fix: add heading attribute to data model sections #25
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build and Deploy to Cloud Run | |
| on: | |
| push: | |
| branches: [ "publish" ] | |
| workflow_dispatch: | |
| inputs: | |
| branch: | |
| description: 'Branch to deploy from' | |
| required: false | |
| default: 'publish' | |
| type: choice | |
| options: | |
| - publish | |
| env: | |
| PROJECT_ID: ${{ vars.GCP_PROJECT_ID }} | |
| REGION: ${{ vars.GCP_REGION }} | |
| SERVICE: ${{ vars.CLOUD_RUN_SERVICE }} | |
| REPOSITORY: ${{ vars.ARTIFACT_REPO }} | |
| IMAGE_NAME: ${{ vars.IMAGE_NAME }} | |
| ASTRO_BASE_PATH: ${{ vars.PATH }} | |
| # Auth-related variables (from repo variables and secrets) | |
| AUTH0_DOMAIN: ${{ vars.AUTH0_DOMAIN }} | |
| AUTH0_CLIENT_ID: ${{ vars.AUTH0_CLIENT_ID }} | |
| AUTH0_AUDIENCE: ${{ vars.AUTH0_AUDIENCE }} | |
| AUTH_REDIRECT_URI: ${{ vars.AUTH_REDIRECT_URI }} | |
| AUTH_POST_LOGIN_REDIRECT: ${{ vars.AUTH_POST_LOGIN_REDIRECT }} | |
| LATEST_SPEC_VERSION: ${{ vars.LATEST_SPEC_VERSION }} | |
| # Image service (diagram rendering at startup build) | |
| IMAGE_SERVICE_URL: ${{ vars.IMAGE_SERVICE_URL }} | |
| IMAGE_SERVICE_AUTH0_DOMAIN: ${{ vars.IMAGE_SERVICE_AUTH0_DOMAIN }} | |
| IMAGE_SERVICE_AUTH0_AUDIENCE: ${{ vars.IMAGE_SERVICE_AUTH0_AUDIENCE }} | |
| IMAGE_SERVICE_M2M_CLIENT_ID: ${{ vars.IMAGE_SERVICE_M2M_CLIENT_ID }} | |
| # FastComments (discussion) | |
| FASTCOMMENTS_TENANT_ID: ${{ vars.FASTCOMMENTS_TENANT_ID }} | |
| FASTCOMMENTS_ENABLED: ${{ vars.FASTCOMMENTS_ENABLED }} | |
| COMMENTS_SITE_KEY: ${{ vars.COMMENTS_SITE_KEY }} | |
| # Secrets | |
| AUTH0_CLIENT_SECRET: ${{ secrets.AUTH0_CLIENT_SECRET }} | |
| AUTH_COOKIE_SECRET: ${{ secrets.AUTH_COOKIE_SECRET }} | |
| MPS_API_KEY: ${{ secrets.MPS_API_KEY }} | |
| IMAGE_SERVICE_M2M_CLIENT_SECRET: ${{ secrets.IMAGE_SERVICE_M2M_CLIENT_SECRET }} | |
| FASTCOMMENTS_API_SECRET: ${{ secrets.FASTCOMMENTS_API_SECRET }} | |
| jobs: | |
| deploy: | |
| name: Deploy | |
| runs-on: ubuntu-latest | |
| # Only run on upstream repository, not on forks | |
| if: github.repository == '1edtech/openbadges-specification' && github.event_name != 'pull_request' | |
| permissions: | |
| contents: read | |
| id-token: write | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| ref: ${{ github.event.inputs.branch || github.ref }} | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| - name: Set up gcloud auth | |
| uses: google-github-actions/auth@v2 | |
| with: | |
| credentials_json: ${{ secrets.GOOGLE_CREDENTIALS }} | |
| - name: Configure gcloud | |
| uses: google-github-actions/setup-gcloud@v2 | |
| with: | |
| project_id: ${{ env.PROJECT_ID }} | |
| - name: Configure Artifact Registry Docker auth | |
| run: gcloud auth configure-docker ${{ env.REGION }}-docker.pkg.dev --quiet | |
| - name: Set IMAGE_URI | |
