disabling workflow temporarily
This commit is contained in:
Danilo Mendes Rocha
parent
08de35d069
commit
24ac6ac4ee
|
|
@ -1,287 +1,285 @@
|
|||
name: CI
|
||||
# name: CI
|
||||
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- 'edi-foundation-integration'
|
||||
paths-ignore:
|
||||
- 'VERSION'
|
||||
- '.bumpversion.cfg'
|
||||
pull_request:
|
||||
branches: [ edi-foundation-integration ]
|
||||
workflow_dispatch:
|
||||
# on:
|
||||
# push:
|
||||
# branches:
|
||||
# - 'edi-foundation-integration'
|
||||
# paths-ignore:
|
||||
# - 'VERSION'
|
||||
# - '.bumpversion.cfg'
|
||||
# pull_request:
|
||||
# branches: [ edi-foundation-integration ]
|
||||
# workflow_dispatch:
|
||||
|
||||
jobs:
|
||||
Wokflow-Queue:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: actions/checkout@v2
|
||||
- uses: ahmadnassri/action-workflow-queue@v1
|
||||
|
||||
Init:
|
||||
needs: [Wokflow-Queue]
|
||||
runs-on: ubuntu-20.04
|
||||
outputs:
|
||||
Version: ${{ steps.setVariables.outputs.version }}
|
||||
steps:
|
||||
- uses: actions/checkout@v2
|
||||
with:
|
||||
token: ${{ secrets.ADMIN_TOKEN }}
|
||||
# jobs:
|
||||
# Wokflow-Queue:
|
||||
# runs-on: ubuntu-latest
|
||||
# steps:
|
||||
# - uses: actions/checkout@v2
|
||||
# - uses: ahmadnassri/action-workflow-queue@v1
|
||||
|
||||
- name: Extract branch name
|
||||
uses: vazco/github-actions-branch-name@v1
|
||||
id: branch
|
||||
# Init:
|
||||
# needs: [Wokflow-Queue]
|
||||
# runs-on: ubuntu-20.04
|
||||
# outputs:
|
||||
# Version: ${{ steps.setVariables.outputs.version }}
|
||||
# steps:
|
||||
# - uses: actions/checkout@v2
|
||||
# with:
|
||||
# token: ${{ secrets.ADMIN_TOKEN }}
|
||||
|
||||
- name: Bump version
|
||||
if: github.ref == 'refs/heads/edi-foundation-integration'
|
||||
id: setVariables
|
||||
run: |
|
||||
sudo apt update
|
||||
sudo apt install bumpversion
|
||||
bumpversion patch
|
||||
new_version=`cat VERSION`
|
||||
echo "New version is: $new_version"
|
||||
echo "version=$new_version" >> $GITHUB_OUTPUT
|
||||
git config --global user.name "CI Build"
|
||||
git config --global user.email "ci.build@philips.com"
|
||||
git commit -am "Bump version $new_version"
|
||||
git push --force
|
||||
# - name: Extract branch name
|
||||
# uses: vazco/github-actions-branch-name@v1
|
||||
# id: branch
|
||||
|
||||
unit-test:
|
||||
needs: [Init]
|
||||
env:
|
||||
COVER: true
|
||||
runs-on: ubuntu-20.04
|
||||
steps:
|
||||
# - name: Bump version
|
||||
# if: github.ref == 'refs/heads/edi-foundation-integration'
|
||||
# id: setVariables
|
||||
# run: |
|
||||
# sudo apt update
|
||||
# sudo apt install bumpversion
|
||||
# bumpversion patch
|
||||
# new_version=`cat VERSION`
|
||||
# echo "New version is: $new_version"
|
||||
# echo "version=$new_version" >> $GITHUB_OUTPUT
|
||||
# git config --global user.name "CI Build"
|
||||
# git config --global user.email "ci.build@philips.com"
|
||||
# git commit -am "Bump version $new_version"
|
||||
# git push --force
|
||||
|
||||
- name: Check out code
|
||||
uses: actions/checkout@v2
|
||||
