Add isolated UAT and production environments

2026-07-20 20:32:22 -05:00
parent 4e0ca70157
commit 17747d96a0
30 changed files with 780 additions and 282 deletions
@@ -0,0 +1,41 @@
+name: Deploy STEP3 PRD
+
+on:
+  push:
+    branches:
+      - production
+  workflow_dispatch: {}
+
+concurrency:
+  group: step3-prd
+  cancel-in-progress: false
+
+jobs:
+  deploy:
+    runs-on: self-hosted
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Configure kubeconfig
+        env:
+          KUBECONFIG_CONTENT: ${{ secrets.KUBECONFIG }}
+        run: |
+          if [ -n "$KUBECONFIG_CONTENT" ]; then
+            mkdir -p /tmp/kube
+            printf '%s\n' "$KUBECONFIG_CONTENT" > /tmp/kube/config
+            echo "KUBECONFIG=/tmp/kube/config" >> "$GITHUB_ENV"
+          fi
+
+      - name: Deploy PRD
+        env:
+          DEPLOYMENT_ENVIRONMENT: prd
+          KUBE_NAMESPACE: step3-prd
+          PUBLIC_API_ORIGIN: https://s3q.ranaze.com
+          MONGODB_CONNECTION_STRING: ${{ secrets.PRD_MONGODB_CONNECTION_STRING }}
+          AUTH_JWT_KEY: ${{ secrets.PRD_AUTH_JWT_KEY }}
+          INTERNAL_PURGE_SECRET: ${{ secrets.PRD_INTERNAL_PURGE_SECRET }}
+          STRIPE_SECRET_KEY: ${{ secrets.PRD_STRIPE_SECRET_KEY }}
+          STRIPE_WEBHOOK_SECRET: ${{ secrets.PRD_STRIPE_WEBHOOK_SECRET }}
+        run: bash .gitea/scripts/deploy-environment.sh
+