| id: vars | |
| run: echo "IMAGE_URI=${{ env.REGION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/${{ env.REPOSITORY }}/${{ env.IMAGE_NAME }}:${{ github.sha }}" >> $GITHUB_OUTPUT | |
| - name: Build and push image (linux/amd64) | |
| run: | | |
| docker buildx build \ | |
| --platform linux/amd64 \ | |
| --build-arg ASTRO_BASE_PATH=${{ env.ASTRO_BASE_PATH }} \ | |
| -t ${{ steps.vars.outputs.IMAGE_URI }} \ | |
| --push . | |
| - name: Set health probe path | |
| run: | | |
| BASE="${ASTRO_BASE_PATH:-/}" | |
| BASE="${BASE%/}" | |
| if [ -z "$BASE" ] || [ "$BASE" = "/" ]; then | |
| echo "HEALTHZ_PATH=/healthz" >> "$GITHUB_ENV" | |
| else | |
| echo "HEALTHZ_PATH=${BASE}/healthz" >> "$GITHUB_ENV" | |
| fi | |
| - name: Deploy to Cloud Run | |
| id: deploy | |
| uses: google-github-actions/deploy-cloudrun@v2 | |
| with: | |
| service: ${{ env.SERVICE }} | |
| region: ${{ env.REGION }} | |
| image: ${{ steps.vars.outputs.IMAGE_URI }} | |
| flags: | | |
| --allow-unauthenticated | |
| --ingress=internal-and-cloud-load-balancing | |
| --port=4321 | |
| --startup-probe=httpGet.path=${{ env.HEALTHZ_PATH }},httpGet.port=4321,initialDelaySeconds=10,timeoutSeconds=10,periodSeconds=120,failureThreshold=10 | |
| --memory=2Gi | |
| --timeout=60 | |
| --min-instances=1 | |
| --concurrency=10 | |
| --cpu=2 | |
| --set-env-vars ASTRO_BASE_PATH=${{ env.ASTRO_BASE_PATH }} | |
| --set-env-vars AUTH0_DOMAIN=${{ env.AUTH0_DOMAIN }} | |
| --set-env-vars AUTH0_CLIENT_ID=${{ env.AUTH0_CLIENT_ID }} | |
| --set-env-vars AUTH0_CLIENT_SECRET=${{ env.AUTH0_CLIENT_SECRET }} | |
| --set-env-vars AUTH0_AUDIENCE=${{ env.AUTH0_AUDIENCE }} | |
| --set-env-vars AUTH_COOKIE_SECRET=${{ env.AUTH_COOKIE_SECRET }} | |
| --set-env-vars AUTH_REDIRECT_URI=${{ env.AUTH_REDIRECT_URI }} | |
| --set-env-vars AUTH_POST_LOGIN_REDIRECT=${{ env.AUTH_POST_LOGIN_REDIRECT }} | |
| --set-env-vars MPS_API_KEY=${{ env.MPS_API_KEY }} | |
| --set-env-vars LATEST_SPEC_VERSION=${{ env.LATEST_SPEC_VERSION }} | |
| --set-env-vars IMAGE_SERVICE_URL=${{ env.IMAGE_SERVICE_URL }} | |
| --set-env-vars IMAGE_SERVICE_AUTH0_DOMAIN=${{ env.IMAGE_SERVICE_AUTH0_DOMAIN }} | |
| --set-env-vars IMAGE_SERVICE_AUTH0_AUDIENCE=${{ env.IMAGE_SERVICE_AUTH0_AUDIENCE }} | |
| --set-env-vars IMAGE_SERVICE_M2M_CLIENT_ID=${{ env.IMAGE_SERVICE_M2M_CLIENT_ID }} | |
| --set-env-vars IMAGE_SERVICE_M2M_CLIENT_SECRET=${{ env.IMAGE_SERVICE_M2M_CLIENT_SECRET }} | |
| --set-env-vars FASTCOMMENTS_TENANT_ID=${{ env.FASTCOMMENTS_TENANT_ID }} | |
| --set-env-vars FASTCOMMENTS_ENABLED=${{ env.FASTCOMMENTS_ENABLED }} | |
| --set-env-vars FASTCOMMENTS_API_SECRET=${{ env.FASTCOMMENTS_API_SECRET }} | |
| --set-env-vars COMMENTS_SITE_KEY=${{ env.COMMENTS_SITE_KEY }} | |
| - name: Output URL | |
| run: echo "Deployed to ${{ steps.deploy.outputs.url }}" |