# unit-test:
|
||||
# needs: [Init]
|
||||
# env:
|
||||
# COVER: true
|
||||
# runs-on: ubuntu-20.04
|
||||
# steps:
|
||||
|
||||
- name: Set up Go 1.16
|
||||
uses: actions/setup-go@v2
|
||||
with:
|
||||
go-version: 1.16.x
|
||||
id: go
|
||||
# - name: Check out code
|
||||
# uses: actions/checkout@v2
|
||||
|
||||
- name: Get dependencies
|
||||
run: |
|
||||
curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(go env GOPATH)/bin v1.36.0
|
||||
curl -L https://codeclimate.com/downloads/test-reporter/test-reporter-latest-linux-amd64 > ./cc-test-reporter
|
||||
chmod +x ./cc-test-reporter
|
||||
# - name: Set up Go 1.16
|
||||
# uses: actions/setup-go@v2
|
||||
# with:
|
||||
# go-version: 1.16.x
|
||||
# id: go
|
||||
|
||||
- name: Verify Code Generation
|
||||
run: |
|
||||
make verify-generate
|
||||
# - name: Get dependencies
|
||||
# run: |
|
||||
# curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(go env GOPATH)/bin v1.36.0
|
||||
# curl -L https://codeclimate.com/downloads/test-reporter/test-reporter-latest-linux-amd64 > ./cc-test-reporter
|
||||
# chmod +x ./cc-test-reporter
|
||||
|
||||
- name: Lint
|
||||
run: |
|
||||
make lint
|
||||
# - name: Verify Code Generation
|
||||
# run: |
|
||||
# make verify-generate
|
||||
|
||||
- name: Build
|
||||
run: |
|
||||
make build
|
||||
# - name: Lint
|
||||
# run: |
|
||||
# make lint
|
||||
|
||||
- name: Test
|
||||
env:
|
||||
CC_TEST_REPORTER_ID: ${{ secrets.CC_TEST_REPORTER_ID }}
|
||||
run: |
|
||||
./.github/workflows/test.sh
|
||||
|
||||
|
||||
Fortify:
|
||||
needs: [Init]
|
||||
runs-on: builder_blr_2
|
||||
steps:
|
||||
- name: checkout
|
||||
uses: actions/checkout@v2
|
||||
|
||||
- name: Fortify scan
|
||||
run: powershell -ExecutionPolicy RemoteSigned -NoExit -File ${{ github.workspace }}\build\ps\Invoke-FortifyScan.ps1 -PublishAuthToken ${{ secrets.FORTIFY_TOKEN }}
|
||||
|
||||
CodeAnalysis:
|
||||
runs-on: builder_blr
|
||||
needs: [Init]
|
||||
steps:
|
||||
- uses: actions/checkout@v2
|
||||
# - name: Build
|
||||
# run: |
|
||||
# make build
|
||||
|
||||
- name: Set up Go 1.16
|
||||
uses: actions/setup-go@v2
|
||||
with:
|
||||
go-version: 1.16.x
|
||||
id: go
|
||||
# - name: Test
|
||||
# env:
|
||||
# CC_TEST_REPORTER_ID: ${{ secrets.CC_TEST_REPORTER_ID }}
|
||||
# run: |
|
||||
# ./.github/workflows/test.sh
|
||||
|
||||
- name: coverage
|
||||
run: |
|
||||
go test -coverprofile=${{ github.workspace }}\coverage.out
|
||||
|
||||
- name: sonar
|
||||
run: |
|
||||
D:\SonarQube\Sonar-Scanner\sonar-scanner-cli-4.4.0.2170-windows\sonar-scanner-4.4.0.2170-windows\bin\sonar-scanner.bat -D"sonar.projectKey=EDI-hds-oauth2-proxy" -D"sonar.sources=." -D"sonar.tests=." -D"sonar.go.coverage.reportPaths=${{ github.workspace }}\coverage.out" -D"sonar.host.url=https://sonarqube.ta.philips.com/" -D"sonar.login=${{ secrets.SONAR_TOKEN }}"
|
||||
|
||||
# Fortify:
|
||||
# needs: [Init]
|
||||
# runs-on: builder_blr_2
|
||||
# steps:
|
||||
# - name: checkout
|
||||
# uses: actions/checkout@v2
|
||||
|
||||
Build:
|
||||
needs: [Init]
