[_] fix: added future iat to new tokens issued on password change #630
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Deploy PR Preview | |
on: | |
pull_request: | |
types: [opened, reopened, synchronize, ready_for_review] | |
jobs: | |
build: | |
runs-on: ubuntu-latest | |
steps: | |
- name: Check Out Repo | |
uses: actions/checkout@v2 | |
with: | |
registry-url: 'https://npm.pkg.github.com' | |
- run: echo "registry=https://registry.yarnpkg.com/" > .npmrc | |
- run: echo "@internxt:registry=https://npm.pkg.github.com" >> .npmrc | |
# You cannot read packages from other private repos with GITHUB_TOKEN | |
# You have to use a PAT instead https://github.com/actions/setup-node/issues/49 | |
- run: echo //npm.pkg.github.com/:_authToken=${{ secrets.PERSONAL_ACCESS_TOKEN }} >> .npmrc | |
- run: echo "always-auth=true" >> .npmrc | |
- name: Login to DockerHub | |
uses: docker/login-action@v1 | |
with: | |
username: ${{ secrets.DOCKERHUB_USERNAME }} | |
password: ${{ secrets.DOCKERHUB_TOKEN }} | |
- name: Set up Docker Buildx | |
uses: docker/setup-buildx-action@v1 | |
- name: Build and push to ${{ github.event.repository.name}}-dev | |
uses: docker/build-push-action@v2 | |
with: | |
context: ./ | |
file: ./infrastructure/preview.Dockerfile | |
push: true | |
tags: ${{ secrets.DOCKERHUB_USERNAME }}/${{ github.event.repository.name }}-dev:preview-${{ github.event.number }}-${{ github.event.pull_request.head.sha }} | |
add_ready_for_preview_label: | |
if: github.event.pull_request.draft == false | |
runs-on: ubuntu-latest | |
needs: build | |
steps: | |
- uses: actions-ecosystem/action-add-labels@v1 | |
with: | |
labels: | | |
ready-for-preview | |
dispatch_update_deployment: | |
needs: add_ready_for_preview_label | |
runs-on: ubuntu-latest | |
if: ${{ contains(github.event.pull_request.labels.*.name, 'deployed') }} | |
steps: | |
- name: Dispatch Update Preview Repository Command | |
uses: myrotvorets/trigger-repository-dispatch-action@1.0.0 | |
with: | |
token: ${{ secrets.PAT }} | |
repo: internxt/environments | |
type: update-preview-command | |
payload: | | |
{ | |
"github": { | |
"payload": { | |
"repository": { | |
"name": "${{ github.event.repository.name }}", | |
"full_name": "${{ github.event.repository.full_name }}" | |
}, | |
"issue": { | |
"number": ${{ github.event.number }}, | |
"labels": ${{ toJSON(github.event.pull_request.labels) }} | |
} | |
} | |
}, | |
"slash_command": { | |
"args": { | |
"named": { | |
"deployment": "${{ github.event.repository.name }}", | |
"tag": "preview-${{ github.event.number }}-${{ github.event.pull_request.head.sha }}", | |
"imageSuffix": "-dev" | |
} | |
} | |
} | |
} | |
dispatch_check_deployment: | |
needs: add_ready_for_preview_label | |
runs-on: ubuntu-latest | |
if: ${{ contains(github.event.pull_request.labels.*.name, 'preview') }} | |
steps: | |
- name: Dispatch Check Preview Repository Command | |
uses: myrotvorets/trigger-repository-dispatch-action@1.0.0 | |
with: | |
token: ${{ secrets.PAT }} | |
repo: internxt/environments | |
type: check-preview-command | |
payload: | | |
{ | |
"github": { | |
"payload": { | |
"repository": { | |
"name": "${{ github.event.repository.name }}", | |
"full_name": "${{ github.event.repository.full_name }}", | |
"html_url": "${{ github.event.repository.html_url }}" | |
}, | |
"issue": { | |
"number": ${{ github.event.number }}, | |
"labels": ${{ toJSON(github.event.pull_request.labels) }}, | |
"pull_request": { | |
"html_url": "${{ github.event.pull_request.html_url }}" | |
} | |
} | |
} | |
}, | |
"slash_command": { | |
"args": { | |
"named": { | |
"notify": "true" | |
} | |
} | |
} | |
} |