[PPANTT-129] feat: Authorizer API key configuration with segregation codes #41
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CD UAT/PROD | |
| on: | |
| pull_request: | |
| branches: [ main ] | |
| types: [ closed ] | |
| permissions: | |
| packages: write | |
| contents: write | |
| issues: write | |
| id-token: write | |
| actions: read | |
| jobs: | |
| setup: | |
| name: Setup | |
| runs-on: ubuntu-latest | |
| outputs: | |
| semver: ${{ steps.get_semver.outputs.semver }} | |
| steps: | |
| - name: pull request rejected | |
| if: github.event_name == 'pull_request' && github.event.action == 'closed' && github.event.pull_request.merged != true | |
| run: | | |
| echo "❌ PR was closed without a merge" | |
| exit 1 | |
| # Set Semvar | |
| - run: echo "SEMVER=patch" >> $GITHUB_ENV | |
| - if: ${{ (github.event.pull_request.merged && contains(github.event.pull_request.labels.*.name, 'skip')) }} | |
| run: echo "SEMVER=skip" >> $GITHUB_ENV | |
| - if: ${{ (github.event.pull_request.merged && contains(github.event.pull_request.labels.*.name, 'patch')) }} | |
| run: echo "SEMVER=patch" >> $GITHUB_ENV | |
| - if: ${{ (github.event.pull_request.merged && contains(github.event.pull_request.labels.*.name, 'minor')) }} | |
| run: echo "SEMVER=minor" >> $GITHUB_ENV | |
| - if: ${{ (github.event.pull_request.merged && contains(github.event.pull_request.labels.*.name, 'major')) }} | |
| run: echo "SEMVER=major" >> $GITHUB_ENV | |
| - id: get_semver | |
| name: Set Output | |
| run: echo "semver=${{env.SEMVER}}" >> $GITHUB_OUTPUT | |
| pre_release: | |
| name: Create a New Pre-Release | |
| runs-on: ubuntu-latest | |
| needs: [ setup ] | |
| if: ${{ needs.setup.outputs.semver != 'skip' }} | |
| outputs: | |
| version: ${{ steps.release.outputs.version }} | |
| steps: | |
| - name: Make Release | |
| id: release | |
| uses: pagopa/github-actions-template/maven-release@4a4c25ce28feeec9e619b3132b5327f52023d441 # v1.14.2 | |
| with: | |
| semver: ${{ needs.setup.outputs.semver }} | |
| github_token: ${{ secrets.BOT_TOKEN_GITHUB }} | |
| beta: false | |
| skip_ci: true | |
| prerelease: true | |
| only_tag: false | |
| image: | |
| needs: [ setup, pre_release ] | |
| name: Build and Push Docker Image | |
| runs-on: ubuntu-latest | |
| if: ${{ needs.setup.outputs.semver != 'skip' }} | |
| steps: | |
| - name: Build and Push | |
| id: semver | |
| uses: pagopa/github-actions-template/ghcr-build-push@d91a1fd0b913c9830589be5d86cdb71c90813fae # v1.5.4 | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| tag: ${{ needs.pre_release.outputs.version }} | |
| deploy_uat: | |
| name: Deploy in UAT | |
| needs: [ image ] | |
| uses: ./.github/workflows/deploy_with_github_runner.yml | |
| with: | |
| environment: 'uat' | |
| secrets: inherit | |
| # integration_test: | |
| # name: Integration Test | |
| # needs: [ setup, deploy_uat ] | |
| # uses: ./.github/workflows/ci_integration_test.yml | |
| # with: | |
| # environment: ${{ needs.setup.outputs.environment }} | |
| # secrets: inherit | |
| deploy_prod: | |
| needs: | |
| - setup | |
| - deploy_uat | |
| # - integration_test | |
| name: Deploy in PROD | |
| uses: ./.github/workflows/deploy_with_github_runner.yml | |
| with: | |
| environment: 'prod' | |
| secrets: inherit | |
| release: | |
| name: Create a New Release | |
| runs-on: ubuntu-latest | |
| needs: [ setup, pre_release, deploy_prod ] | |
| if: ${{ needs.setup.outputs.semver != 'skip' }} | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4 # required to make the script available for next step | |
| - name: Make Latest Release | |
| id: generate_notes | |
| uses: actions/github-script@211cb3fefb35a799baa5156f9321bb774fe56294 # v5 | |
| env: | |
| TAG: ${{ needs.pre_release.outputs.version }} | |
| with: | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| script: | | |
| const script = require('./.github/workflows/github_scripts/make_latest_release.js') | |
| await script({github, context}) | |
| notify: | |
| needs: [ setup, deploy_prod, release ] | |
| runs-on: ubuntu-latest | |
| name: Notify | |
| if: always() | |
| steps: | |
| - name: Report Status | |
| uses: ravsamhq/notify-slack-action@be814b201e233b2dc673608aa46e5447c8ab13f2 # v2 | |
| with: | |
| status: ${{ needs.deploy_prod.result }} | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| notification_title: 'New Release on Production ${{ needs.release.outputs.version }} has {status_message}' | |
| message_format: '{emoji} <{run_url}|{workflow}> {status_message} in <{repo_url}|{repo}>' | |
| footer: 'Linked to <{workflow_url}| workflow file>' | |
| icon_success: ':white_check_mark:' | |
| env: | |
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} | |