|
||||
runs-on: ubuntu-20.04
|
||||
outputs:
|
||||
oauth2proxyPRTag: ${{ steps.setVariables.outputs.prTag }}
|
||||
oauth2proxyCITag: ${{ steps.setVariables.outputs.betaTag }}
|
||||
steps:
|
||||
- uses: actions/checkout@v2
|
||||
# - name: Fortify scan
|
||||
# run: powershell -ExecutionPolicy RemoteSigned -NoExit -File ${{ github.workspace }}\build\ps\Invoke-FortifyScan.ps1 -PublishAuthToken ${{ secrets.FORTIFY_TOKEN }}
|
||||
|
||||
- name: Import Secrets
|
||||
id: secrets
|
||||
uses: hashicorp/vault-action@v2.3.1
|
||||
with:
|
||||
url: ${{ secrets.VAULT_HOST }}
|
||||
method: approle
|
||||
roleId: ${{ secrets.VAULT_ROLE_ID }}
|
||||
secretId: ${{ secrets.VAULT_SECRET_ID }}
|
||||
exportEnv: true
|
||||
secrets: |
|
||||
devops/data/docker-repos/hsdp-edi endPoint | HSDP_DOCKER_REGISTRY ;
|
||||
devops/data/docker-repos/hsdp-edi user | HSDP_DOCKER_USER ;
|
||||
devops/data/docker-repos/hsdp-edi password | HSDP_DOCKER_PASSWORD ;
|
||||
devops/data/github/users/sal-devops token | GITHUB_TOKEN ;
|
||||
# CodeAnalysis:
|
||||
# runs-on: builder_blr
|
||||
# needs: [Init]
|
||||
# steps:
|
||||
# - uses: actions/checkout@v2
|
||||
|
||||
- name: Extract branch name
|
||||
uses: vazco/github-actions-branch-name@v1
|
||||
id: branch
|
||||
# - name: Set up Go 1.16
|
||||
# uses: actions/setup-go@v2
|
||||
# with:
|
||||
# go-version: 1.16.x
|
||||
# id: go
|
||||
|
||||
- name: Set env variables
|
||||
id: setVariables
|
||||
run: |
|
||||
new_version=${{ needs.Init.outputs.Version }}
|
||||
pr_tag="PR-${{ github.run_id }}"
|
||||
beta_tag="${new_version}-beta"
|
||||
echo "New version is: $new_version"
|
||||
echo "VERSION=$new_version" >> "$GITHUB_ENV"
|
||||
echo "CI_IMAGE=${{ env.HSDP_DOCKER_REGISTRY }}/edi-foundation-oauth2-proxy:${beta_tag}" >> "$GITHUB_ENV"
|
||||
echo "PR_IMAGE=${{ env.HSDP_DOCKER_REGISTRY }}/edi-foundation-oauth2-proxy:${pr_tag}" >> "$GITHUB_ENV"
|
||||
echo "prTag=${pr_tag}" >> $GITHUB_OUTPUT
|
||||
echo "betaTag=${beta_tag}" >> $GITHUB_OUTPUT
|
||||
echo "${beta_tag}" > /tmp/output.txt
|
||||
|
||||
- name: Docker Build
|
||||
run: |
|
||||
make docker
|
||||
|
||||
- name: Docker login
|
||||
run: |
|
||||
docker login --username '${{ secrets.DOCKER_USER }}' --password '${{ secrets.DOCKER_PSWD }}' '${{ secrets.DOCKER_REPO }}'
|
||||
|
||||
- name: Docker tag
|
||||
run: |
|
||||
docker tag '${{ secrets.DOCKER_REPO }}'/oauth2-proxy:latest ${{ env.PR_IMAGE }}
|
||||
|
||||
- name: PR Image Docker Push
|
||||
if: github.event_name == 'pull_request'
|
||||
run: |
|
||||
docker push ${{ env.PR_IMAGE }}
|
||||
|
||||
- name: Docker Push
|
||||
if: github.ref == 'refs/heads/edi-foundation-integration'
|
||||
run: |
|
||||
docker tag ${{ env.PR_IMAGE }} ${{ env.CI_IMAGE }}
|
||||
docker push ${{ env.CI_IMAGE }}
|
||||
# - name: coverage
|
||||
# run: |
|
||||
# go test -coverprofile=${{ github.workspace }}\coverage.out
|
||||
|
||||
Blackduck:
|
||||
needs: [Build]
|
||||
if: github.ref == 'refs/heads/edi-foundation-integration'
|
||||
runs-on: builder_blr
|
||||
steps:
|
||||
