Sandbox workflow

Author: nhsd-david-wass

.github/actions/build-sandbox/action.yml

@@ -0,0 +1,53 @@
+name: "Build Proxies"
+description: "Build Proxies"
+inputs:
+  version:
+    description: "Version number"
+    required: true
+runs:
+  using: composite
+
+  steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+    - uses: actions/setup-node@v4
+      with:
+        node-version: 24
+
+    - name: Npm install
+      working-directory: .
+      run: npm ci
+      shell: bash
+
+    - name: Build sandbox oas
+      working-directory: .
+      shell: bash
+      run: |
+        make construct-spec APIM_ENV=sandbox
+
+
+    - name: Install Proxygen client
+      shell: bash
+      run: |
+        # Install proxygen cli
+        pip install pipx
+        pipx install proxygen-cli
+
+        # Setup proxygen auth and settings
+        mkdir -p ${HOME}/.proxygen
+        echo -n $PROXYGEN_PRIVATE_KEY | base64 --decode > ${HOME}/.proxygen/key
+        envsubst < ./.github/proxygen-credentials-template.yaml > ${HOME}/.proxygen/credentials.yaml
+        envsubst < ./.github/proxygen-credentials-template.yaml | cat
+        envsubst < ./.github/proxygen-settings.yaml > ${HOME}/.proxygen/settings.yaml
+        envsubst < ./.github/proxygen-settings.yaml | cat
+
+    - name: Build and publish sandbox Docker image
+      shell: bash
+      working-directory: ./sandbox
+      run: |
+          docker build -t nhs-notify-supplier:latest .
+          proxygen docker get-login | bash
+          docker build -t nhs-notify-supplier:latest .
+          IMAGE_ID=`docker images -q nhs-notify-supplier:latest`
+          docker tag $(IMAGE_ID) 958002497996.dkr.ecr.eu-west-2.amazonaws.com/nhs-notify-supplier:latest
+          docker push 958002497996.dkr.ecr.eu-west-2.amazonaws.com/nhs-notify-supplier:latest

.github/workflows/stage-3-build.yaml

@@ -96,21 +96,31 @@ jobs:
       PROXYGEN_API_NAME: nhs-notify-supplier
       PR_NUMBER: ${{ inputs.pr_number }}
     steps:
-      - name: Verify environment variables
-        shell: bash
-        run: |
-          echo "PROXYGEN_PRIVATE_KEY is set: [${{ secrets.PROXYGEN_ENCODED_NOTIFY_SUPPLIER_PRIVATE_KEY != '' }}]"
-          echo "PROXYGEN_KID: $PROXYGEN_KID"
-          echo "PROXYGEN_CLIENT_ID: $PROXYGEN_CLIENT_ID"
-          echo "PROXYGEN_API_NAME: $PROXYGEN_API_NAME"
-          echo "PR_NUMBER: $PR_NUMBER"
       - name: "Checkout code"
         uses: actions/checkout@v4
       - name: "Build proxies"
         uses: ./.github/actions/build-proxies
         with:
           version: "${{ inputs.version }}"
 
+  artefact-sandbox:
+    name: "Build sandbox"
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    env:
+      PROXYGEN_PRIVATE_KEY: ${{ secrets.PROXYGEN_ENCODED_NOTIFY_SUPPLIER_PRIVATE_KEY }}
+      PROXYGEN_KID: notify-supplier-key-1
+      PROXYGEN_CLIENT_ID: nhs-notify-supplier-client
+      PROXYGEN_API_NAME: nhs-notify-supplier
+      PR_NUMBER: ${{ inputs.pr_number }}
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@v4
+      - name: "Build sandbox"
+        uses: ./.github/actions/build-sandbox
+        with:
+          version: "${{ inputs.version }}"
+
   # artefact-1:
   #   name: "Artefact 1"
   #   runs-on: ubuntu-latest

sandbox/Dockerfile

@@ -1,6 +1,6 @@
 FROM node:18.3.0-alpine3.14
 
-ENV npm_config_cache=/home/node/app/.npm
+ENV npm_config_cache=.npm
 
 COPY . /sandbox