Rollout of 32.31.4 to all #354
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Rollout to the instances | |
| run-name: Rollout of ${{ inputs.config_tag_name }} to ${{ inputs.instance_group }} | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| config_tag_name: | |
| description: 'Tag from the dof_app_deploy' | |
| required: true | |
| instance_group: | |
| description: "All Instances, Instance group or Host" | |
| required: true | |
| default: all | |
| jobs: | |
| approve_ref: | |
| environment: approve_ref | |
| runs-on: ubuntu-latest | |
| steps: | |
| - run: echo "Version ${{ github.event.inputs.config_tag_name }}" | |
| - run: echo "Target(s) ${{ github.event.inputs.instance_group }}" | |
| - run: echo "Workflow is triggered by ${{ github.ref_type }} ${{ github.ref_name }}" | |
| ref-audit: | |
| if: ${{ !failure() }} | |
| needs: | |
| - approve_prod_stage_2 | |
| uses: ./.github/workflows/host.yml | |
| with: | |
| cfg_version: ${{ github.event.inputs.config_tag_name }} | |
| host_name: ref-audit | |
| host_group: dbc | |
| host_stage: reference | |
| execute_group: ${{ github.event.inputs.instance_group }} | |
| secrets: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }} | |
| KUBECONFIG: ${{ secrets.KUBECONFIG }} | |
| RC_WEBHOOK: ${{ secrets.RC_WEBHOOK }} | |
| ref-brb: | |
| needs: | |
| - approve_ref | |
| uses: ./.github/workflows/host.yml | |
| with: | |
| cfg_version: ${{ github.event.inputs.config_tag_name }} | |
| host_name: ref-brb | |
| host_group: brb | |
| host_stage: reference | |
| execute_group: ${{ github.event.inputs.instance_group }} | |
| secrets: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }} | |
| KUBECONFIG: ${{ secrets.KUBECONFIG }} | |
| RC_WEBHOOK: ${{ secrets.RC_WEBHOOK }} | |
| ref-dbc: | |
| needs: | |
| - approve_ref | |
| uses: ./.github/workflows/host.yml | |
| with: | |
| cfg_version: ${{ github.event.inputs.config_tag_name }} | |
| host_name: ref-dbc | |
| host_group: dbc | |
| host_stage: reference | |
| execute_group: ${{ github.event.inputs.instance_group }} | |
| secrets: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }} | |
| KUBECONFIG: ${{ secrets.KUBECONFIG }} | |
| RC_WEBHOOK: ${{ secrets.RC_WEBHOOK }} | |
| ref-nbc: | |
| needs: | |
| - approve_ref | |
| uses: ./.github/workflows/host.yml | |
| with: | |
| cfg_version: ${{ github.event.inputs.config_tag_name }} | |
| host_name: ref-nbc | |
| host_group: nbc | |
| host_stage: reference | |
| execute_group: ${{ github.event.inputs.instance_group }} | |
| secrets: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }} | |
| KUBECONFIG: ${{ secrets.KUBECONFIG }} | |
| RC_WEBHOOK: ${{ secrets.RC_WEBHOOK }} | |
| ref-thr: | |
| needs: | |
| - approve_ref | |
| uses: ./.github/workflows/host.yml | |
| with: | |
| cfg_version: ${{ github.event.inputs.config_tag_name }} | |
| host_name: ref-thr | |
| host_group: thr | |
| host_stage: reference | |
| execute_group: ${{ github.event.inputs.instance_group }} | |
| secrets: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }} | |
| KUBECONFIG: ${{ secrets.KUBECONFIG }} | |
| RC_WEBHOOK: ${{ secrets.RC_WEBHOOK }} | |
| approve_prod_stage_1: | |
| if: ${{ !failure() }} | |
| needs: | |
| - ref-brb | |
| - ref-dbc | |
| - ref-nbc | |
| - ref-thr | |
| environment: approve_prod_stage_1 | |
| runs-on: ubuntu-latest | |
| steps: | |
| - run: echo "Version ${{ github.event.inputs.config_tag_name }}" | |
| - run: echo "Target(s) ${{ github.event.inputs.instance_group }}" | |