- name: checkout
|
||||
uses: actions/checkout@v2
|
||||
|
||||
- name: Set up JDK 11
|
||||
uses: actions/setup-java@v1
|
||||
with:
|
||||
java-version: 11
|
||||
|
||||
- name: Pull CI Docker Image
|
||||
run: |
|
||||
docker login docker.na1.hsdp.io --username '${{ secrets.DOCKER_USER }}' --password '${{ secrets.DOCKER_PSWD }}'
|
||||
docker pull docker.na1.hsdp.io/edi/edi-foundation-oauth2-proxy:${{ needs.Build.outputs.oauth2proxyCITag }}
|
||||
# - name: sonar
|
||||
# run: |
|
||||
# D:\SonarQube\Sonar-Scanner\sonar-scanner-cli-4.4.0.2170-windows\sonar-scanner-4.4.0.2170-windows\bin\sonar-scanner.bat -D"sonar.projectKey=EDI-hds-oauth2-proxy" -D"sonar.sources=." -D"sonar.tests=." -D"sonar.go.coverage.reportPaths=${{ github.workspace }}\coverage.out" -D"sonar.host.url=https://sonarqube.ta.philips.com/" -D"sonar.login=${{ secrets.SONAR_TOKEN }}"
|
||||
|
||||
- name: CI Blackduck Image Scan
|
||||
run: |
|
||||
cd D:\test-bs
|
||||
java -jar D:\synopsys-detect-8.3.0.jar --detect.project.name=SA_edifoundation-oauth2proxy --detect.project.version.name=1.0 --blackduck.url=https://blackduck.philips.com/ --detect.go.path="C:\Program Files\Go\bin\go.exe" --blackduck.trust.cert=true --blackduck.api.token=${{ secrets.BLACKDUCK_TOKEN }} --blackduck.proxy.host=apac.zscaler.philips.com --blackduck.proxy.port=10015 --blackduck.proxy.ignored.hosts=blackduck.philips.com --detect.tools.excluded=BINARY_SCAN --detect.docker.image=docker.na1.hsdp.io/edi/edi-foundation-oauth2-proxy:${{ needs.Build.outputs.oauth2proxyCITag }} --detect.blackduck.signature.scanner.local.path="C:\Users\ing07422\blackduck\tools\Black_Duck_Scan_Installation\scan.cli-2022.7.2"
|
||||
# Build:
|
||||
# needs: [Init]
|
||||
# runs-on: ubuntu-20.04
|
||||
# outputs:
|
||||
# oauth2proxyPRTag: ${{ steps.setVariables.outputs.prTag }}
|
||||
# oauth2proxyCITag: ${{ steps.setVariables.outputs.betaTag }}
|
||||
# steps:
|
||||
# - uses: actions/checkout@v2
|
||||
|
||||
PR_Deploy_Test_HDS_AUTH_GATEWAY:
|
||||
if: github.event_name == 'pull_request'
|
||||
needs: [Build, Fortify, unit-test, CodeAnalysis]
|
||||
uses: ./.github/workflows/deploy-hds-auth-gateway.yaml
|
||||
with:
|
||||
OAUTH2_PROXY_IMAGE: ${{ needs.Build.outputs.oauth2proxyPRTag }}
|
||||
secrets:
|
||||
VAULT_HOST: ${{ secrets.VAULT_HOST }}
|
||||
VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
|
||||
VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
|
||||
# - name: Import Secrets
|
||||
# id: secrets
|
||||
# uses: hashicorp/vault-action@v2.3.1
|
||||
# with:
|
||||
# url: ${{ secrets.VAULT_HOST }}
|
||||
# method: approle
|
||||
# roleId: ${{ secrets.VAULT_ROLE_ID }}
|
||||
# secretId: ${{ secrets.VAULT_SECRET_ID }}
|
||||
# exportEnv: true
|
||||
# secrets: |
|
||||
# devops/data/docker-repos/hsdp-edi endPoint | HSDP_DOCKER_REGISTRY ;
|
||||
# devops/data/docker-repos/hsdp-edi user | HSDP_DOCKER_USER ;
|
||||
# devops/data/docker-repos/hsdp-edi password | HSDP_DOCKER_PASSWORD ;
|
||||
# devops/data/github/users/sal-devops token | GITHUB_TOKEN ;
|
||||
|
||||
CI_Deploy_Test_HDS_AUTH_GATEWAY:
