORACLE_DB_SERVICE='${{ secrets.ORACLE_DB_SERVICE }}' | |
| -p POSTGRES_DB_PASSWORD='${{ secrets.POSTGRES_DB_PASSWORD }}' | |
| -p FORESTCLIENTAPI_KEY='${{ secrets.FORESTCLIENTAPI_KEY }}' | |
| -p VITE_USER_POOLS_WEB_CLIENT_ID=${{ vars.VITE_USER_POOLS_WEB_CLIENT_ID }} | |
| -p VITE_USER_POOLS_ID=${{ vars.VITE_USER_POOLS_ID }} | |
| -p ZONE=prod | |
| image-promotions: | |
| name: Promote images to PROD | |
| needs: [deploys-test] | |
| runs-on: ubuntu-latest | |
| permissions: | |
| packages: write | |
| strategy: | |
| matrix: | |
| component: [database, backend, frontend] | |
| steps: | |
| - uses: shrink/actions-docker-registry-tag@v4 | |
| with: | |
| registry: ghcr.io | |
| repository: ${{ github.repository }}/${{ matrix.component }} | |
| target: test | |
| tags: prod | |
| deploys-prod: | |
| name: PROD Deployments | |
| needs: [init-prod, image-promotions] | |
| environment: prod | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| name: [database, backend, frontend, fluentbit] | |
| include: | |
| - name: database | |
| overwrite: false | |
| file: database/openshift.deploy.yml | |
| - name: backend | |
| verification_path: actuator/health | |
| file: backend/openshift.deploy.yml | |
| overwrite: true | |
| timeout: 15m | |
| parameters: | |
| -p RESULTS_ENV_OPENSEARCH=production | |
| -p AWS_COGNITO_ISSUER_URI=https://cognito-idp.${{ vars.AWS_REGION }}.amazonaws.com/${{ vars.VITE_USER_POOLS_ID }} | |
| -p DASHBOARD_JOB_IDIR_USERS=${{ vars.DASHBOARD_JOB_IDIR_USERS }} | |
| -p WMS_LAYERS_WHITELIST_USERS=${{ vars.WMS_LAYERS_WHITELIST_USERS }} | |
| - name: frontend | |
| file: frontend/openshift.deploy.yml | |
| overwrite: true | |
| parameters: | |
| -p FAM_ROUTE=prod | |
| - name: fluentbit | |
| file: common/openshift.fluentbit.yml | |
| overwrite: true | |
| steps: | |
| - uses: bcgov-nr/action-deployer-openshift@v3.0.1 | |
| with: | |
| file: ${{ matrix.file }} | |
| oc_namespace: ${{ vars.OC_NAMESPACE }} | |
| oc_server: ${{ vars.OC_SERVER }} | |
| oc_token: ${{ secrets.OC_TOKEN }} | |
| overwrite: ${{ matrix.overwrite }} | |
| parameters: | |
| -p ZONE=prod -p TAG=prod | |
| ${{ matrix.parameters }} | |
| timeout: ${{ matrix.timeout || '10m' }} | |
| verification_path: ${{ matrix.verification_path }} |