Move photon container off baked-in data #95
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Proxy — CI | |
| on: | |
| push: | |
| branches: [ main ] | |
| paths: | |
| - 'proxy/**' | |
| - 'gradle/**' | |
| - '*gradle*' | |
| - '.github/workflows/proxy.yml' | |
| - '.github/workflows/deploy-and-test.yml' | |
| - '.github/actions/**' | |
| - '!**/*.md' | |
| - 'helm/geocoder-proxy/**' | |
| pull_request: | |
| paths: | |
| - 'proxy/**' | |
| - 'gradle/**' | |
| - '*gradle*' | |
| - '.github/workflows/proxy.yml' | |
| - '.github/workflows/deploy-and-test.yml' | |
| - '.github/actions/**' | |
| - '!**/*.md' | |
| - 'helm/geocoder-proxy/**' | |
| workflow_dispatch: | |
| inputs: | |
| target: | |
| description: 'Deploy target' | |
| required: true | |
| type: choice | |
| options: | |
| - 'dev only' | |
| - 'dev → tst → prd' | |
| - 'tst → prd' | |
| concurrency: | |
| group: "${{ github.workflow }}-${{ github.ref }}" | |
| cancel-in-progress: true | |
| jobs: | |
| log-inputs: | |
| name: Log Inputs | |
| if: github.event_name == 'workflow_dispatch' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Log manual inputs | |
| run: | | |
| echo "### Manual Workflow Inputs" >> "$GITHUB_STEP_SUMMARY" | |
| echo "**Target:** \`${{ inputs.target }}\`" >> "$GITHUB_STEP_SUMMARY" | |
| build-push: | |
| name: Proxy | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 600 | |
| permissions: | |
| actions: read | |
| contents: write | |
| id-token: write | |
| security-events: write | |
| pull-requests: write | |
| outputs: | |
| image_tag: ${{ steps.build.outputs.image_tag }} | |
| steps: | |
| - uses: actions/checkout@v6 | |
| - name: Build Proxy image | |
| id: build | |
| uses: ./.github/actions/build-proxy-image | |
| with: | |
| push: ${{ github.event_name != 'pull_request' }} | |
| workload_identity_provider: ${{ vars.CI_WORKLOAD_IDENTITY_PROVIDER }} | |
| service_account: ${{ vars.CI_SERVICE_ACCOUNT }} | |
| deploy-dev: | |
| name: Dev | |
| needs: build-push | |
| if: | | |
| github.event_name != 'pull_request' && | |
| inputs.target != 'tst → prd' | |
| uses: ./.github/workflows/deploy-and-test.yml | |
| with: | |
| environment: dev | |
| image: "geocoder-proxy:${{ needs.build-push.outputs.image_tag }}" | |
| chart: helm/geocoder-proxy | |
| namespace: geocoder | |
| release_name: geocoder-proxy | |
| values: values-kub-ent-dev.yaml | |
| require_approval: false | |
| secrets: inherit | |
| deploy-tst: | |
| name: Staging | |
| needs: [ build-push, deploy-dev ] | |
| if: | | |
| !cancelled() && | |
| inputs.target != 'dev only' && | |
| (inputs.target == 'tst → prd' || needs.deploy-dev.result == 'success') | |
| uses: ./.github/workflows/deploy-and-test.yml | |
| with: | |
| environment: tst | |
| image: "geocoder-proxy:${{ needs.build-push.outputs.image_tag }}" | |
| chart: helm/geocoder-proxy | |
| namespace: geocoder | |
| release_name: geocoder-proxy | |
| secrets: inherit | |
| deploy-prd: | |
| name: Production | |
| needs: [ build-push, deploy-tst ] | |
| if: | | |
| !cancelled() && | |
| needs.deploy-tst.result == 'success' | |
| uses: ./.github/workflows/deploy-and-test.yml | |
| with: | |
| environment: prd | |
| image: "geocoder-proxy:${{ needs.build-push.outputs.image_tag }}" | |
| chart: helm/geocoder-proxy | |
| namespace: geocoder | |
| release_name: geocoder-proxy | |
| secrets: inherit | |
| tag-prod-approved: | |
| name: Tag prod-approved | |
| needs: deploy-prd | |
| if: | | |
| !cancelled() && | |
| needs.deploy-prd.result == 'success' | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write | |
| steps: | |
| - uses: actions/checkout@v6 | |
| - name: Update prod-approved tag | |
| run: | | |
| git tag -f prod-approved | |
| git push -f origin prod-approved | |
| notify-slack: | |
| needs: [ deploy-dev, deploy-tst, deploy-prd ] | |
| if: failure() | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: slackapi/slack-github-action@v2 | |
| with: | |
| webhook: ${{ secrets.SLACK_WEBHOOK_URL_HENRIK }} | |
| webhook-type: incoming-webhook | |
| payload: | | |
| text: "❌ *${{ github.workflow }}*${{ inputs.target && format(' ({0})', inputs.target) || '' }} failed: <${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}|run>" |