Skip to content

Update geo_location_api keyvault references in prd.tfvars #9

Update geo_location_api keyvault references in prd.tfvars

Update geo_location_api keyvault references in prd.tfvars #9

name: Release to Production
on:
workflow_dispatch:
push:
branches:
- main
schedule:
- cron: "0 3 * * 4" # Weekly Thursday at 3am UTC
permissions:
contents: read
id-token: write # Required for OIDC with Azure
concurrency:
group: ${{ github.workflow }}
jobs:
dotnet-web-ci:
runs-on: ubuntu-latest
steps:
- uses: frasermolyneux/actions/dotnet-web-ci@main
with:
dotnet-project: "XtremeIdiots.Portal.Web"
dotnet-version: 9.0.x
src-folder: "src"
terraform-plan-and-apply-dev:
environment: Development
runs-on: ubuntu-latest
needs: [dotnet-web-ci]
concurrency:
group: ${{ github.repository }}-dev
steps:
- uses: frasermolyneux/actions/terraform-plan-and-apply@main
with:
terraform-folder: "terraform"
terraform-var-file: "tfvars/dev.tfvars"
terraform-backend-file: "backends/dev.backend.hcl"
AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}
- id: terraform-output-dev
shell: bash
run: |
cd terraform
echo "web_app_name=$(terraform output -raw web_app_name)" >> $GITHUB_OUTPUT
echo "web_app_resource_group=$(terraform output -raw web_app_resource_group)" >> $GITHUB_OUTPUT
env:
ARM_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
ARM_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}
ARM_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
ARM_USE_AZUREAD: true
ARM_USE_OIDC: true
outputs:
web_app_name: ${{ steps.terraform-output-dev.outputs.web_app_name }}
web_app_resource_group: ${{ steps.terraform-output-dev.outputs.web_app_resource_group }}
app-service-deploy-dev:
environment: Development
runs-on: ubuntu-latest
needs: [dotnet-web-ci, terraform-plan-and-apply-dev]
concurrency:
group: ${{ github.repository }}-dev
steps:
- uses: frasermolyneux/actions/deploy-app-service@main
with:
web-artifact-name: "XtremeIdiots.Portal.Web"
web-app-name: ${{ needs.terraform-plan-and-apply-dev.outputs.web_app_name }}
resource-group-name: ${{ needs.terraform-plan-and-apply-dev.outputs.web_app_resource_group }}
AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}
terraform-plan-and-apply-prd:
environment: Production
runs-on: ubuntu-latest
needs: [app-service-deploy-dev]
concurrency:
group: ${{ github.repository }}-prd
steps:
- uses: frasermolyneux/actions/terraform-plan-and-apply@main
with:
terraform-folder: "terraform"
terraform-var-file: "tfvars/prd.tfvars"
terraform-backend-file: "backends/prd.backend.hcl"
AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}
- id: terraform-output-prd
shell: bash
run: |
cd terraform
echo "web_app_name=$(terraform output -raw web_app_name)" >> $GITHUB_OUTPUT
echo "web_app_resource_group=$(terraform output -raw web_app_resource_group)" >> $GITHUB_OUTPUT
env:
ARM_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
ARM_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}
ARM_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
ARM_USE_AZUREAD: true
ARM_USE_OIDC: true
outputs:
web_app_name: ${{ steps.terraform-output-prd.outputs.web_app_name }}
web_app_resource_group: ${{ steps.terraform-output-prd.outputs.web_app_resource_group }}
app-service-deploy-prd:
environment: Production
runs-on: ubuntu-latest
needs: [dotnet-web-ci, terraform-plan-and-apply-prd]
concurrency:
group: ${{ github.repository }}-prd
steps:
- uses: frasermolyneux/actions/deploy-app-service@main
with:
web-artifact-name: "XtremeIdiots.Portal.Web"
web-app-name: ${{ needs.terraform-plan-and-apply-prd.outputs.web_app_name }}
resource-group-name: ${{ needs.terraform-plan-and-apply-prd.outputs.web_app_resource_group }}
AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}