Docs: Update READE.md #47
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Build and deploy to Azure Kubernetes Service | |
on: | |
push: | |
branches: ["master"] | |
workflow_dispatch: | |
env: | |
AZURE_CONTAINER_REGISTRY: fplfriendreg | |
CONTAINER_NAME: fplfriend-api | |
RESOURCE_GROUP: fplfriendrg | |
CLUSTER_NAME: fplfriendcl | |
DEPLOYMENT_MANIFEST_PATH: | | |
./manifests/fplfriend-api.yml | |
jobs: | |
buildImage: | |
permissions: | |
contents: read | |
id-token: write | |
runs-on: ubuntu-latest | |
steps: | |
# Checks out the repository this file is in | |
- uses: actions/checkout@v3 | |
# Logs in with your Azure credentials | |
- name: Azure login | |
uses: azure/[email protected] | |
with: | |
client-id: ${{ secrets.AZURE_CLIENT_ID }} | |
tenant-id: ${{ secrets.AZURE_TENANT_ID }} | |
subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }} | |
# Builds and pushes an image up to your Azure Container Registry | |
- name: Build and push image to ACR | |
run: | | |
az acr build --image ${{ env.AZURE_CONTAINER_REGISTRY }}.azurecr.io/${{ env.CONTAINER_NAME }}:${{ github.sha }} --registry ${{ env.AZURE_CONTAINER_REGISTRY }} -g ${{ env.RESOURCE_GROUP }} . | |
deploy: | |
permissions: | |
actions: read | |
contents: read | |
id-token: write | |
runs-on: ubuntu-latest | |
needs: [buildImage] | |
steps: | |
# Checks out the repository this file is in | |
- uses: actions/checkout@v3 | |
# Logs in with your Azure credentials | |
- name: Azure login | |
uses: azure/[email protected] | |
with: | |
client-id: ${{ secrets.AZURE_CLIENT_ID }} | |
tenant-id: ${{ secrets.AZURE_TENANT_ID }} | |
subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }} | |
# Retrieves your Azure Kubernetes Service cluster's kubeconfig file | |
- name: Get K8s context | |
uses: azure/aks-set-context@v3 | |
with: | |
resource-group: ${{ env.RESOURCE_GROUP }} | |
cluster-name: ${{ env.CLUSTER_NAME }} | |
# Create namespace if it doesn't exist already | |
- name: Create namespace | |
run: | | |
kubectl create namespace fplfriendns || true | |
# Creates a secret for your Azure Container Registry | |
- uses: azure/k8s-create-secret@v1 | |
with: | |
namespace: fplfriendns | |
container-registry-url: ${{ env.AZURE_CONTAINER_REGISTRY }}.azurecr.io | |
container-registry-username: ${{ secrets.acr_fplfriend_username }} | |
container-registry-password: ${{ secrets.acr_fplfriend_password }} | |
secret-name: fplfriendauth | |
# Deploys application based on given manifest file | |
- name: Deploys application | |
uses: Azure/k8s-deploy@v4 | |
with: | |
action: deploy | |
namespace: fplfriendns | |
manifests: ${{ env.DEPLOYMENT_MANIFEST_PATH }} | |
images: | | |
${{ env.AZURE_CONTAINER_REGISTRY }}.azurecr.io/${{ env.CONTAINER_NAME }}:${{ github.sha }} | |
image-pull-secrets: | | |
fplfriendauth |