Skip to content

DO NOT MERGE Rollback ECS canary deployment #128

DO NOT MERGE Rollback ECS canary deployment

DO NOT MERGE Rollback ECS canary deployment #128

name: Deploy frontend (with SAM Deploy Pipeline)
on:
push:
branches:
- AUT-3494-reset
workflow_dispatch:
jobs:
deploy:
runs-on: ubuntu-latest
timeout-minutes: 60
permissions:
id-token: write
contents: read
steps:
- name: Checkout
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- name: Build and push basic-auth-sidecar image
uses: govuk-one-login/devplatform-upload-action-ecr@5431bcea6158b6c12776a96e067b1e02bf91b13d # v1.3.0
with:
role-to-assume-arn: ${{ secrets.GH_ACTIONS_ROLE_ARN }}
container-sign-kms-key-arn: ${{ secrets.CONTAINER_SIGN_KMS_KEY_ARN }}
build-and-push-image-only: true
working-directory: basic-auth-sidecar
artifact-bucket-name: ${{ secrets.ARTIFACT_SOURCE_BUCKET_NAME }}
ecr-repo-name: ${{ secrets.BASIC_AUTH_SIDECAR_ECR_REPOSITORY }}
checkout-repo: false
- name: Build and push service down page image
uses: govuk-one-login/devplatform-upload-action-ecr@5431bcea6158b6c12776a96e067b1e02bf91b13d # v1.3.0
with:
role-to-assume-arn: ${{ secrets.GH_ACTIONS_ROLE_ARN }}
container-sign-kms-key-arn: ${{ secrets.CONTAINER_SIGN_KMS_KEY_ARN }}
build-and-push-image-only: true
working-directory: service-down-page-config
artifact-bucket-name: ${{ secrets.ARTIFACT_SOURCE_BUCKET_NAME }}
ecr-repo-name: ${{ secrets.SERVICE_DOWN_PAGE_ECR_REPOSITORY }}
checkout-repo: false
- name: Build, push and deploy frontend
uses: govuk-one-login/devplatform-upload-action-ecr@5431bcea6158b6c12776a96e067b1e02bf91b13d # v1.3.0
with:
role-to-assume-arn: ${{ secrets.GH_ACTIONS_ROLE_ARN }}
container-sign-kms-key-arn: ${{ secrets.CONTAINER_SIGN_KMS_KEY_ARN }}
artifact-bucket-name: ${{ secrets.ARTIFACT_SOURCE_BUCKET_NAME }}
ecr-repo-name: ${{ secrets.FRONTEND_ECR_REPOSITORY }}
checkout-repo: false
template-file: cloudformation/deploy/template.yaml
private-docker-registry: khw46367.live.dynatrace.com
private-docker-login-username: khw46367
private-docker-login-password: ${{ secrets.DYNATRACE_PAAS_TOKEN }}