3232 - name : Build the docker image
3333 run : make build_prod
3434
35+ - name : Inject Secrets
36+ env :
37+ SCOPES : ${{ secrets.SCOPES }}
38+ CLIENT_ID : ${{ secrets.CLIENT_ID}}
39+ CLIENT_URL : ${{ secrets.CLIENT_URL }}
40+ AUTHORITY : ${{ secrets.AUTHORITY }}
41+ STACK_EXCHANGE_ID : ${{ secrets.STACK_EXCHANGE_ID }}
42+ STACK_EXCHANGE_ACCESS_TOKEN : ${{ secrets.STACK_EXCHANGE_ACCESS_TOKEN }}
43+ AZURE_APP_CONFIGURATION_CONNECTION_STRING : ${{ secrets.AZURE_APP_CONFIGURATION_CONNECTION_STRING }}
44+ run : |
45+ chmod +x ./scripts/populate-keys.sh
46+ sh ./scripts/populate-keys.sh
47+
3548 - name : Publish docker image to stage azure container registry
3649 run : |
3750 make login publish acr=timetrackerservicestageregistry image_tag=$RELEASE_VERSION
@@ -46,22 +59,10 @@ jobs:
4659 with :
4760 ssh-private-key : ${{ secrets.INFRA_TERRAFORM_MODULES_SSH_PRIV_KEY }}
4861
49- - name : append secret to secret.auto.tfvars
50- working-directory : ./${{ env.WORKING_DIR }}
51- run : |
52- ./append_secret.py CHROME_BIN /opt/google/chrome/google-chrome
53- ./append_secret.py AUTHORITY "${{ secrets.AUTHORITY }}"
54- ./append_secret.py CLIENT_ID "${{ secrets.CLIENT_ID }}"
55- ./append_secret.py SCOPES "${{ secrets.SCOPES }}"
56- ./append_secret.py STACK_EXCHANGE_ID "${{ secrets.STACK_EXCHANGE_ID }}"
57- ./append_secret.py STACK_EXCHANGE_ACCESS_TOKEN "${{ secrets.STACK_EXCHANGE_ACCESS_TOKEN }}"
58- ./append_secret.py AZURE_APP_CONFIGURATION_CONNECTION_STRING "${{ secrets.AZURE_APP_CONFIGURATION_CONNECTION_STRING }}"
59-
60-
6162 - name : Terraform Init
6263 working-directory : ${{ env.WORKING_DIR }}
6364 run : terraform init
6465
6566 - name : Terraform Apply
6667 working-directory : ${{ env.WORKING_DIR }}
67- run : terraform apply -lock=false -var-file="${{ env.TF_WORKSPACE }}.tfvars" -var "image_tag=$RELEASE_VERSION" -auto-approve
68+ run : terraform apply -lock=false -var-file="${{ env.TF_WORKSPACE }}.tfvars" -var "image_tag=$RELEASE_VERSION" -auto-approve
0 commit comments