deploy.yml

concurrency: build_and_deploy_${{ github.ref_name }}
name: Deploy to AKS cluster Test
on:
  push:
        branches: 1717-ittms-manual-deployment-workflow

  workflow_dispatch:
    inputs:
      environment:
        description: Environment to deploy to
        required: true
        type: choice
        default: qa
        options:
        - qa
        - review
      sha:
        description: Commit sha to be deployed
        required: true

jobs:
  deploy:
    name: review deployment
    environment:
      name: review
      url: ${{ steps.deploy_app.outputs.deploy-url }}
    concurrency: deploy_all # ensures that the job waits for any deployments triggered by the build workflow to finish
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - uses: azure/login@v1
        with:
          creds: ${{ secrets.AZURE_CREDENTIALS }}

      - name: Fetch secrets from key vault
        uses: azure/CLI@v1
        id: keyvault-yaml-secret
        with:
          inlineScript: |
            SLACK_WEBHOOK=$(az keyvault secret show --name "SLACK-WEBHOOK" --vault-name "${{ secrets.INF_KEY_VAULT }}" --query "value" -o tsv)
            echo "::add-mask::$SLACK_WEBHOOK"
            echo "SLACK_WEBHOOK=$SLACK_WEBHOOK" >> $GITHUB_OUTPUT

      - uses: ./.github/actions/deploy-environment
        id: deploy
        with:
          environment: review
          docker-image: 1717-ittms-manual-deployment-workflow
          azure-credentials: ${{ secrets.AZURE_CREDENTIALS }}
          pull-request-number: 12345