This repository has been archived by the owner on Nov 12, 2024. It is now read-only.
La til manglende permissions i deploy dev/prod #3
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build, push, and deploy | |
| on: [push] | |
| env: | |
| IMAGE: europe-north1-docker.pkg.dev/${{ vars.NAIS_MANAGEMENT_PROJECT_ID }}/paw/${{ github.event.repository.name }} | |
| jobs: | |
| build: | |
| name: Build and push Docker container | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| id-token: write | |
| outputs: | |
| image: ${{ steps.docker-build-push.outputs.image }} | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: actions/setup-java@v3 | |
| with: | |
| java-version: 21 | |
| distribution: temurin | |
| cache: gradle | |
| - name: Set version | |
| run: echo "VERSION=$(date +'%y.%m.%d').${{ github.run_number }}-${{ github.run_attempt }}" >> $GITHUB_ENV | |
| - name: Login GAR | |
| uses: nais/login@v0 | |
| with: | |
| project_id: ${{ vars.NAIS_MANAGEMENT_PROJECT_ID }} | |
| identity_provider: ${{ secrets.NAIS_WORKLOAD_IDENTITY_PROVIDER }} | |
| team: paw | |
| - name: Build and push image and artifacts with Gradle | |
| id: docker-build-push | |
| working-directory: ./ | |
| run: | | |
| echo "image=${{ env.IMAGE }}:${{ env.VERSION }}" >> $GITHUB_OUTPUT | |
| echo -Pversion=${{ env.VERSION }} -Pimage=${{ env.IMAGE }} build test jib | |
| ./gradlew -Pversion=${{ env.VERSION }} -Pimage=${{ env.IMAGE }} build test jib | |
| echo "DIGEST=$(cat kafka-app/build/jib-image.digest)" >> $GITHUB_ENV | |
| env: | |
| ORG_GRADLE_PROJECT_githubPassword: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Attest and sign | |
| uses: nais/[email protected] | |
| with: | |
| image_ref: ${{ env.IMAGE }}@${{ env.DIGEST }} | |
| deploy-dev: | |
| name: Deploy to dev-gcp | |
| needs: build | |
| permissions: | |
| contents: read | |
| id-token: write | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: nais/deploy/actions/deploy@v2 | |
| env: | |
| CLUSTER: dev-gcp | |
| RESOURCE: nais/nais.yaml | |
| VAR: image=${{ needs.build.outputs.image }},kafka=nav-dev,domain=dev.nav.no | |
| deploy-prod: | |
| # if: github.ref == 'refs/heads/main' | |
| if: false | |
| name: Deploy to prod-gcp | |
| needs: [build, deploy-dev] | |
| permissions: | |
| contents: read | |
| id-token: write | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: nais/deploy/actions/deploy@v2 | |
| env: | |
| TEAM: paw | |
| CLUSTER: prod-gcp | |
| RESOURCE: nais/nais.yaml | |
| VAR: image=${{ needs.build.outputs.image }},kafka=nav-prod,domain=nav.no |