CCM-12133: move interal-dev deploy to manual workflow

Author: masl2

.github/actions/build-proxies/action.yml

@@ -1,9 +1,17 @@
 name: "Build Proxies"
 description: "Build Proxies"
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
 inputs:
   version:
     description: "Version number"
     required: true
+
 runs:
   using: composite
 
@@ -19,7 +27,6 @@ runs:
       run: npm ci
       shell: bash
 
-
     - name: Setup Proxy Name and target
       shell: bash
       run: |
@@ -38,7 +45,6 @@ runs:
 
         fi
 
-
     - name: Install Proxygen client
       shell: bash
       run: |
@@ -54,29 +60,6 @@ runs:
         envsubst < ./.github/proxygen-settings.yaml > ${HOME}/.proxygen/settings.yaml
         envsubst < ./.github/proxygen-settings.yaml | cat
 
-
-    - name: Build internal dev oas
-      working-directory: .
-      shell: bash
-      run: |
-        if [ -z $PR_NUMBER ]
-        then
-          make build-json-oas-spec APIM_ENV=internal-dev
-        else
-          make build-json-oas-spec APIM_ENV=internal-dev-pr
-        fi
-
-    - name: Set target and cert
-      shell: bash
-      run: |
-        jq --arg newurl "$TARGET" '.["x-nhsd-apim"].target.url = $newurl' build/notify-supplier.json > build/notify-supplier_target.json && mv build/notify-supplier_target.json build/notify-supplier.json
-        jq --arg newmtls "$MTLS_NAME" '.["x-nhsd-apim"].target.security.secret = $newmtls' build/notify-supplier.json > build/notify-supplier_target.json && mv build/notify-supplier_target.json build/notify-supplier.json
-
-    - name: Deploy to Internal Dev
-      shell: bash
-      run: |
-        proxygen instance deploy internal-dev $INSTANCE build/notify-supplier.json --no-confirm
-
     - name: Build sandbox oas
       working-directory: .
       shell: bash

.github/workflows/manual-proxy-internal-dev-deploy.yaml

@@ -0,0 +1,86 @@
+name: Deploy proxy to internal-dev
+
+on:
+  workflow_dispatch:
+    inputs:
+    version:
+      description: "Version number"
+      required: true
+    pr_number:
+      description: "PR Number for PR Environment"
+      required: false
+
+
+jobs:
+  runs-on: ubuntu-latest
+  deploy-internal-dev:
+    name: Deploy to Internal Dev
+    env:
+      PROXYGEN_API_NAME: notify-supplier-api
+      PROXYGEN_PRIVATE_KEY: ${{ secrets.PROXYGEN_PRIVATE_KEY }}
+      PR_NUMBER: ${{ github.event.inputs.pr_number }}
+  steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+
+    - uses: actions/setup-node@v4
+      with:
+        node-version: 24
+
+    - name: Npm install
+      working-directory: .
+      run: npm ci
+      shell: bash
+
+    - name: Setup Proxy Name and target
+      shell: bash
+      run: |
+        if [ -z $PR_NUMBER ]
+        then
+          echo "INSTANCE=$PROXYGEN_API_NAME" >> $GITHUB_ENV
+          echo "TARGET=https://main.suppliers.dev.nhsnotify.national.nhs.uk" >> $GITHUB_ENV
+          echo "SANDBOX_TAG=latest" >> $GITHUB_ENV
+          echo "MTLS_NAME=notify-supplier-mtls" >> $GITHUB_ENV
+        else
+          echo "TARGET=https://pr$PR_NUMBER.suppliers.dev.nhsnotify.national.nhs.uk" >> $GITHUB_ENV
+          echo "INSTANCE=$PROXYGEN_API_NAME-PR-$PR_NUMBER" >> $GITHUB_ENV
+          echo "SANDBOX_TAG=pr$PR_NUMBER" >> $GITHUB_ENV
+          echo "MTLS_NAME=notify-supplier-mtls-pr$PR_NUMBER" >> $GITHUB_ENV
+        fi
+
+    - name: Install Proxygen client
+      shell: bash
+      run: |
+        # Install proxygen cli
+        pip install pipx
+        pipx install proxygen-cli
+
+        # Setup proxygen auth and settings
+        mkdir -p ${HOME}/.proxygen
+        echo -n $PROXYGEN_PRIVATE_KEY | base64 --decode > ${HOME}/.proxygen/key
+        envsubst < ./.github/proxygen-credentials-template.yaml > ${HOME}/.proxygen/credentials.yaml
+        envsubst < ./.github/proxygen-credentials-template.yaml | cat
+        envsubst < ./.github/proxygen-settings.yaml > ${HOME}/.proxygen/settings.yaml
+        envsubst < ./.github/proxygen-settings.yaml | cat
+
+    - name: Build internal dev oas
+      working-directory: .
+      shell: bash
+      run: |
+        if [ -z $PR_NUMBER ]
+        then
+          make build-json-oas-spec APIM_ENV=internal-dev
+        else
+          make build-json-oas-spec APIM_ENV=internal-dev-pr
+        fi
+
+    - name: Set target and cert
+      shell: bash
+      run: |
+        jq --arg newurl "$TARGET" '.["x-nhsd-apim"].target.url = $newurl' build/notify-supplier.json > build/notify-supplier_target.json && mv build/notify-supplier_target.json build/notify-supplier.json
+        jq --arg newmtls "$MTLS_NAME" '.["x-nhsd-apim"].target.security.secret = $newmtls' build/notify-supplier.json > build/notify-supplier_target.json && mv build/notify-supplier_target.json build/notify-supplier.json
+
+    - name: Deploy to Internal Dev
+      shell: bash
+      run: |
+        proxygen instance deploy internal-dev $INSTANCE build/notify-supplier.json --no-confirm