Skip to content

Merge pull request #6548 from balajialg/a11y_setup #280

Merge pull request #6548 from balajialg/a11y_setup

Merge pull request #6548 from balajialg/a11y_setup #280

name: Deploy support helm chart
# use echo ${VAR##*: } to get the value of a variable that is a string with a colon in it
on:
workflow_dispatch:
push:
branches:
- staging
jobs:
deploy:
runs-on: ubuntu-latest
steps:
- name: Get PR labels
id: pr-labels
uses: irby/get-labels-on-push@v1.0.1
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
- name: Check out the image repo
uses: actions/checkout@v4
with:
fetch-depth: 0 # OR "2" -> To retrieve the preceding commit.
- name: Check if the support helm chart needs to be deployed
run: |
echo "PR labels: ${{ steps.pr-labels.outputs.labels }}"
for label in $(echo -e "${{ steps.pr-labels.outputs.labels }}"); do
if [[ "$label" == support-deployment ]]; then
echo "Deploying support charts!"
echo "DEPLOY=1" >> $GITHUB_ENV
fi
done
- name: Auth to gcloud
if: ${{ env.DEPLOY }}
uses: google-github-actions/auth@v2
with:
credentials_json: ${{ secrets.GKE_KEY }}
project_id: ${{ secrets.GCP_PROJECT_ID }}
- name: Install Google Cloud SDK
if: ${{ env.DEPLOY }}
uses: google-github-actions/setup-gcloud@v2
with:
install_components: 'gke-gcloud-auth-plugin'
- name: Install SOPS
if: ${{ env.DEPLOY }}
run: |
mkdir -p ${HOME}/bin
curl -sSL https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64 -o ${HOME}/bin/sops
chmod 755 ${HOME}/bin/sops
echo "${HOME}/bin" >> $GITHUB_PATH
- name: Store SOPS secret in a file
if: ${{ env.DEPLOY }}
run: |
cat << EOF > ${HOME}/sops.key
${{ secrets.SOPS_KEY }}
EOF
echo "GOOGLE_APPLICATION_CREDENTIALS=${HOME}/sops.key" >> $GITHUB_ENV
- name: Install Helm
if: ${{ env.DEPLOY }}
run: |
curl -L https://get.helm.sh/helm-v3.13.3-linux-amd64.tar.gz | tar -xzf -
mv linux-amd64/helm /usr/local/bin
helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
helm repo update
- name: Activate credentials for cluster
if: ${{ env.DEPLOY }}
run: |
sops -d -i deployments/datahub/secrets/gke-key.json
gcloud auth \
activate-service-account \
--key-file deployments/datahub/secrets/gke-key.json
gcloud container clusters \
--region=us-central1 --project=ucb-datahub-2018 \
get-credentials spring-2024
- name: Deploy support helm chart
if: ${{ env.DEPLOY }}
run: |
sops -d -i support/secrets.yaml
helm dep up support
helm upgrade \
--install --wait \
--namespace=support \
support support/ \
-f support/secrets.yaml \
--set installCRDs=true