Build-Deploy-Preprod #1584
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build-Deploy-Preprod | |
| on: | |
| workflow_dispatch: | |
| pull_request: | |
| types: [ opened, synchronize, reopened, ready_for_review ] | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref_name }} | |
| cancel-in-progress: true | |
| permissions: | |
| contents: "read" | |
| id-token: "write" | |
| jobs: | |
| build-dev: | |
| if: github.event.pull_request.draft == false | |
| name: Build and push | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| persist-credentials: false | |
| - uses: actions/setup-java@v4 | |
| with: | |
| java-version: 21 | |
| distribution: 'temurin' | |
| cache: 'maven' | |
| - name: Bygg med maven | |
| env: | |
| GITHUB_USERNAME: x-access-token | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: mvn -B --no-transfer-progress package --settings .m2/maven-settings.xml --file pom.xml | |
| - name: Bygg og push docker image | |
| if: github.event.pull_request.draft == false && github.event.pull_request.user.login != 'dependabot[bot]' | |
| uses: nais/docker-build-push@v0 | |
| id: docker-push | |
| with: | |
| team: teamfamilie | |
| tag: latest | |
| project_id: ${{ vars.NAIS_MANAGEMENT_PROJECT_ID }} | |
| identity_provider: ${{ secrets.NAIS_WORKLOAD_IDENTITY_PROVIDER }} | |
| byosbom: target/classes/META-INF/sbom/application.cdx.json | |
| - name: Login GAR | |
| id: login-team-tilbake | |
| uses: nais/#@v0 | |
| with: | |
| project_id: ${{ vars.NAIS_MANAGEMENT_PROJECT_ID }} | |
| identity_provider: ${{ secrets.NAIS_WORKLOAD_IDENTITY_PROVIDER }} | |
| team: tilbake | |
| # Push additional image. Should use build cache, which should be pretty fast | |
| - name: Create additional tag and push to team tilbake Google Artifact Repository | |
| uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 | |
| with: | |
| push: true | |
| tags: ${{ steps.login-team-tilbake.outputs.registry }}/familie-tilbake:latest | |
| outputs: | |
| image: ${{ steps.docker-push.outputs.image }} | |
| deploy-dev: | |
| if: github.event.pull_request.draft == false && github.event.pull_request.user.login != 'dependabot[bot]' | |
| name: Deploy to dev-fss | |
| needs: build-dev | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: "read" | |
| id-token: "write" | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Deploy til dev-fss team namespace | |
| uses: nais/deploy/actions/deploy@v2 | |
| env: | |
| APIKEY: ${{ secrets.DEPLOY_APIKEY }} | |
| CLUSTER: dev-fss | |
| RESOURCE: app-preprod.teamfamilie.yaml | |
| VAR: image=${{ needs.build-dev.outputs.image }} |