deploy-to-prod.yaml

name: Manual deploy to prod

on:
  workflow_call:
    secrets:
      NAIS_WORKLOAD_IDENTITY_PROVIDER:
        description: "Identity provider for nais/docker-build-push"
        required: true
      READER_TOKEN:
        description: "Token for reading from GitHub Package Registry"
        required: true
  workflow_dispatch:

run-name: Prod deploy of ${{ github.ref_name }}

jobs:
  deploy_to_prod:
    name: Deploy
    if: github.ref == 'refs/heads/main'
    permissions:
      contents: write
      id-token: write
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      
      - name: Get image registry
        id: image-registry
        uses: nais/login@v0
        with:
          project_id: ${{ vars.NAIS_MANAGEMENT_PROJECT_ID }}
          identity_provider: ${{ secrets.NAIS_WORKLOAD_IDENTITY_PROVIDER }}
          team: klage

      - name: Generate image name
        id: image
        shell: bash
        run: echo "image=${{ steps.image-registry.outputs.registry }}/kabal-frontend:${{ github.sha }}" >> $GITHUB_OUTPUT

      - name: Deploy to prod
        uses: nais/deploy/actions/deploy@v2
        env:
          CLUSTER: prod-gcp
          VARS: nais/prod.yaml
          RESOURCE: nais/nais.yaml
          VAR: image=${{ steps.image.outputs.image }}
        timeout-minutes: 3

      - name: Generate release version
        id: release
        run: |
          COMMIT=$(git rev-parse --short=7 HEAD)
          VERSION=$(TZ="Europe/Oslo" git show -s --format=%cd --date='format-local:%Y-%m-%dT%H.%M.%S')
          RELEASE=$VERSION-$COMMIT
          echo "release=${RELEASE}" >> $GITHUB_OUTPUT

      - uses: ncipollo/release-action@v1
        with:
          tag: ${{ steps.release.outputs.release }}