Merge pull request #70 from trustgraph-ai/dev #31
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy to prod | |
| on: | |
| workflow_dispatch: | |
| push: | |
| # Deploys on version tag beginning v. Note there's a branch filter | |
| # below, locks to the prod branch | |
| branches: | |
| prod | |
| permissions: | |
| contents: read | |
| id-token: 'write' | |
| packages: read | |
| jobs: | |
| deploy: | |
| name: Deploy to prod | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| - name: Get version | |
| id: version | |
| run: echo VERSION=sha-$(git rev-parse --short HEAD) >> $GITHUB_OUTPUT | |
| - name: Install deps | |
| run: npm install | |
| # Python package version MUST be a semantic version, but also doesn't | |
| # matter, so just setting to 0.0.0. | |
| # The container version MUST change on every push to get Cloud Run | |
| # to re-deploy, so is based on git hash. | |
| - name: Build container | |
| run: make PACKAGE_VERSION=0.0.0 VERSION=${{ steps.version.outputs.VERSION }} | |
| - id: auth | |
| name: Authenticate with Google Cloud | |
| uses: google-github-actions/auth@v2 | |
| with: | |
| token_format: access_token | |
| workload_identity_provider: projects/583813057664/locations/global/workloadIdentityPools/deploy/providers/github | |
| service_account: deploy@trustgraph-demo.iam.gserviceaccount.com | |
| access_token_lifetime: 900s | |
| create_credentials_file: true | |
| - name: Login to Artifact Registry | |
| uses: redhat-actions/podman-login@v1 | |
| with: | |
| registry: us-central1-docker.pkg.dev | |
| username: oauth2accesstoken | |
| password: ${{ steps.auth.outputs.access_token }} | |
| - name: Install Pulumi | |
| run: cd pulumi && npm install | |
| - name: Applying infrastructure 🚀🙏 | |
| uses: pulumi/actions@v3 | |
| with: | |
| command: up | |
| stack-name: prod | |
| work-dir: pulumi | |
| cloud-url: gs://trustgraph-deploy/config-ui | |
| env: | |
| PULUMI_CONFIG_PASSPHRASE: "" | |
| IMAGE_VERSION: ${{ steps.version.outputs.VERSION }} | |