vaultwarden
/
bitwarden-estensione-browser
mirror of https://github.com/bitwarden/browser
1
0
Fork 0
Code Issues 1 Releases Wiki Activity

DEVOPS-1581 REFACTOR: deploy-non-prod-web workflow to add EUQA option and make it env dynamic

This commit is contained in:
Alex Urbina 2023-11-21 21:16:55 -06:00
parent a5267ba622
commit fba2d9fa4d
No known key found for this signature in database
GPG Key ID: BFAFE8D81FF8B38D
1 changed files with 13 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
.github/workflows/deploy-non-prod-web.yml vendored
View File

@ -11,6 +11,7 @@ on:
type: choice type: choice
options: options:
- QA - QA
- EUQA
workflow_call: workflow_call:
inputs: inputs:
@ -29,6 +30,8 @@ jobs:
environment-name: ${{ steps.config.outputs.environment-name }} environment-name: ${{ steps.config.outputs.environment-name }}
environment-branch: ${{ steps.config.outputs.environment-branch }} environment-branch: ${{ steps.config.outputs.environment-branch }}
environment-artifact: ${{ steps.config.outputs.environment-artifact }} environment-artifact: ${{ steps.config.outputs.environment-artifact }}
azure-login-creds: ${{ steps.config.outputs.azure-login-creds }}
retrieve-secrets-keyvault: ${{ steps.config.outputs.retrieve-secrets-keyvault }}
steps: steps:
- name: Configure - name: Configure
id: config id: config
@ -40,6 +43,13 @@ jobs:
echo "environment-name=Web Vault - ${{ inputs.environment }}" >> $GITHUB_OUTPUT echo "environment-name=Web Vault - ${{ inputs.environment }}" >> $GITHUB_OUTPUT
echo "environment-branch=cf-pages-$ENV_NAME_LOWER" >> $GITHUB_OUTPUT echo "environment-branch=cf-pages-$ENV_NAME_LOWER" >> $GITHUB_OUTPUT
echo "environment-artifact=web-*-cloud-${{ inputs.environment }}.zip" >> $GITHUB_OUTPUT echo "environment-artifact=web-*-cloud-${{ inputs.environment }}.zip" >> $GITHUB_OUTPUT
if [ ${{ inputs.environment }} == "qa" ]; then
echo "azure-login-creds=AZURE_KV_US_QA_SERVICE_PRINCIPAL" >> $GITHUB_OUTPUT
echo "retrieve-secrets-keyvault=bw-webvault-rlktusqa-kv" >> $GITHUB_OUTPUT
elif [ ${{ inputs.environment }} == "euqa" ]; then
echo "azure-login-creds=AZURE_KV_EU_QA_SERVICE_PRINCIPAL" >> $GITHUB_OUTPUT
echo "retrieve-secrets-keyvault=webvaulteu-westeurope-qa" >> $GITHUB_OUTPUT
fi
artifact-check: artifact-check:
name: Check if Web artifact is present name: Check if Web artifact is present
@ -86,6 +96,7 @@ jobs:
cfpages-deploy: cfpages-deploy:
name: Deploy Web Vault to ${{ inputs.environment }} CloudFlare Pages branch name: Deploy Web Vault to ${{ inputs.environment }} CloudFlare Pages branch
if : ${{ inputs.environment == 'QA' }}
needs: needs:
- setup - setup
- artifact-check - artifact-check
@ -183,13 +194,13 @@ jobs:
- name: Login to Azure - name: Login to Azure
uses: Azure/login@92a5484dfaf04ca78a94597f4f19fea633851fa2 # v1.4.7 uses: Azure/login@92a5484dfaf04ca78a94597f4f19fea633851fa2 # v1.4.7
with: with:
creds: ${{ secrets.AZURE_KV_US_QA_SERVICE_PRINCIPAL }} creds: ${{ secrets[needs.setup.outputs.azure-login-creds] }}
- name: Retrieve Storage Account connection string - name: Retrieve Storage Account connection string
id: retrieve-secrets id: retrieve-secrets
uses: bitwarden/gh-actions/get-keyvault-secrets@main uses: bitwarden/gh-actions/get-keyvault-secrets@main
with: with:
keyvault: bw-webvault-rlktusqa-kv keyvault: ${{ needs.setup.outputs.retrieve-secrets-keyvault }}
secrets: "sa-bitwarden-web-vault-dev-key-temp" secrets: "sa-bitwarden-web-vault-dev-key-temp"
- name: Download latest cloud asset - name: Download latest cloud asset