|
||||
if: github.ref == 'refs/heads/edi-foundation-integration'
|
||||
needs: [Blackduck, Build, Fortify, unit-test, CodeAnalysis]
|
||||
uses: ./.github/workflows/api-gw-integrated-test.yaml
|
||||
with:
|
||||
OAUTH2_PROXY_IMAGE: ${{ needs.Build.outputs.oauth2proxyCITag }}
|
||||
secrets:
|
||||
VAULT_HOST: ${{ secrets.VAULT_HOST }}
|
||||
VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
|
||||
VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
|
||||
# - name: Extract branch name
|
||||
# uses: vazco/github-actions-branch-name@v1
|
||||
# id: branch
|
||||
|
||||
Promote_Version:
|
||||
needs: [CI_Deploy_Test_HDS_AUTH_GATEWAY]
|
||||
if: github.ref == 'refs/heads/edi-foundation-integration'
|
||||
runs-on: ubuntu-20.04
|
||||
outputs:
|
||||
versionTag: ${{ steps.setVariables.outputs.versionTag }}
|
||||
steps:
|
||||
- uses: actions/checkout@v2
|
||||
# - name: Set env variables
|
||||
# id: setVariables
|
||||
# run: |
|
||||
# new_version=${{ needs.Init.outputs.Version }}
|
||||
# pr_tag="PR-${{ github.run_id }}"
|
||||
# beta_tag="${new_version}-beta"
|
||||
# echo "New version is: $new_version"
|
||||
# echo "VERSION=$new_version" >> "$GITHUB_ENV"
|
||||
# echo "CI_IMAGE=${{ env.HSDP_DOCKER_REGISTRY }}/edi-foundation-oauth2-proxy:${beta_tag}" >> "$GITHUB_ENV"
|
||||
# echo "PR_IMAGE=${{ env.HSDP_DOCKER_REGISTRY }}/edi-foundation-oauth2-proxy:${pr_tag}" >> "$GITHUB_ENV"
|
||||
# echo "prTag=${pr_tag}" >> $GITHUB_OUTPUT
|
||||
# echo "betaTag=${beta_tag}" >> $GITHUB_OUTPUT
|
||||
# echo "${beta_tag}" > /tmp/output.txt
|
||||
|
||||
- name: Import Secrets
|
||||
id: secrets
|
||||
uses: hashicorp/vault-action@v2.3.1
|
||||
with:
|
||||
url: ${{ secrets.VAULT_HOST }}
|
||||
method: approle
|
||||
roleId: ${{ secrets.VAULT_ROLE_ID }}
|
||||
secretId: ${{ secrets.VAULT_SECRET_ID }}
|
||||
exportEnv: true
|
||||
secrets: |
|
||||
devops/data/docker-repos/hsdp-edi endPoint | HSDP_DOCKER_REGISTRY ;
|
||||
devops/data/docker-repos/hsdp-edi user | HSDP_DOCKER_USER ;
|
||||
devops/data/docker-repos/hsdp-edi password | HSDP_DOCKER_PASSWORD ;
|
||||
|
||||
- name: Set env variables
|
||||
id: setVariables
|
||||
run: |
|
||||
sudo apt update
|
||||
sudo apt install bumpversion
|
||||
bumpversion patch
|
||||
new_version=`cat VERSION`
|
||||
echo "New version is: $new_version"
|
||||
echo "CI_IMAGE=${{ env.HSDP_DOCKER_REGISTRY }}/edi-foundation-oauth2-proxy:${new_version}-beta" >> "$GITHUB_ENV"
|
||||
echo "RC_IMAGE=docker.na1.hsdp.io/edisp-releases/edi-foundation-oauth2-proxy:${new_version}-rc" >> "$GITHUB_ENV"
|
||||
echo "versionTag=${new_version}-rc" >> $GITHUB_OUTPUT
|
||||
echo "${new_version}-rc"
|
||||
|
||||
- name: Docker login
|
||||
run: |
|
||||
docker login --username '${{ secrets.DOCKER_USER }}' --password '${{ secrets.DOCKER_PSWD }}' '${{ secrets.DOCKER_REPO }}'
|
||||
|
||||
- name: Docker Push
|
||||
run: |
|
||||
docker pull ${{ env.CI_IMAGE }}
|
||||
docker tag ${{ env.CI_IMAGE }} ${{ env.RC_IMAGE }}
|
||||
docker push ${{ env.RC_IMAGE }}
|
||||
# - name: Docker Build
|
||||
