32
32
- name : Build the docker image
33
33
run : make build_prod
34
34
35
+ - name : Inject Secrets
36
+ env :
37
+ SCOPES : ${{ secrets.SCOPES }}
38
+ CLIENT_ID : ${{ secrets.CLIENT_ID}}
39
+ CLIENT_URL : ${{ secrets.CLIENT_URL }}
40
+ AUTHORITY : ${{ secrets.AUTHORITY }}
41
+ STACK_EXCHANGE_ID : ${{ secrets.STACK_EXCHANGE_ID }}
42
+ STACK_EXCHANGE_ACCESS_TOKEN : ${{ secrets.STACK_EXCHANGE_ACCESS_TOKEN }}
43
+ AZURE_APP_CONFIGURATION_CONNECTION_STRING : ${{ secrets.AZURE_APP_CONFIGURATION_CONNECTION_STRING }}
44
+ run : |
45
+ chmod +x ./scripts/populate-keys.sh
46
+ sh ./scripts/populate-keys.sh
47
+
35
48
- name : Publish docker image to stage azure container registry
36
49
run : |
37
50
make login publish acr=timetrackerservicestageregistry image_tag=$RELEASE_VERSION
@@ -46,22 +59,10 @@ jobs:
46
59
with :
47
60
ssh-private-key : ${{ secrets.INFRA_TERRAFORM_MODULES_SSH_PRIV_KEY }}
48
61
49
- - name : append secret to secret.auto.tfvars
50
- working-directory : ./${{ env.WORKING_DIR }}
51
- run : |
52
- ./append_secret.py CHROME_BIN /opt/google/chrome/google-chrome
53
- ./append_secret.py AUTHORITY "${{ secrets.AUTHORITY }}"
54
- ./append_secret.py CLIENT_ID "${{ secrets.CLIENT_ID }}"
55
- ./append_secret.py SCOPES "${{ secrets.SCOPES }}"
56
- ./append_secret.py STACK_EXCHANGE_ID "${{ secrets.STACK_EXCHANGE_ID }}"
57
- ./append_secret.py STACK_EXCHANGE_ACCESS_TOKEN "${{ secrets.STACK_EXCHANGE_ACCESS_TOKEN }}"
58
- ./append_secret.py AZURE_APP_CONFIGURATION_CONNECTION_STRING "${{ secrets.AZURE_APP_CONFIGURATION_CONNECTION_STRING }}"
59
-
60
-
61
62
- name : Terraform Init
62
63
working-directory : ${{ env.WORKING_DIR }}
63
64
run : terraform init
64
65
65
66
- name : Terraform Apply
66
67
working-directory : ${{ env.WORKING_DIR }}
67
- run : terraform apply -lock=false -var-file="${{ env.TF_WORKSPACE }}.tfvars" -var "image_tag=$RELEASE_VERSION" -auto-approve
68
+ run : terraform apply -lock=false -var-file="${{ env.TF_WORKSPACE }}.tfvars" -var "image_tag=$RELEASE_VERSION" -auto-approve
0 commit comments