nhs-notify-digital-letters/.github/workflows/release_created.yaml at 4ecb77b6d3dfd0f727291b74b01b93b4e93035f4 · NHSDigital/nhs-notify-digital-letters · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
name: Github Release Created

on:
  release:
    types: ["published"] # Inherits all input defaults

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: false

jobs:
  deploy-main:
    name: Deploy changes to main in nonprod AWS Account
    runs-on: ubuntu-latest

    permissions:
      id-token: write
      contents: read

    strategy:
      max-parallel: 1
      matrix:
        component: [dl]

    steps:
      - name: Checkout repository
        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Deploy Nonprod Environment
        env:
          APP_PEM_FILE: ${{ secrets.APP_PEM_FILE }}
          APP_CLIENT_ID: ${{ secrets.APP_CLIENT_ID }}
        run: |
          bash .github/scripts/dispatch_internal_repo_workflow.sh \
            --releaseVersion "${{ github.event.release.tag_name }}" \
            --targetWorkflow "dispatch-deploy-static-notify-digital-letters-env.yaml" \
            --targetEnvironment "main" \
            --targetAccountGroup "nhs-notify-digital-letters-nonprod" \
            --targetComponent "${{ matrix.component }}" \
            --terraformAction "apply"

  acceptance-stage:
    name: "Acceptance stage"
    needs: [deploy-main]
    uses: ./.github/workflows/stage-4-acceptance.yaml
    secrets:
      APP_PEM_FILE: ${{ secrets.APP_PEM_FILE }}
      APP_CLIENT_ID: ${{ secrets.APP_CLIENT_ID }}
    with:
      target_environment: "main"
      target_account_group: nhs-notify-digital-letters-nonprod
      target_release_version: ${{ github.event.release.tag_name }}