| - run: echo "Workflow is triggerd by ${{ github.ref_type }} ${{ github.ref_name }}" | |
| prod-dbc: | |
| if: ${{ !failure() }} | |
| needs: | |
| - approve_prod_stage_1 | |
| uses: ./.github/workflows/host.yml | |
| with: | |
| cfg_version: ${{ github.event.inputs.config_tag_name }} | |
| host_name: prod-dbc | |
| host_group: dbc | |
| host_stage: production | |
| execute_group: ${{ github.event.inputs.instance_group }} | |
| secrets: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }} | |
| KUBECONFIG: ${{ secrets.KUBECONFIG }} | |
| RC_WEBHOOK: ${{ secrets.RC_WEBHOOK }} | |
| approve_prod_stage_2: | |
| if: ${{ !failure() }} | |
| needs: | |
| - prod-dbc | |
| environment: approve_prod_stage_2 | |
| runs-on: ubuntu-latest | |
| steps: | |
| - run: echo "Version ${{ github.event.inputs.config_tag_name }}" | |
| - run: echo "Target(s) ${{ github.event.inputs.instance_group }}" | |
| - run: echo "Workflow is triggerd by ${{ github.ref_type }} ${{ github.ref_name }}" | |
| prod-brb: | |
| if: ${{ !failure() }} | |
| needs: | |
| - approve_prod_stage_2 | |
| uses: ./.github/workflows/host.yml | |
| with: | |
| cfg_version: ${{ github.event.inputs.config_tag_name }} | |
| host_name: prod-brb | |
| host_group: brb | |
| host_stage: production | |
| execute_group: ${{ github.event.inputs.instance_group }} | |
| secrets: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }} | |
| KUBECONFIG: ${{ secrets.KUBECONFIG }} | |
| RC_WEBHOOK: ${{ secrets.RC_WEBHOOK }} | |
| prod-nbc: | |
| if: ${{ !failure() }} | |
| needs: | |
| - approve_prod_stage_2 | |
| uses: ./.github/workflows/host.yml | |
| with: | |
| cfg_version: ${{ github.event.inputs.config_tag_name }} | |
| host_name: prod-nbc | |
| host_group: nbc | |
| host_stage: production | |
| execute_group: ${{ github.event.inputs.instance_group }} | |
| secrets: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }} | |
| KUBECONFIG: ${{ secrets.KUBECONFIG }} | |
| RC_WEBHOOK: ${{ secrets.RC_WEBHOOK }} | |
| prod-thr: | |
| if: ${{ !failure() }} | |
| needs: | |
| - approve_prod_stage_2 | |
| uses: ./.github/workflows/host.yml | |
| with: | |
| cfg_version: ${{ github.event.inputs.config_tag_name }} | |
| host_name: prod-thr | |
| host_group: thr | |
| host_stage: production | |
| execute_group: ${{ github.event.inputs.instance_group }} | |
| secrets: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }} | |
| KUBECONFIG: ${{ secrets.KUBECONFIG }} | |
| RC_WEBHOOK: ${{ secrets.RC_WEBHOOK }} | |
| # disable rollout to loadtest instance until it is restructered and fixed in OPS-5141 | |
| # dev-loadtest-01: | |
| # uses: ./.github/workflows/host.yml | |
| # with: | |
| # cfg_version: ${{ github.event.inputs.config_tag_name }} | |
| # host_name: dev-loadtest-01 | |
| # host_group: dbc | |
| # host_stage: loadtest | |
| # execute_group: ${{ github.event.inputs.instance_group }} | |
| # secrets: | |
| # token: ${{ secrets.GITHUB_TOKEN }} | |
| # ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }} | |
| # KUBECONFIG: ${{ secrets.KUBECONFIG }} | |
| # RC_WEBHOOK: ${{ secrets.RC_WEBHOOK }} | |
| infra-dbildungscloud-01: | |
| needs: | |
| - approve_ref | |
| uses: ./.github/workflows/host.yml | |
| with: | |
| cfg_version: ${{ github.event.inputs.config_tag_name }} | |
| host_name: infra.dbildungscloud-01 | |
| host_group: dbc | |
| host_stage: infra | |
| execute_group: ${{ github.event.inputs.instance_group }} | |
| secrets: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }} | |
| KUBECONFIG: ${{ secrets.KUBECONFIG }} | |
| RC_WEBHOOK: ${{ secrets.RC_WEBHOOK }} | |