Skip to content

Deploy frontend (with SAM Deploy Pipeline) to authdev1 #30

Deploy frontend (with SAM Deploy Pipeline) to authdev1

Deploy frontend (with SAM Deploy Pipeline) to authdev1 #30

name: Deploy frontend (with SAM Deploy Pipeline) to Dev
run-name: Deploy frontend (with SAM Deploy Pipeline) to ${{ inputs.environment }}
on:
workflow_dispatch:
inputs:
environment:
description: "Environment to run against"
type: environment
required: true
jobs:
deploy-basic-auth-sidecar:
runs-on: ubuntu-latest
timeout-minutes: 60
environment: ${{ inputs.environment }}
permissions:
id-token: write
contents: read
steps:
- name: Build and push basic-auth-sidecar image
uses: govuk-one-login/devplatform-upload-action-ecr@8f14d1af61737413dc6eb39f071f01dc6d0e6c45 # v1.3.0
with:
role-to-assume-arn: ${{ secrets.GH_ACTIONS_ROLE_ARN }}
container-sign-kms-key-arn: ${{ secrets.CONTAINER_SIGN_KMS_KEY_ARN }}
build-and-push-image-only: true
working-directory: basic-auth-sidecar
artifact-bucket-name: ${{ secrets.ARTIFACT_SOURCE_BUCKET_NAME }}
ecr-repo-name: ${{ secrets.BASIC_AUTH_SIDECAR_ECR_REPOSITORY }}
deploy-service-down-page:
runs-on: ubuntu-latest
timeout-minutes: 60
environment: ${{ inputs.environment }}
permissions:
id-token: write
contents: read
steps:
- name: Build and push service down page image
uses: govuk-one-login/devplatform-upload-action-ecr@8f14d1af61737413dc6eb39f071f01dc6d0e6c45 # v1.3.0
with:
role-to-assume-arn: ${{ secrets.GH_ACTIONS_ROLE_ARN }}
container-sign-kms-key-arn: ${{ secrets.CONTAINER_SIGN_KMS_KEY_ARN }}
build-and-push-image-only: true
working-directory: service-down-page-config
artifact-bucket-name: ${{ secrets.ARTIFACT_SOURCE_BUCKET_NAME }}
ecr-repo-name: ${{ secrets.SERVICE_DOWN_PAGE_ECR_REPOSITORY }}
deploy-frontend:
needs:
- deploy-basic-auth-sidecar
- deploy-service-down-page
runs-on: ubuntu-latest
timeout-minutes: 60
environment: ${{ inputs.environment }}
permissions:
id-token: write
contents: read
steps:
- name: Build, push and deploy frontend
uses: govuk-one-login/devplatform-upload-action-ecr@8f14d1af61737413dc6eb39f071f01dc6d0e6c45 # v1.3.0
with:
role-to-assume-arn: ${{ secrets.GH_ACTIONS_ROLE_ARN }}
container-sign-kms-key-arn: ${{ secrets.CONTAINER_SIGN_KMS_KEY_ARN }}
artifact-bucket-name: ${{ secrets.ARTIFACT_SOURCE_BUCKET_NAME }}
ecr-repo-name: ${{ secrets.FRONTEND_ECR_REPOSITORY }}
template-file: cloudformation/deploy/template.yaml
private-docker-registry: khw46367.live.dynatrace.com
private-docker-login-username: khw46367
private-docker-login-password: ${{ secrets.DYNATRACE_PAAS_TOKEN }}
build-contexts: |
oneagent_codemodules=docker-image://${{ secrets.DYNATRACE_REGISTRY_NAME}}.live.dynatrace.com/linux/oneagent-codemodules-musl:nodejs