# run: |
|
||||
# make docker
|
||||
|
||||
Replace_OAuth2_Proxy_Tag_in_Terraform_API_Gateway:
|
||||
needs: [Promote_Version]
|
||||
if: github.ref == 'refs/heads/edi-foundation-integration'
|
||||
uses: ./.github/workflows/update-oauth2-proxy-version-at-api-gw.yaml
|
||||
with:
|
||||
OAUTH2_PROXY_IMAGE: ${{ needs.Promote_Version.outputs.versionTag }}
|
||||
secrets:
|
||||
VAULT_HOST: ${{ secrets.VAULT_HOST }}
|
||||
VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
|
||||
VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
|
||||
# - name: Docker login
|
||||
# run: |
|
||||
# docker login --username '${{ secrets.DOCKER_USER }}' --password '${{ secrets.DOCKER_PSWD }}' '${{ secrets.DOCKER_REPO }}'
|
||||
|
||||
# - name: Docker tag
|
||||
# run: |
|
||||
# docker tag '${{ secrets.DOCKER_REPO }}'/oauth2-proxy:latest ${{ env.PR_IMAGE }}
|
||||
|
||||
# - name: PR Image Docker Push
|
||||
# if: github.event_name == 'pull_request'
|
||||
# run: |
|
||||
# docker push ${{ env.PR_IMAGE }}
|
||||
|
||||
# - name: Docker Push
|
||||
# if: github.ref == 'refs/heads/edi-foundation-integration'
|
||||
# run: |
|
||||
# docker tag ${{ env.PR_IMAGE }} ${{ env.CI_IMAGE }}
|
||||
# docker push ${{ env.CI_IMAGE }}
|
||||
|
||||
# Blackduck:
|
||||
# needs: [Build]
|
||||
# if: github.ref == 'refs/heads/edi-foundation-integration'
|
||||
# runs-on: builder_blr
|
||||
# steps:
|
||||
# - name: checkout
|
||||
# uses: actions/checkout@v2
|
||||
|
||||
# - name: Set up JDK 11
|
||||
# uses: actions/setup-java@v1
|
||||
# with:
|
||||
# java-version: 11
|
||||
|
||||
# - name: Pull CI Docker Image
|
||||
# run: |
|
||||
# docker login docker.na1.hsdp.io --username '${{ secrets.DOCKER_USER }}' --password '${{ secrets.DOCKER_PSWD }}'
|
||||
# docker pull docker.na1.hsdp.io/edi/edi-foundation-oauth2-proxy:${{ needs.Build.outputs.oauth2proxyCITag }}
|
||||
|
||||
# - name: CI Blackduck Image Scan
|
||||
# run: |
|
||||
# cd D:\test-bs
|
||||
# java -jar D:\synopsys-detect-8.3.0.jar --detect.project.name=SA_edifoundation-oauth2proxy --detect.project.version.name=1.0 --blackduck.url=https://blackduck.philips.com/ --detect.go.path="C:\Program Files\Go\bin\go.exe" --blackduck.trust.cert=true --blackduck.api.token=${{ secrets.BLACKDUCK_TOKEN }} --blackduck.proxy.host=apac.zscaler.philips.com --blackduck.proxy.port=10015 --blackduck.proxy.ignored.hosts=blackduck.philips.com --detect.tools.excluded=BINARY_SCAN --detect.docker.image=docker.na1.hsdp.io/edi/edi-foundation-oauth2-proxy:${{ needs.Build.outputs.oauth2proxyCITag }} --detect.blackduck.signature.scanner.local.path="C:\Users\ing07422\blackduck\tools\Black_Duck_Scan_Installation\scan.cli-2022.7.2"
|
||||
|
||||
# PR_Deploy_Test_HDS_AUTH_GATEWAY:
|
||||
# if: github.event_name == 'pull_request'
|
||||
# needs: [Build, Fortify, unit-test, CodeAnalysis]
|
||||
# uses: ./.github/workflows/deploy-hds-auth-gateway.yaml
|
||||
# with:
|
||||
# OAUTH2_PROXY_IMAGE: ${{ needs.Build.outputs.oauth2proxyPRTag }}
|
||||
# secrets:
|
||||
# VAULT_HOST: ${{ secrets.VAULT_HOST }}
|
||||
# VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
|
||||
# VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
|
||||
|
||||
# CI_Deploy_Test_HDS_AUTH_GATEWAY:
|
||||
# if: github.ref == 'refs/heads/edi-foundation-integration'
|
||||
# needs: [Blackduck, Build, Fortify, unit-test, CodeAnalysis]
|
||||
# uses: ./.github/workflows/api-gw-integrated-test.yaml
|
||||
# with:
|
||||
# OAUTH2_PROXY_IMAGE: ${{ needs.Build.outputs.oauth2proxyCITag }}
|
||||
# secrets:
|
||||
# VAULT_HOST: ${{ secrets.VAULT_HOST }}
|
||||
# VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
|
||||
# VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
|
||||
|
||||
# Promote_Version:
|
||||
# needs: [CI_Deploy_Test_HDS_AUTH_GATEWAY]
|
||||
# if: github.ref == 'refs/heads/edi-foundation-integration'
|
||||
# runs-on: ubuntu-20.04
|
||||
# outputs:
|
||||
# versionTag: ${{ steps.setVariables.outputs.versionTag }}
|
||||
# steps:
|
||||
# - uses: actions/checkout@v2
|
||||
|
||||
# - name: Import Secrets
|
||||
# id: secrets
|
||||
# uses: hashicorp/vault-action@v2.3.1
|
||||
# with:
|
||||
# url: ${{ secrets.VAULT_HOST }}
|
||||
# method: approle
|
||||
# roleId: ${{ secrets.VAULT_ROLE_ID }}
|
||||
# secretId: ${{ secrets.VAULT_SECRET_ID }}
|
||||
# exportEnv: true
|
||||
# secrets: |
|
||||
# devops/data/docker-repos/hsdp-edi endPoint | HSDP_DOCKER_REGISTRY ;
|
||||
# devops/data/docker-repos/hsdp-edi user | HSDP_DOCKER_USER ;
|
||||
# devops/data/docker-repos/hsdp-edi password | HSDP_DOCKER_PASSWORD ;
|
||||
|
||||
# - name: Set env variables
|
||||
# id: setVariables
|
||||
# run: |
|
||||
# sudo apt update
|
||||
# sudo apt install bumpversion
|
||||
# bumpversion patch
|
||||
# new_version=`cat VERSION`
|
||||
# echo "New version is: $new_version"
|
||||
# echo "CI_IMAGE=${{ env.HSDP_DOCKER_REGISTRY }}/edi-foundation-oauth2-proxy:${new_version}-beta" >> "$GITHUB_ENV"
|
||||
# echo "RC_IMAGE=docker.na1.hsdp.io/edisp-releases/edi-foundation-oauth2-proxy:${new_version}-rc" >> "$GITHUB_ENV"
|
||||
# echo "versionTag=${new_version}-rc" >> $GITHUB_OUTPUT
|
||||
# echo "${new_version}-rc"
|
||||
|
||||
# - name: Docker login
|
||||
# run: |
|
||||
# docker login --username '${{ secrets.DOCKER_USER }}' --password '${{ secrets.DOCKER_PSWD }}' '${{ secrets.DOCKER_REPO }}'
|
||||
|
||||
# - name: Docker Push
|
||||
# run: |
|
||||
# docker pull ${{ env.CI_IMAGE }}
|
||||
# docker tag ${{ env.CI_IMAGE }} ${{ env.RC_IMAGE }}
|
||||
# docker push ${{ env.RC_IMAGE }}
|
||||
|
||||
# Replace_OAuth2_Proxy_Tag_in_Terraform_API_Gateway:
|
||||
# needs: [Promote_Version]
|
||||
# if: github.ref == 'refs/heads/edi-foundation-integration'
|
||||
# uses: ./.github/workflows/update-oauth2-proxy-version-at-api-gw.yaml
|
||||
# with:
|
||||
# OAUTH2_PROXY_IMAGE: ${{ needs.Promote_Version.outputs.versionTag }}
|
||||
# secrets:
|
||||
# VAULT_HOST: ${{ secrets.VAULT_HOST }}
|
||||
# VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
|
||||
# VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
|
||||
|
|
|
|||
Loading…
Reference in New Issue