-
Notifications
You must be signed in to change notification settings - Fork 0
82 lines (64 loc) · 2.11 KB
/
deploy-demo.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
name: Deploy to demo
on:
workflow_dispatch:
push:
branches:
- *
permissions:
contents: read
id-token: 'write'
packages: read
jobs:
deploy:
name: Deploy to demo
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Get version
id: version
run: echo VERSION=$(git describe --exact-match --tags | sed 's/^v//') >> $GITHUB_OUTPUT
- name: Build container
run: make
# uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
# with:
# registry: ghcr.io
# username: ${{ github.actor }}
# password: ${{ secrets.GITHUB_TOKEN }}
# - name: Build container
# uses: docker/build-push-action@v3
# with:
# context: .
# push: false
# tags: ${{ steps.meta.outputs.tags }}
# labels: ${{ steps.meta.outputs.labels }}
# file: Containerfile
# build-args: |
# KIND=demo
# - id: auth
# name: Authenticate with Google Cloud
# uses: google-github-actions/auth@v0
# with:
# token_format: access_token
# workload_identity_provider: projects/514167726704/locations/global/workloadIdentityPools/deploy/providers/deploy
# service_account: [email protected]
# access_token_lifetime: 900s
# create_credentials_file: true
# - name: Login to Artifact Registry
# uses: docker/login-action@v1
# with:
# registry: us-central1-docker.pkg.dev
# username: oauth2accesstoken
# password: ${{ steps.auth.outputs.access_token }}
# - name: Install Pulumi
# run: cd pulumi && npm install
# - name: Applying infrastructure 🚀🙏
# uses: pulumi/actions@v3
# with:
# command: up
# stack-name: demo
# work-dir: pulumi
# cloud-url: gs://kalntera-deploy/cybersec-ai/demo
# env:
# PULUMI_CONFIG_PASSPHRASE: ""
# IMAGE_VERSION: ${{ steps.version.outputs.VERSION }}