44 lines
1.4 KiB
YAML
44 lines
1.4 KiB
YAML
name: Deploy
|
|
on:
|
|
workflow_call:
|
|
inputs:
|
|
app_name:
|
|
required: true
|
|
type: string
|
|
environment_name:
|
|
required: true
|
|
type: string
|
|
version_number:
|
|
required: true
|
|
type: string
|
|
|
|
permissions:
|
|
id-token: write
|
|
contents: read
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: ubuntu-latest
|
|
environment: ${{ inputs.environment_name }}
|
|
steps:
|
|
- name: Get Secrets from Infisical
|
|
uses: Infisical/secrets-action@v1.0.16
|
|
with:
|
|
domain: ${{ secrets.INFISICAL_DOMAIN }}
|
|
client-id: ${{ secrets.INFISICAL_CLIENT_ID }}
|
|
client-secret: ${{ secrets.INFISICAL_CLIENT_SECRET }}
|
|
project-slug: ${{ secrets.INFISICAL_PROJECT_SLUG }}
|
|
env-slug: ${{ inputs.environment_name }}
|
|
secret-path: /portfolio
|
|
|
|
- name: Install Azure CLI
|
|
run: |
|
|
curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
|
|
|
|
- name: Log in to Azure
|
|
run: |
|
|
az login --service-principal --username ${{ env.AZURE_CLIENT_ID }} --password ${{ env.AZURE_CLIENT_SECRET }} --tenant ${{ env.AZURE_TENANT_ID }}
|
|
|
|
- name: Update Container App
|
|
run: |
|
|
az containerapp update --name ${{ inputs.app_name }}-${{ inputs.environment_name }} --container-name ${{ inputs.app_name }} --resource-group ${{ env.RESOURCE_GROUP }} --image docker.io/noahspan/${{ inputs.app_name }}:${{ inputs.version_number }} |