From fcfead835fedb83104e524c17040c98e1227adc8 Mon Sep 17 00:00:00 2001
From: aswin-in-philips <aswin.s@philips.com>
Date: Thu, 5 May 2022 15:07:14 +0530
Subject: [PATCH] adding trigger workflow

---
 .github/workflows/api-gw-integrated-test.yaml | 35 ++++++++++
 .github/workflows/ci.yaml                     | 70 ++++++++++++++++++-
 2 files changed, 103 insertions(+), 2 deletions(-)
 create mode 100644 .github/workflows/api-gw-integrated-test.yaml

diff --git a/.github/workflows/api-gw-integrated-test.yaml b/.github/workflows/api-gw-integrated-test.yaml
new file mode 100644
index 00000000..71254964
--- /dev/null
+++ b/.github/workflows/api-gw-integrated-test.yaml
@@ -0,0 +1,35 @@
+name: API-GW-INTEGRATED-TEST
+
+on:
+  workflow_call:
+    secrets:
+      VAULT_HOST:
+        required: true
+      VAULT_ROLE_ID:
+        required: true
+      VAULT_SECRET_ID:
+        required: true
+
+jobs:
+  Deploy:
+    runs-on: ubuntu-20.04
+    steps:
+      - name: Import Secrets
+        id: secrets
+        uses: hashicorp/vault-action@v2.3.1
+        with:
+          url: ${{ secrets.VAULT_HOST }}
+          method: approle
+          roleId: ${{ secrets.VAULT_ROLE_ID }}
+          secretId: ${{ secrets.VAULT_SECRET_ID }}
+          exportEnv: true
+          secrets: |
+            devops/data/github/users/sal-devops token | GITHUB_TOKEN ;
+            
+      - uses: convictional/trigger-workflow-and-wait@v1.6.1
+        with:
+          owner: philips-internal
+          repo: hds-auth-gateway
+          github_token: ${{ env.GITHUB_TOKEN }}
+          workflow_file_name: cd.yaml
+          ref: terraform
\ No newline at end of file
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 99001a62..80ffcfd3 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -75,7 +75,27 @@ jobs:
       run: |
         ./.github/workflows/test.sh
 
-  docker:
+  Blackduck:
+    needs: [Init]
+    runs-on: builder_blr
+    steps:
+      - name: checkout
+        uses: actions/checkout@v2
+
+      - name: blackduck scan
+        run: powershell -ExecutionPolicy RemoteSigned -NoExit -File ${{ github.workspace }}\Build\PS\Invoke-BlackduckDetect.ps1 -SourcePath ${{ github.workspace }}
+
+  Fortify:
+    needs: [Init]
+    runs-on: builder_blr
+    steps:
+      - name: checkout
+        uses: actions/checkout@v2
+        
+      - name: Fortify scan
+        run: powershell -ExecutionPolicy RemoteSigned -NoExit -File ${{ github.workspace }}\build\ps\Invoke-FortifyScan.ps1
+
+  Build:
     needs: [Init]
     runs-on: ubuntu-20.04
     steps:
@@ -127,4 +147,50 @@ jobs:
       if: github.ref == 'refs/heads/edi-foundation-integration'
       run: |
         docker tag ${{ env.BRANCH_IMAGE }} ${{ env.CI_IMAGE }}
-        docker push ${{ env.CI_IMAGE }}
\ No newline at end of file
+        docker push ${{ env.CI_IMAGE }}
+
+  Deploy_And_GW_Integrated_Test:
+    needs: [Build]
+    if: github.ref == 'refs/heads/refator-pipeline'
+    uses: ./.github/workflows/api-gw-integrated-test.yaml
+    secrets:
+      VAULT_HOST: ${{ secrets.VAULT_HOST }}
+      VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
+      VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
+
+  Release:
+    if: github.ref == 'refs/heads/refator-pipeline'
+    needs: Deploy_And_GW_Integrated_Test
+    runs-on: ubuntu-20.04
+    steps:
+      - uses: actions/checkout@v2
+
+      - name: Import Secrets
+        id: secrets
+        uses: hashicorp/vault-action@v2.3.1
+        with:
+          url: ${{ secrets.VAULT_HOST }}
+          method: approle
+          roleId: ${{ secrets.VAULT_ROLE_ID }}
+          secretId: ${{ secrets.VAULT_SECRET_ID }}
+          exportEnv: true
+          secrets: |
+            devops/data/docker-repos/hsdp-edi endPoint | HSDP_DOCKER_REGISTRY ;
+            devops/data/docker-repos/hsdp-edi user | HSDP_DOCKER_USER ;
+            devops/data/docker-repos/hsdp-edi password | HSDP_DOCKER_PASSWORD ;
+            
+      - name: Set env variables
+        run: |
+          new_version=`cat VERSION`
+          echo "CI_IMAGE=${{ env.HSDP_DOCKER_REGISTRY }}/edi/edi-foundation-oauth2-proxy:${new_version}-alpha" >> "$GITHUB_ENV"
+          echo "CI_LATEST_IMAGE=${{ env.HSDP_DOCKER_REGISTRY }}/edi/edi-foundation-oauth2-proxy:latest" >> "$GITHUB_ENV"
+          echo "RC_IMAGE=${{ env.HSDP_DOCKER_REGISTRY }}/edi/edi-foundation-oauth2-proxy:${new_version}-rc" >> "$GITHUB_ENV"
+        
+      - name: Login to Docker Repo
+        run: docker login ${{ env.HSDP_DOCKER_REGISTRY }} --username ${{ env.HSDP_DOCKER_USER }} --password ${{ env.HSDP_DOCKER_PASSWORD }}
+      
+      - name: Docker Push
+        run: |
+          docker pull ${{ env.CI_IMAGE }}
+          docker tag ${{ env.CI_IMAGE }} ${{ env.RC_IMAGE }}
+          docker push ${{ env.RC_IMAGE }}
\ No newline at end of file