helm-charts/.github/workflows/api_deploy.yml at main · Cosmo-Tech/helm-charts · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
# SPDX-FileCopyrightText: Copyright (C) 2022-2026 Cosmo Tech
# SPDX-License-Identifier: MIT
name: API / Chart deploy

on:
  workflow_dispatch:
  push:
    branches:
      - main
    paths:
      - charts/cosmotech-api/**
      - .github/workflows/api_deploy.yml

permissions:
  contents: read
  id-token: write

jobs:
  deploy:
    runs-on: ubuntu-latest
    environment: api_joy
    steps:
      - uses: actions/checkout@v7

      - uses: azure/setup-helm@v5

      - uses: azure/login@v3
        with:
          client-id: ${{ secrets.AZURE_CLIENT_ID }}
          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

      - uses: azure/use-kubelogin@v1.3
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          kubelogin-version: 'latest'

      - uses: azure/aks-set-context@v5
        with:
          cluster-name: "${{ vars.CLUSTER_NAME }}"
          resource-group: "${{ vars.CLUSTER_RESOURCE_GROUP }}"
          use-kubelogin: true

      - name: Remove default api helm release if present
        run: >
          helm uninstall
          --namespace ${{ vars.CLUSTER_NAMESPACE }}
          --ignore-not-found
          cosmotech-api-tenant-api-ci

      - name: Helm package
        run: >
          helm package
          --destination ${{ runner.temp }}/package
          charts/cosmotech-api/

      - name: Write helm values
        run: |
          echo '${{ vars.HELM_VALUES }}' > values.yaml
          cat values.yaml

      - name: Helm upgrade/install
        run: >
          helm upgrade
          --install
          --wait
          --namespace ${{ vars.CLUSTER_NAMESPACE }}
          --reset-values
          --values values.yaml
          --set argo.imageCredentials.password=${{ secrets.HARBOR_CREDENTIALS_PASSWORD }}
          --set config.csm.platform.containerRegistry.password=${{ secrets.HARBOR_CREDENTIALS_PASSWORD }}
          --set config.csm.platform.identityProvider.identity.clientSecret=${{ secrets.KEYCLOAK_CLIENT_SECRET }}
          --set config.csm.platform.s3.secretAccessKey=${{ secrets.S3_PASSWORD }}
          --set config.csm.platform.databases.resources.password=${{ secrets.REDIS_PASSWORD }}
          --set config.csm.platform.databases.data.reader.password=${{ secrets.POSTGRES_READER_PASSWORD }}
          --set config.csm.platform.databases.data.writer.password=${{ secrets.POSTGRES_WRITER_PASSWORD }}
          cosmotech-api-ci
          ${{ runner.temp }}/package/cosmotech-api-*.tgz

      - name: Helm test
        run: >
          helm test
          --namespace ${{ vars.CLUSTER_NAMESPACE }}
          cosmotech-api-ci