-
Notifications
You must be signed in to change notification settings - Fork 4
71 lines (61 loc) · 1.9 KB
/
build-master-deploy-dev.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
name: Build master & deploy to dev
on:
push:
branches:
- master
paths-ignore:
- '**.md'
- '**.MD'
- '.gitignore'
- 'LICENSE'
- 'CODEOWNERS'
- 'docs/**'
- 'kafka/**'
workflow_dispatch:
env:
IMAGE_BASE: ghcr.io/${{ github.repository }}
jobs:
Build:
runs-on: ubuntu-latest
permissions:
packages: write # docker
contents: write # dep submissions
steps:
- uses: actions/checkout@v4
- uses: actions/setup-java@v3
with:
java-version: 17
distribution: temurin
cache: maven
- name: Bygge JAR
run: mvn clean package --settings ./.m2/settings.xml
env:
GITHUB_PASSWORD: ${{ secrets.READER_TOKEN }}
- name: Sett tag for docker
run: echo "TAG=$(date "+%Y.%m.%d")-$(git rev-parse --short HEAD)" >> $GITHUB_ENV
- uses: docker/login-action@v2
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Bygg & last opp Docker image
run: |
docker build --pull --tag ${IMAGE_BASE}:${TAG} --tag ${IMAGE_BASE}:latest .
docker push ${IMAGE_BASE} --all-tags
- name: Sett image for nais deploy
run: echo "IMAGE=${IMAGE_BASE}:${TAG}" >> $GITHUB_ENV
- name: Deploy til preprod
uses: nais/deploy/actions/deploy@v1
env:
APIKEY: ${{ secrets.NAIS_DEPLOY_APIKEY }}
CLUSTER: dev-fss
RESOURCE: nais/dev-fss.yml
- name: Maven Dependency Tree Dependency Submission
uses: advanced-security/[email protected]
with:
settings-file: ./.m2/settings.xml
ignore-maven-wrapper: true
env:
GITHUB_USERNAME: x-access-token
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GITHUB_PASSWORD: ${{ secrets.READER_TOKEN }}