57 lines
1.7 KiB
YAML
57 lines
1.7 KiB
YAML
|
name: QA Deploy
|
||
|
|
|
||
|
|
on:
|
||
|
|
workflow_dispatch:
|
||
|
|
inputs: {}
|
||
|
|
|
||
|
|
env:
|
||
|
|
QA_CLUSTER_RESOURCE_GROUP: "bitwarden-devops"
|
||
|
|
QA_CLUSTER_NAME: "dev-aks"
|
||
|
|
QA_K8S_NAMESPACE: "bw-qa"
|
||
|
|
QA_K8S_APP_NAME: "bw-web"
|
||
|
|
|
||
|
|
jobs:
|
||
|
|
deploy:
|
||
|
|
name: Deploy QA Web Vault
|
||
|
|
runs-on: ubuntu-latest
|
||
|
|
steps:
|
||
|
|
- name: Checkout Repo
|
||
|
|
uses: actions/checkout@v2
|
||
|
|
|
||
|
|
- name: Setup
|
||
|
|
run:
|
||
|
|
export PATH=$PATH:~/work/web/web
|
||
|
|
|
||
|
|
- name: Login to Azure
|
||
|
|
uses: Azure/login@77f1b2e3fb80c0e8645114159d17008b8a2e475a
|
||
|
|
with:
|
||
|
|
creds: ${{ secrets.AZURE_QA_KV_CREDENTIALS }}
|
||
|
|
|
||
|
|
- name: Retrieve secrets
|
||
|
|
if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/rc'
|
||
|
|
id: retrieve-secrets
|
||
|
|
uses: Azure/get-keyvault-secrets@80ccd3fafe5662407cc2e55f202ee34bfff8c403
|
||
|
|
with:
|
||
|
|
keyvault: "bitwarden-qa-kv"
|
||
|
|
secrets: "dev-aks-kubectl-credentials"
|
||
|
|
|
||
|
|
- name: Login to dev-aks-kubectl SP
|
||
|
|
uses: Azure/login@77f1b2e3fb80c0e8645114159d17008b8a2e475a
|
||
|
|
with:
|
||
|
|
creds: ${{ env.dev-aks-kubectl-credentials }}
|
||
|
|
|
||
|
|
- name: Setup AKS access
|
||
|
|
env:
|
||
|
|
USER_ID: ${{ env.qa-kubectl-managed-identity-clientId }}
|
||
|
|
run: |
|
||
|
|
echo "---az install---"
|
||
|
|
az aks install-cli --install-location ./kubectl --kubelogin-install-location ./kubelogin
|
||
|
|
echo "---az get-creds---"
|
||
|
|
az aks get-credentials -n $QA_CLUSTER_NAME -g $QA_CLUSTER_RESOURCE_GROUP
|
||
|
|
|
||
|
|
- name: Redeploy Web image
|
||
|
|
run: |
|
||
|
|
POD_NAME=$(kubectl get po -n $QA_K8S_NAMESPACE -l app=$QA_K8S_APP_NAME -o jsonpath="{.items[0].metadata.name}")
|
||
|
|
echo "Deleting pod: $POD_NAME"
|
||
|
|
kubectl delete po -n bw-qa $POD_NAME
|